0080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x8981, &(0x7f0000000100)) 16:14:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}, 0x1000000}, 0xa) 16:14:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4}, 0x5) 16:14:44 executing program 2: [ 728.587876][ T4828] TPR Threshold = 0x00 [ 728.591950][ T4828] EPT pointer = 0x00000000a3d9301e 16:14:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4}, 0x5) 16:14:44 executing program 2: 16:14:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0x9, 0x4, 0x1400000000, 0x0, 0x8, 0x6}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) [ 728.774261][ T4867] *** Guest State *** 16:14:44 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x8982, &(0x7f0000000100)) 16:14:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}, 0x2000000}, 0xa) [ 728.801249][ T4867] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 16:14:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) r2 = dup(r0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r2, &(0x7f0000000180), 0xa) [ 728.903095][ T4867] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 728.953284][ T4867] CR3 = 0x0000000000000000 [ 728.989663][ T4867] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 729.034865][ T4867] RFLAGS=0x000b0902 DR7 = 0x0000000000000400 [ 729.049451][ T4867] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 729.078045][ T4867] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 729.092856][ T4867] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 729.102263][ T4867] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 729.111134][ T4867] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 729.119968][ T4867] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 729.128809][ T4867] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 729.137625][ T4867] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 729.146412][ T4867] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 729.155403][ T4867] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 729.164200][ T4867] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 729.172981][ T4867] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 729.180196][ T4867] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 729.188545][ T4867] Interruptibility = 00000000 ActivityState = 00000000 [ 729.195512][ T4867] *** Host State *** [ 729.199511][ T4867] RIP = 0xffffffff811b40b0 RSP = 0xffff88804bf778e0 [ 729.206213][ T4867] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 729.213537][ T4867] FSBase=00007fedb27d7700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 729.222230][ T4867] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 729.228986][ T4867] CR0=0000000080050033 CR3=00000000a3801000 CR4=00000000001426e0 [ 729.237269][ T4867] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 729.244724][ T4867] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 729.251596][ T4867] *** Control State *** [ 729.255745][ T4867] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 729.263162][ T4867] EntryControls=0000d1ff ExitControls=002fefff [ 729.269468][ T4867] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 16:14:45 executing program 0: socketpair$unix(0x1, 0x100000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[], 0x0, 0xb0900}) add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:14:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x8983, &(0x7f0000000100)) [ 729.277281][ T4867] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 729.284733][ T4867] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 729.292255][ T4867] reason=80000021 qualification=0000000000000000 [ 729.299437][ T4867] IDTVectoring: info=00000000 errcode=00000000 [ 729.305600][ T4867] TSC Offset = 0xfffffe778527dcc5 [ 729.310766][ T4867] TPR Threshold = 0x00 [ 729.314869][ T4867] EPT pointer = 0x00000000a5a9401e 16:14:45 executing program 2: 16:14:45 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$UHID_GET_REPORT_REPLY(r1, 0x0, 0x0) 16:14:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}, 0x100000000000000}, 0xa) 16:14:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x60a, 0x0, 0x0, 0x8001}) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:14:45 executing program 2: 16:14:45 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$UHID_GET_REPORT_REPLY(r1, 0x0, 0x0) 16:14:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) r2 = dup(r0) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) 16:14:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}, 0x200000000000000}, 0xa) 16:14:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x89a0, &(0x7f0000000100)) [ 729.559785][ T4909] *** Guest State *** [ 729.578295][ T4909] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 16:14:45 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$UHID_GET_REPORT_REPLY(r1, 0x0, 0x0) [ 729.642597][ T4909] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 729.677065][ T4909] CR3 = 0x0000000000000000 [ 729.689857][ T4909] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 729.719932][ T4909] RFLAGS=0x000b0902 DR7 = 0x0000000000000400 [ 729.740940][ T4909] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 729.752230][ T4909] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 729.767059][ T4909] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 729.778579][ T4909] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 729.797572][ T4909] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 729.820393][ T4909] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 729.829357][ T4909] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 729.829375][ T4909] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 729.846986][ T4909] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 729.866932][ T4909] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 729.875951][ T4909] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 729.884985][ T4909] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 729.892787][ T4909] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 729.902766][ T4909] Interruptibility = 00000000 ActivityState = 00000000 [ 729.910201][ T4909] *** Host State *** [ 729.914288][ T4909] RIP = 0xffffffff811b40b0 RSP = 0xffff8880573d78e0 [ 729.921535][ T4909] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 729.929117][ T4909] FSBase=00007fedb27d7700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 729.938142][ T4909] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 729.944759][ T4909] CR0=0000000080050033 CR3=00000000a0451000 CR4=00000000001426e0 [ 729.952970][ T4909] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 729.960528][ T4909] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 729.967304][ T4909] *** Control State *** [ 729.971544][ T4909] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 729.979043][ T4909] EntryControls=0000d1ff ExitControls=002fefff [ 729.985319][ T4909] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 729.993251][ T4909] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 730.001093][ T4909] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 730.008487][ T4909] reason=80000021 qualification=0000000000000000 [ 730.015539][ T4909] IDTVectoring: info=00000000 errcode=00000000 [ 730.021868][ T4909] TSC Offset = 0xfffffe771bd9a685 [ 730.026901][ T4909] TPR Threshold = 0x00 [ 730.031051][ T4909] EPT pointer = 0x00000000948e101e 16:14:46 executing program 0: socketpair$unix(0x1, 0x100000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[], 0x0, 0xb0900}) add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:14:46 executing program 2: 16:14:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x200040, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:14:46 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000080), 0x5) 16:14:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}, 0x0}, 0xa) 16:14:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x89a1, &(0x7f0000000100)) 16:14:46 executing program 2: 16:14:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:14:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000080)) clock_getres(0x5, &(0x7f0000000040)) 16:14:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}, 0x0}, 0xa) 16:14:46 executing program 5: 16:14:46 executing program 2: [ 730.353892][ T4952] *** Guest State *** [ 730.392972][ T4952] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 730.474352][ T4952] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 730.507460][ T4952] CR3 = 0x0000000000000000 [ 730.522067][ T4952] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 730.529943][ T4952] RFLAGS=0x000b0902 DR7 = 0x0000000000000400 [ 730.536775][ T4952] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 730.546137][ T4952] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 730.556379][ T4952] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 730.565157][ T4952] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 730.574239][ T4952] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 730.583022][ T4952] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 730.591843][ T4952] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 730.600634][ T4952] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 730.609575][ T4952] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 730.618359][ T4952] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 730.627078][ T4952] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 730.635905][ T4952] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 730.643070][ T4952] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 730.651368][ T4952] Interruptibility = 00000000 ActivityState = 00000000 [ 730.658461][ T4952] *** Host State *** [ 730.664023][ T4952] RIP = 0xffffffff811b40b0 RSP = 0xffff88805b3678e0 [ 730.670975][ T4952] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 730.678158][ T4952] FSBase=00007fedb27d7700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 730.686685][ T4952] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 730.693436][ T4952] CR0=0000000080050033 CR3=0000000086100000 CR4=00000000001426f0 [ 730.701238][ T4952] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 730.708777][ T4952] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 730.715545][ T4952] *** Control State *** [ 730.719785][ T4952] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 730.727459][ T4952] EntryControls=0000d1ff ExitControls=002fefff [ 730.733765][ T4952] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 730.741463][ T4952] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 730.748995][ T4952] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 730.756399][ T4952] reason=80000021 qualification=0000000000000000 [ 730.763478][ T4952] IDTVectoring: info=00000000 errcode=00000000 [ 730.769764][ T4952] TSC Offset = 0xfffffe76ac23b03f 16:14:46 executing program 0: socketpair$unix(0x1, 0x100000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[], 0x0, 0xb0900}) add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 16:14:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 16:14:46 executing program 5: 16:14:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 16:14:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}, 0x0}, 0xa) 16:14:46 executing program 2: [ 730.774783][ T4952] TPR Threshold = 0x00 [ 730.778919][ T4952] EPT pointer = 0x000000008ef8001e 16:14:47 executing program 2: 16:14:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x40049409, &(0x7f0000000100)) 16:14:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}, 0x0}, 0xa) 16:14:47 executing program 5: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="9cabbf0400cb0040419b80008100254588a8", 0x12}], 0x1}, 0x0) 16:14:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000001c0)={0x0, @reserved}) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @null, @netrom={'nr', 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r2, &(0x7f0000000180), 0xa) [ 731.043373][ T4997] batman_adv: batadv0: adding TT local entry 00:40:41:9b:80:00 to non-existent VLAN 1349 16:14:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x4020940d, &(0x7f0000000100)) 16:14:47 executing program 0: socketpair$unix(0x1, 0x100000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[], 0x0, 0xb0900}) add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 731.092747][ T4997] batman_adv: batadv0: adding TT local entry 00:40:41:9b:80:00 to non-existent VLAN 1349 16:14:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}, 0x0}, 0xa) 16:14:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000200)) ioctl$TCSETSF(r1, 0x541d, 0x0) 16:14:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:14:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 16:14:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0x2000000a) 16:14:47 executing program 0: socketpair$unix(0x1, 0x100000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[], 0x0, 0xb0900}) add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 16:14:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, 0x0) 16:14:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0xc0045878, &(0x7f0000000100)) 16:14:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000001c0)={0x6, 0x7, 0x0, [{0x7, 0x1, 0x80, 0x10001, 0x5, 0xa4, 0xffffffff}, {0x8, 0xffffffffffffffff, 0x40, 0x3, 0x6, 0x5b, 0x8000}, {0x4, 0x3, 0x2, 0x6, 0x8, 0x7fffffff, 0x4}, {0x9, 0x1, 0x2, 0xdc10, 0x2, 0x2, 0xb}, {0x9, 0x7, 0x2, 0x2d7, 0x101, 0x0, 0xffff}, {0x3, 0xfffffffffffffffc, 0x5, 0x7ff, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x380000000000}, {0x8, 0x4, 0x1, 0x4, 0x7, 0xcf72, 0x400}]}) 16:14:47 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xfffffffffffffffc, 0x400) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000100)=[0x8, 0x4]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) r3 = semget(0x0, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000002c0)={0x7, 0xffff, 0x0, 'queue0\x00', 0x2}) semctl$GETPID(r3, 0x2, 0xb, &(0x7f00000001c0)=""/219) sendto(r1, &(0x7f0000000380)="d9908d3bc3fc0b16f1d7c6fa039e41a50af8d962583ec7e35d8e8c79ba9294124eb4f25e4498b9edded771152944f8b1739d887cb064338889b91f3253763e259cbbccb22dfc463867b84cbd45bec353415d754c6ca4a2a623733d", 0x5b, 0x5, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0xffffffff, 0x7d, 0x4, 0x1000, 0x6f8}) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000400)={'filter\x00'}, &(0x7f00000000c0)=0x54) bind$bt_rfcomm(r2, &(0x7f0000000180)={0x1f, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}}, 0xfff4) 16:14:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 16:14:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0xc0045878, &(0x7f0000000100)) 16:14:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0xc0189436, &(0x7f0000000100)) 16:14:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:48 executing program 4: r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x139) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x7, &(0x7f0000000140)=[{0x7fffffff, 0x5, 0x5, 0xd100}, {0x8, 0x0, 0x1, 0x2}, {0x8, 0x6, 0x7, 0x2}, {0x7fff, 0x1ff, 0x8, 0x9}, {0x1, 0xa1, 0x1000000000000000, 0x85e}, {0x6, 0x7450, 0x101, 0x23}, {0x8, 0x9, 0x94, 0x81}]}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp\x00') ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f00000000c0)=0x7ff) socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) lsetxattr$security_smack_entry(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='security.SMACK64\x00', &(0x7f0000000340)='![wlan0vmnet1mime_type\x00', 0x17, 0x3) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r3, &(0x7f0000000180), 0xa) r4 = semget(0x1, 0x1, 0x10) semctl$GETZCNT(r4, 0x4, 0xf, &(0x7f00000001c0)=""/182) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)=0x3) 16:14:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0xc020660b, &(0x7f0000000100)) 16:14:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 16:14:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x81}}, 0x10) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:48 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 16:14:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 16:14:48 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 16:14:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x733a9f7, @mcast2, 0x7}}, 0xffff, 0x6, 0x7, 0x0, 0x7eb15774}, &(0x7f0000000100)=0x98) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000280)={{0x1ff, 0xa890}, {0x6, 0x6}, 0x5, 0x4, 0xffffffff7fffffff}) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000140)={0x139, 0x5}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x7e38}, 0x90) write$vhci(r1, &(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, "7036a1ccacea7dcbeef6cce3619b09972b6560efd2e4c7a6403e6280849121f04604acbc1cc0d0a3059070e7a46613cbeb5bbe3f3432f5b63f004ca11f4ad44e7ec77fee325a9940fdc9"}, 0x4b) 16:14:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x109800, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:14:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) [ 732.537909][ T5109] QAT: Invalid ioctl [ 732.554627][ T5109] QAT: Invalid ioctl 16:14:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffff7fffff, 0x1ff, 0x0, 0x2}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x9) 16:14:48 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 16:14:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x43, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8, 0x20, 0x5, 0x8, 0x25618990}) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:14:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 16:14:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000000c0)={[], 0x2, 0x6, 0x8, 0x0, 0x2, 0x100000, 0x107002, [], 0x9a}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) pwrite64(r0, &(0x7f0000000280)="8048b6ae8eddb5dac7100a3844a294fdd1f348057c8fb40404c579ad070cbf6b9384da48a08f902607cb1535c825159298e2db978c724d6720dc2af426251357c36931088df79c4caf0fce843abb48b3312e4850d85467c37880579cca5c99106447a650926dedda7f5e85af48f4efe515733f8a95c5eb473cf4048febc950583b09019d05496d0e2d6d787be0ae53890d5e281f6bccf85fb37c0dd4e1761abbfcb6998bbdd187a60023fc964457", 0xae, 0x22) 16:14:49 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 16:14:49 executing program 5: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d3, &(0x7f0000000100)) 16:14:49 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/vhost-net\x00', 0x2, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000600)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000740)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000780)={{{@in6=@ipv4={[], [], @multicast1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000880)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f00000009c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@ipv4, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000b00)=0xe8) r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/capi/capi20ncci\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x41, &(0x7f0000000dc0)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) lstat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getegid() fstat(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000001000)=ANY=[@ANYBLOB="02000000010001000000000002000600", @ANYRES32=r1, @ANYBLOB="02000500", @ANYRES32=r2, @ANYBLOB="02020400", @ANYRES32=r3, @ANYBLOB="02000300", @ANYRES32=r4, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="02000400", @ANYRES32=r6, @ANYBLOB="02000200", @ANYRES32=r7, @ANYBLOB="02000200", @ANYRES32=r8, @ANYBLOB="02000400", @ANYRES32=r10, @ANYBLOB="0400dc800000000008000700b672457c8b69e61e0a50db4d8129b18aba272567d6ed6f0c9a7021634812f7351ab7138c54f9d7433e9c86d86b0fa984ae6e4f566a107f57f0078e741f7b5cdd555ec3b5cf5c461dad19fa0e3de4c53a0de0cec646be8d58805724ca0c023d2b6d56c959fc1c7b827e6f7a4f724cccb832800715a80edf99f0feb02312aacaff1735cd06ca5c582ff24b28e99eb0eb82febb4bfbd227306e7ef19cb7a477bb8fc2bea0b1606beb0491c18d54936fad901ae81f761b565ed4b0fedc8decdce255b254d54cce3a1cb67ec8b72753", @ANYRES32=r11, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=r14, @ANYBLOB="10000200000000002000070000000000"], 0x8c, 0x3) r15 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x8000, 0x0) ioctl$EVIOCSKEYCODE(r15, 0x40084504, &(0x7f0000000d40)=[0xc3b3, 0xffff]) flock(r0, 0x1) r16 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80000, 0x0) setsockopt$sock_int(r16, 0x1, 0x22, &(0x7f0000000040)=0x3, 0x4) ioctl$FS_IOC_GETFSLABEL(r16, 0x800452d2, &(0x7f0000000100)) 16:14:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000380)=0x40) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:logrotate_exec_t:s0\x00', 0x26, 0x2) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0xef, 0x4, 0x1, "4c1f3ccd698121c861e1df52da388ffc", "84af386bff6ea5fed53ae67b956170ad80d1abd8db9e7b662cc64d15af3912eb09fed325ac7b0a4c4f09dc1010c65e7b05ce4c7067cb26ff801e9c236ea91ade693a74399d7fdb6ee1b768c555cd520ec923b2d0899f8f4b32b20550180af39441cfbebcc3f8955ab4710a6047a21a0a48a2be8e95677ed81ef47cad754c2bf8320bf5b1dcec693a0826c4e257c6639b232723880f17050be2c6d73454308d04b4a5668d92220577c101fa2479af3dcb14889f55eb9362a39dc0f8657d263425c6b839f6af95a4280351f8cc04b428bd8797b009d7bd96467488"}, 0xef, 0x2) lsetxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x3) 16:14:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2, &(0x7f00000000c0)="ebdb1f123c123f3188b0703d66d5108da9b58d94b8cd2aba35373520c6dd42d69ca42275001c1bf3b24a35f0410c9d5c5555ad38f1e12e595977b5f2fea9393fc3380a11ce59946ad70269db8c8f68b575cd6f6f3e4eb1a045000039a65ebc9d0a47885b88d126b5251f9d50c56e64a762d4d96e7e0f0b8bdfb97b2b8877914966c94524322c118d06b4b5ff92836db416b31ea73b15a7744a0e3119c919e5499b1fc003c6a3cccbf1b1a1d2e045eec8") r1 = dup(r0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:49 executing program 0: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) 16:14:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:49 executing program 5: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d3, &(0x7f0000000100)) 16:14:49 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000180), 0xa) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000040)={0x2, 0x4, [{0x8, 0x0, 0x1}, {0x100000000}]}) 16:14:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe8, r3, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xd4, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9bd2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x10) getdents64(r2, &(0x7f00000000c0)=""/73, 0x49) 16:14:49 executing program 0: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) 16:14:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xfffffffffffffffe, 0x3) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x800, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000140)={0x2, 0x0, [{}, {}]}) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x934e, &(0x7f00000001c0)=0x2) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x9d, "ec8f897d14395275fb20829fcdab8879057acd6e16c5dc393f7de9a91c60b25cae6f6be2a6aab0f09f1b98ceaa624a5eaabd13231445ed6d28aa100822d049dcafa43ede6a92ae0813115a9ca814afb1880a077efcedb0633f4e5275ae051cd46f8e6539a0e8977258a44a8677541f5baf63ed80fa23b26fa70977d4c16e2ec8836488066d83f31fcc965351e862915c5d77718b3a46aafae199282c2c"}, &(0x7f00000002c0)=0xa5) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x5fd}, 0x8) 16:14:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) write$tun(r1, &(0x7f0000000040)={@void, @void, @arp=@generic={0xffff, 0x19, 0x6, 0x2, 0xf, @broadcast, ')1', @empty, "047b9a692d740f324504dafb31c937ee"}}, 0x26) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000000c0)={r2, r3/1000+30000}, 0x10) 16:14:49 executing program 5: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d3, &(0x7f0000000100)) 16:14:49 executing program 0: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) 16:14:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:14:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4, 0x30002) getsockopt$inet6_buf(r2, 0x29, 0xdf, &(0x7f0000000240)=""/225, &(0x7f0000000340)=0xe1) splice(r0, &(0x7f0000000080), r0, &(0x7f0000000180), 0x401, 0x8) ioctl(r1, 0x3, &(0x7f00000001c0)="0adc1f123c123f3188b070") symlink(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={r3, @rand_addr=0xffff, @local}, 0xc) r4 = dup(r0) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f00000000c0)={0x2b, 0x3}) recvfrom$llc(r1, &(0x7f0000000040)=""/54, 0x36, 0x2102, &(0x7f0000000080)={0x1a, 0x300, 0x7fff, 0x3, 0x273, 0x80, @broadcast}, 0x10) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}) 16:14:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:50 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 16:14:50 executing program 3: r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000200)={0x401, 0x4, 0xfff}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) 16:14:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 16:14:50 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x78000080, &(0x7f0000ffe000/0x1000)=nil) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000280)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee01, 0xee01, 0xee01, 0xee01]) r5 = getpgrp(0xffffffffffffffff) r6 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f00000002c0)={{0xd89, r1, r2, r3, r4, 0x80, 0x1}, 0x5, 0x8, 0x1, 0x3, r5, r6, 0xd8a}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r9 = dup(r7) bind$bt_rfcomm(r9, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 16:14:50 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 16:14:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x261}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000140)) 16:14:50 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x9b, 0x121001) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f00000000c0)=""/29, &(0x7f0000000100)=""/115, &(0x7f0000000180)=""/188, 0x4000}) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000140)=""/143, &(0x7f00000002c0)=0x8f) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000900)="0adc33313c123f3188b070eb783972616003116e99d357dfa6c0421157033004f0cae1e015587a8888df0d894bd8556ea6e14f0f497663aff35e2081224d2a3774c21e4311506e8d0977181f2bf8cdfb598d5688a15c2310cf0b3a86839b87d81f58624d9e235014ef33e729206155c337eb5bbc9ba54c7cea95eebbd65bfe6000000000000000000000000000000000") r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) write$9p(r2, &(0x7f00000000c0), 0x0) r3 = dup(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000000c0)={0x80000000}) socket$key(0xf, 0x3, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r3, &(0x7f0000000380)="9bd6f76bcf2ed3eee363886187ab3c82aebee70356c6962c517d72a33a3682ddb5fbb9a6fa67f3ab5e85fcb4df82957d6e4fe37d74f7b85fdcfd1f6688ad64408f2872cbdd832bcf0074d4301086dac64d836137e410e8a52fbea81b45dd7a91ec1e13acdac8f6d17f29201efaabeff26042e1b9c732128fb66fcdb1ef299537447c1daa127b14cc23da5b2d0943bf9e3ab9c5b77444df9adce588a979a5c8030e367a724776ca42771df865fe060855fe869d9cd31478afd4129beea9e9074a7c2365b76b7275dc81703fd0abe8296db9e0b59e9144678364b9fb7e406c8984afd869b7ee71964a836822ad2e196c314a6100ae95b841", &(0x7f0000000480)=""/69}, 0x18) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x3, 0x200000) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40800040}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00032abd7000fcdbdf25050000000800050029835a25"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44010) 16:14:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) open$dir(&(0x7f0000000200)='./file0\x00', 0xc01, 0x88) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000040)={0x5, 0x2, 0x3, 0x7, 0x7}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f00000001c0)=""/25) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) 16:14:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000200)=@in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x1f}, 0x5}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x1000000000004804}, 0x407fc) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:14:50 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 16:14:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 16:14:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9df6, 0x0) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:50 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d3, &(0x7f0000000100)) 16:14:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) write$P9_RLERRORu(r1, &(0x7f0000000040)={0xd, 0x7, 0x2, {{}, 0x4}}, 0xd) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:14:50 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) 16:14:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0xffffffffffff9a3a, 0x2000) r2 = dup3(r0, r0, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000003c0)={0x5001, &(0x7f0000000380), 0x0, r2, 0x4}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="ae11c0f1d1ff8fc3910a875632fd5786c6c6617ff8d6e64bb1b6a6a144bf6e6f8f10c721b39936d366587e1bdf81e584f868f03bec8ff8a99410dbb6dd2f4afb3f56b59654678c942c0a44e8c115ad2d43940e573b304c9db60ec00266550cdcbb488b2f179712f9de7160a24b528fcc68d81aa190efa7024c57f8a3ba7d342ab080ff0c23531d3150346f107df3f2d4a9c8ee57e3b42352d35a59d93576737ad817ac91e0e8b98d1b4199b0e38f444c176cebaea5b18843b75039cba2c329896f10cd92fb880f18b2bbc31907896ba6800e", 0xd2) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3, 0x8a9d, 0x3a, 0x100000001, 0x93e}, &(0x7f00000000c0)=0x14) getsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000200)=""/152, &(0x7f00000002c0)=0x98) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f00000001c0)=0x6, 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000100)={r4, @in6={{0xa, 0x4e24, 0x20, @loopback, 0x7}}, 0x3a, 0x3}, 0x90) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, &(0x7f0000000300)="1057fba1eebb9fa31d51900d6a40fe42a4e4e466", 0x14) 16:14:50 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d3, &(0x7f0000000100)) 16:14:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000000c0)={@loopback, r2}, 0x14) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:14:50 executing program 2: ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0xfffffffffffffe9b}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r1 = dup2(r0, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, r1, 0x0, 0x1, &(0x7f0000000300)='\x00'}, 0x30) mq_notify(r1, &(0x7f00000000c0)={0x0, 0x1c, 0x8a, @thr={&(0x7f0000000380)="7469650017ccb419c3de95e7196308ff86e615de6a03d8e9013e2c296468411b4126cbda9855a1853c6e029ff173", &(0x7f00000003c0)="5acdb44d8f4a76101fdf9f28653fdc4210f56edf1a851b1c6207f40e3170302ba5512baa5a288bdcdb8fb47dbacec863be099dc8504fcee69cb9839506c624c96009320ff8dfd1fced73bf21d97b4b53a42e4fc61e2dcba88a124ffaf7c8ebdc65a6267d5529c4179417f02265d07fe0"}}) 16:14:51 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) 16:14:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x9, 0x101000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000004}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x270, r3, 0xa10, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffff7}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf43}]}]}, @TIPC_NLA_LINK={0x70, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffc00}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2ac}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xea}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}]}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x82}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4b}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r4 = dup(r0) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) r2 = inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x8a2) inotify_rm_watch(r1, r2) 16:14:51 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d3, &(0x7f0000000100)) 16:14:51 executing program 2: ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:14:51 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) 16:14:51 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, 0x0) 16:14:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = dup(r0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x10000}, 0xc) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffff7f, 0x201ff, 0x3, 0x404, 0x0, 0x6}, 0x800}, 0x77) 16:14:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000140)=0xe8) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x108, 0x6, 0x5, 0x5, 0x2f, @broadcast}, 0x10) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x3, 0x441, 0x5, {r3, r4/1000+30000}, {0x0, 0x7530}, {0x1, 0x1ff, 0x7fffffff, 0xff}, 0x1, @can={{0x1, 0x2, 0x81, 0xffffffffffffffff}, 0x4, 0x1, 0x0, 0x0, "a71b0cae3f06f6d7"}}, 0x48}}, 0x20000040) 16:14:51 executing program 2: ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:51 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, 0x0) 16:14:51 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, 0x0) 16:14:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180)={0x1f, {0x0, 0x0, 0x3ff}}, 0xa) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 16:14:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x204400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$P9_RREADLINK(r1, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r2, 0x9}}, 0x10) r3 = open(&(0x7f0000000240)='./file0\x00', 0x401, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000e00)={0x0, 0x6}, &(0x7f0000000e40)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000e80)={r4, 0x1a2200, 0x30}, &(0x7f0000000ec0)=0xc) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f00000003c0)) fstat(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='9p\x00', 0x400, &(0x7f0000000d40)=ANY=[@ANYBLOB="74725f6e733d756e69782c64296f3be4da21999007ca9789347e69656275673d3078303015303030303038303030303030312c6d6d61702c726f6f74636f6e746578743d75736572d276c444ae120ca21f787dde61636b66737472616e73696e75782c7063723d30303030303035b030303030303030303030323974792c657569643e0000000010000000000000000000", @ANYRESDEC=r5, @ANYBLOB=',\x00']) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x80000000, @ipv4={[], [], @empty}}}}, 0x84) 16:14:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000140)=""/153) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x52be, &(0x7f0000000100)="000000000000000071b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3, 0x0, 0x103, 0xe8c3}, 0x2000000000000}, 0xa) 16:14:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:51 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, 0x0) 16:14:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) semget$private(0x0, 0x7, 0x40) 16:14:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:51 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, 0x0) 16:14:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = socket(0x10, 0x1, 0xfcd8) sendmsg$nl_crypto(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40200002}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=@getstat={0xe0, 0x15, 0xb08, 0x70bd28, 0x25dfdbfd, {{'wp256-generic\x00'}, [], [], 0x2000, 0x2000}, [""]}, 0xe0}, 0x1, 0x0, 0x0, 0x40005}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000080)={&(0x7f0000000380)=@in={0x2, 0x4e24, @rand_addr=0x5}, 0x1c, 0x0, 0x29a, 0x0, 0xfffffffffffffd7d}, 0x0) sendmsg$nfc_llcp(r1, &(0x7f00000008c0)={&(0x7f0000000300)={0x27, 0x0, 0x1, 0x3, 0x4, 0x91b1, "45e1f553133f716701c7e05066dfc37de7ab9a718f75a6c24e659964160cccbbff8a544630e67e9f772ba72895c423fbadcd32621427d869192319051b16a7", 0x20}, 0x60, &(0x7f00000007c0)=[{&(0x7f0000000380)}, {&(0x7f00000003c0)="2932075d7e23c3f84103b08a4682604f0fdcb18c7814db3ece0153f379e01854b48e3b984fef0d9baf769f92424c8404e2a6a3c7226166785d5650aabcaac863d7adaf6fd211179c2bf2", 0x4a}, {&(0x7f0000000440)="317ca23b413fc6a588681f67bcadd2a985506e2584fcd7a0d7ff849ffe73378e976f0271c19948bd810ceee3cf9bce1eb6154f9ded00c5df6f7035e02997f6b4569a38e5d3593307580c99704e73335a1c8b7bd360f9244c9728be19dd965df8b062be62a0963e9cae4debb4f867e4ae6bf25a", 0x73}, {&(0x7f00000004c0)="49c00ba4eed4781915f9d9b99b30260c81dd63c2ee91a318ebbda17e3f37a55cc2ca21dd7bae505adc2fa8ddf3673be73f5bdf3e0434a0554752e2873148575298b83cadc3a437c4d9d3f8514b97d8b4a47f8095f39fbb9da43f94bb7fcedf9ad99ee71539d9003573fbe065b13891567bf1a7610f4fcbea64c0a338ccdcf917790d81e2e5d9377e6b20ea0fa1046ee22115a56b820a0cd4748612b5ffe86b48da5c84a1b0a29c1a82d1cbd075cddd43ef0232f93bee", 0xb6}, {&(0x7f0000000580)="1754614f27a8b2ee98390552efcd78a59d76dfa6f070eb3e592298eb56e6e8482d3e8b3a4456b50a7a6e6503c6e55cebce6c2a41f8d0541f4433ae62ecba1c750cb68a5b6899bed715", 0x49}, {&(0x7f0000000600)="973ad911cb632bef4e0ef728e52712b930bb2d16ecb60327feeb8fbc5652fbcc3c7ab90d5c74fb8019022ea61163cc8b2b3c5c2d33b79280224a40802cc85e1ce15e65aac6ccfce06cbe9d338d0b4fec350c38", 0x53}, {&(0x7f0000000680)="5e300f15c05f3ff1100b996209023ea4aac74b89df242ee518fcb87877611a237529d434", 0x24}, {&(0x7f00000006c0)="54bb88e8b8e40e7dc5be4e73b42788e336f45965861915cf613438d30bcb6145d99eac86bb961bf7e761c4db9af7c0ef38c26fb1f68f9463e91f8403097692df0fcda9b18d6f52959c5843f5ca70d450feb162a84077355065dab754a0dfbd4f70bfc3dd1e3f5c79aae1c67b831c5b92e38dccc074b705701edb50c6f5a7f4f644b84e6160f2ab0d7bb9fb1c01e27b58216cfb223308f7c7e1b3c9dc4ed3d698555cf3e3c8b2e26c87efe9fa57", 0xad}, {&(0x7f0000000780)="62eb6c1bb0ae1429e7efcfe113267a3d3a22e568c2", 0x15}], 0x9, &(0x7f0000000880)={0x28, 0x117, 0x0, "48421316b927680b22085d3e31fa23644e213165"}, 0x28, 0x4004}, 0x2000c801) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000a00)) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0xa0800) fchmodat(r2, &(0x7f0000000140)='./file0\x00', 0x21) 16:14:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:51 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, 0x0) 16:14:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x6000, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000080)=0x8) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xfffffffffffffffe, 0x1ff}}, 0xa) bind$bt_rfcomm(r2, &(0x7f0000000180), 0xa) 16:14:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x4, &(0x7f0000000040)={0xfffffffffffffff9}, 0x8) 16:14:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101002, 0x0) 16:14:52 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, 0x0) 16:14:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x100000000, 0x101000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000200)={0x318, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x88, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e2e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff037}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}]}, @TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcd1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x109}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffc01}]}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0x11c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x80, @ipv4={[], [], @remote}, 0xffff}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff0001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xca}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffe1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8000}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x71}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0x318}}, 0x40000) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:14:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)=ANY=[@ANYBLOB="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"]) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) execveat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000001c0)='wlan1%selinuxcgroupnodev*&@(\x00', &(0x7f0000000200)='.+%\x00'], &(0x7f0000000340)=[&(0x7f0000000280)='\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='GPL\x00'], 0x800) bind$bt_rfcomm(r1, &(0x7f0000000180)={0x1f, {0x7ffffc, 0x0, 0x0, 0x0, 0x3ec}}, 0x0) 16:14:52 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, 0x0) 16:14:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000000000), 0x4) 16:14:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xfffffffffffffff2) 16:14:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:52 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, 0x0) 16:14:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) socketpair(0xb, 0x6, 0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet_sctp(r1, &(0x7f0000000540)={&(0x7f0000000040)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="951e9b027295c8560a914578338268b68e7c626747fe3dbb140d544376c477343f988587440b8810b31e788350dcb3e661c20adc9f194029a1ccf4d2bc2689f70f1775e1d4e184268f778fb0665f69c038affed6987468995c2084a8623cf345678cf67ff2edeef500eefc689f51e4274e33802e9e95885a5180059a0f2e6d37de88e42a8b", 0x85}, {&(0x7f00000002c0)="6203794a8c796bc800e041c383b7d6bac7b91c967a3aed544e52fb751433ce157ed3306f68c8cbcee2e8677795c06f29eb785462164845fea7040d80c3d24521ec1274aa0ddeebff0b06299ef08e68adba301a8664878dcd56eaa97278053e11c5b8779588ab47b25e41013559448a67ad511e801164760751bf4a5c80079b2652135dd32d148a07a46638c48cfd988693c2ee516db015afdeb585e072e15be2aaf2547e6c252bb133b02bb7cd67d1ed1e938ed26c11a3f5d6e018f0fe8e444baf6616cdb6ff08cec602aaeab269b8d6bba5100b9eb63b94aa057a7bbe299fd7b86c2c9a33fa6ceb45b62af59f11", 0xee}, {&(0x7f00000003c0)="f39f7ed4b9675944d0c4222d1ec1de4bd84ea6d21b13a51a5c4fde461882b3963b7ce8f57e95fe5d17ce7a8dde1612a221be4a77291576a18cbb8ac891f9946caad21ff287dcb0c027bff81309ae2aeb8cae98bbcff8291a1c76adca607966c94faeb024ef792bcfa8eb661a2fa36946b609dab3b7abcce0837a2d569b1386edb6ee836b8e8559c02c67ccef6653", 0x8e}, {&(0x7f0000000480)="40b27b84c268619507234d0a1ac2a965196cbdc5a50cca75cc195c4632647695d8c43c96c1d960e1d3182fbf1060b5a4b645cf86533817a3cac9e8815478f7fb6479e1b346c60061371443c605138ffdb88d9fca849ded61041d807abfc368001e438e076dca110d6cc17afce5b4e40cb0a35eaa2fac84cb3e6f01", 0x7b}], 0x4, &(0x7f0000000500)=[@dstaddrv4={0x18}, @authinfo={0x18, 0x84, 0x6, {0x4}}], 0x30, 0x854}, 0x40000) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:14:52 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:14:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:52 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000000c0)={0x29, 0x6, 0x0, {0x4, 0x4}}, 0x29) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:52 executing program 0: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d3, 0x0) 16:14:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x30000, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6d9d}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004045}, 0x40010) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) epoll_pwait(r1, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x4, &(0x7f0000000380)={0x6}, 0x8) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:14:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000340)={0x1, 0x7, 0xa, 0x80000001, 0xb6f, 0x1, 0x7, 0x2, 0x0}, &(0x7f0000000380)=0x20) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000003c0)=r3, 0x4) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000002c0)={0x7b, 0x0, [0x1ff, 0x200, 0x100, 0x1]}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000001c0)='hwsim0\x00') r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x9, 0xf46}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={r5, 0x1}, &(0x7f0000000180)=0x8) r6 = dup(r0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000200)=r5, 0x4) syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1ff, 0x200000) bind$bt_rfcomm(r6, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:14:52 executing program 0: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d3, 0x0) 16:14:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x9, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x100) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 16:14:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0xf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x360, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:14:52 executing program 0: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d3, 0x0) 16:14:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000040)=0x8) 16:14:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, 0x0) 16:14:53 executing program 3: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x4) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) 16:14:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000140)={0x1f, {0x0, 0xfffffffffffffffe}}, 0x4c5) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r2, 0xe0f4}, &(0x7f0000000100)=0x8) 16:14:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, 0x0) 16:14:53 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400000, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000100)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, 0x64}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r3, &(0x7f0000000180), 0xa) 16:14:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000400)) 16:14:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:14:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, 0x0) 16:14:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @multicast1}, {0x1, @local}, 0x20, {0x2, 0x4e23, @local}, 'syz_tun\x00'}) 16:14:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x44000) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x10000) 16:14:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000100)={r2, r1, 0x3}) 16:14:53 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d3, 0x0) 16:14:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:14:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x40080, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @remote}, @in6=@remote}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x100000000}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000480)={r2, 0x9, 0xf7, "4991b28ce748cd3a1209049b685986ce3f21809fcc8c6e884fc16e9c7072ddcf3c8dde4b87df752c1521b7e2821151e14ac8959964605e4fbc34c567f0d6ffb8753f60bb9f146c9fc1604c6173634852cd9ce51f8c278705e9ebc8adccaa05adfe8c037e7361e720b9fef5451440ed404a808154fc21a9bb7ce6fce60e3782c422f32b62b116f853ac9b3d8d61f7e3e16164482cd108bcf5869675551e2a87d1dc47d23c4719adbc405f6c37c98620804e73c269dbfdcd1a142e03edd8e6914dfd9d7b59015c975f6349647f76b753e1cfbb30bfb9ac236244344db5d0ab88ad778f8757edf389b3ff7b19ca3e23c4476db4403ae4adb1"}, 0xff) sendmsg$nl_generic(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="146f00083e00040029bd7000fedbdf251a000000"], 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x3, @mcast1, 0xb000000000000000}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffe07}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x8a80) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000680)) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000200)={0x7, 0x80000000, {0x55, 0x5, 0x0, {0x4}, {0x10001, 0xfffffffffffffff9}, @cond=[{0x4, 0x100000000, 0x10001, 0x6, 0x200, 0x6}, {0x4, 0x6, 0xffffffffffffff95, 0x1000, 0x100, 0xc363}]}, {0x56, 0x9, 0x20, {0x0, 0x200}, {0x6, 0x8000}, @period={0x5b, 0x2, 0xedeb, 0x7, 0x2, {0xffffffff, 0x5, 0x6, 0xfffffffffffffff7}, 0x7, &(0x7f00000000c0)=[0x18000000000, 0x7ff4, 0x2, 0x42cc, 0x8, 0x7f, 0x0]}}}) 16:14:53 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d3, 0x0) 16:14:53 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x9, 0x0, 0xf5, 0x4, 0x6, 0x7, 0x8, 0x5, 0x8, 0x5, 0x9}, 0xb) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000180), 0xa) 16:14:53 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000480)=0x0) ptrace$getregs(0xe, r0, 0x0, &(0x7f00000004c0)=""/252) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000040)='!\'nodev\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000200)='vmnet1\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='wlan0($\\]*ppp1^\x00'], &(0x7f0000000340)=[&(0x7f0000000300)='\\\x00']) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-monitor\x00', 0x800, 0x0) r2 = syz_open_dev$media(&(0x7f00000003c0)='/dev/media#\x00', 0x9, 0x0) fanotify_mark(r1, 0x2, 0xcc31dd09b7e03cdd, r2, &(0x7f0000000400)='./file0\x00') mknodat(r2, &(0x7f0000000440)='./file0\x00', 0x8020, 0xd23a) 16:14:54 executing program 5: ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:14:54 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d3, 0x0) 16:14:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000040)) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x8}, 0x7}, 0xfffffffffffffc23) bind$bt_rfcomm(r2, &(0x7f0000000180), 0xa) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 16:14:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xa000, 0x2) accept$alg(r1, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x100000001) r2 = socket$inet(0x2, 0x800, 0x8001) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) sendmsg$inet_sctp(r2, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x400000000000) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f61fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f000070aef1)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r4, &(0x7f0000004740)=[{{&(0x7f0000000080)=@rc, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffe36}}], 0x1, 0x0, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000040)={@dev, @remote, @multicast1}, &(0x7f00000000c0)=0xc) 16:14:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008916, &(0x7f00000000c0)="0adc1f123c123f3188b070") r2 = dup(r0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 16:14:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:14:54 executing program 5: ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:14:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x800}, 0x4}, 0xa) inotify_init1(0x0) 16:14:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x840) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:14:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 16:14:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x432400, 0x0) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) getgid() 16:14:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000002c0)=""/246, &(0x7f00000003c0)=0xf6) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x1c000, 0x4, 0x0, 0x7ff, 0x7, 0x1ff, 0x1f, {0x0, @in6={{0xa, 0x4e23, 0x8, @mcast1, 0xa8}}, 0x1, 0x81, 0x81, 0xfffffffffffffffc, 0x1}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e23, @remote}}, [0x9, 0x7ff, 0x2, 0x8, 0x5, 0x1, 0x69, 0x7fffffff, 0xffffffffffffff9d, 0x7c, 0x8, 0x3, 0x8, 0x1f, 0xcdf8]}, &(0x7f0000000140)=0x100) 16:14:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:14:54 executing program 5: ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:14:54 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:14:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffff2405, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180)={0x1f, {0x0, 0x22b6, 0x0, 0x0, 0x80}}, 0xa) 16:14:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:14:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:14:54 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:14:54 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x100, 0x0, 0x10001, 0x8}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000040)={r1, 0x1f}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3, 0x4, 0x4, 0xffff, 0x0, 0x7, 0x2, 0xa, 0x278, 0xc690, 0x1, 0x8, 0x80, 0xab, 0x8, 0x5, 0x3, 0x0, 0x2, 0x5, 0xfffffffffffffffb, 0xbe, 0x100000000, 0x3000000000000000, 0xf6, 0x1ff, 0x2, 0x1ff, 0xffffffffffff7fff, 0x6, 0x1f, 0x7fff, 0x1, 0x0, 0x400, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x0, 0x8}, 0x120, 0xffffffffffff677a, 0x0, 0x4, 0x7, 0x95d, 0x5}, r3, 0xa, r0, 0xa) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000100)) 16:14:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f00000000c0)={0x0, 0x0, {0x401, 0x800, 0xfffffffffffffffc, 0xed0}}) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) connect$nfc_llcp(r1, &(0x7f0000000040)={0x27, 0x0, 0x2, 0x3, 0x6, 0xff, "ae40c27b0eca6078f958d6a9c6abe068c7cfdfe2b608df410809aa2b6cddf9de56e96f7b1f2c3212524ca0e11091af34bc03e689fc9c40ea0533307a5643b3", 0x15}, 0x60) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 16:14:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 16:14:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") prctl$PR_GET_SECUREBITS(0x1b) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) mount(&(0x7f0000000040)=@sg0='/dev/sg0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='nfsd\x00', 0x0, &(0x7f0000000140)='\x16\x00') 16:14:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 16:14:54 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:14:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:14:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040), 0x4) r1 = dup(r0) getsockopt$llc_int(r1, 0x10c, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000140)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)) 16:14:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20020000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x202, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x6, 0x6, @udp='udp:syz2\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000804}, 0x4845) r4 = dup(r0) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x40) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xee01]) write$FUSE_ENTRY(r1, &(0x7f0000000380)={0x90, 0x0, 0x8, {0x4, 0x0, 0x7, 0x2, 0x7, 0x4, {0x6, 0x1, 0xffffffffffffff2d, 0x6, 0x7, 0x400, 0x40, 0x6, 0x0, 0x36f, 0x1ff, r2, r3, 0x1, 0x1ff}}}, 0x90) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) unlinkat(r4, &(0x7f0000000040)='./file0\x00', 0x200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000440)={0x1, 0x100000000, 0x9, 0x3, 0x20}, 0x14) ioctl$KVM_SMI(r4, 0xaeb7) 16:14:55 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x100000000, 0x101000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000200)={0x318, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x88, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e2e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff037}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}]}, @TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcd1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x109}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffc01}]}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0x11c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x80, @ipv4={[], [], @remote}, 0xffff}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff0001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xca}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffe1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8000}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x71}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0x318}}, 0x40000) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:14:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x80000000, 0x81, 0xffffffffffffcaf8, 0xbd, 0x12, 0x4, 0x800, 0x7, 0x5, 0x0, 0x8, 0x7ff}) 16:14:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 16:14:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x80000001}}, 0xa) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x7b7, 0x8000, 0x6, 0xfffffffffffff001, 0x3f, 0x2}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @mcast2}, 0x3) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:14:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:14:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') 16:14:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040), 0x4) r1 = dup(r0) getsockopt$llc_int(r1, 0x10c, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000140)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)) 16:14:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 16:14:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) lseek(r0, 0x0, 0x7) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001340)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000040)=0xffffffffffffff23) write$P9_RLOCK(r2, &(0x7f0000001300)={0x8, 0x35, 0x2, 0x1}, 0x8) r4 = accept4$inet6(r2, &(0x7f0000001180)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f00000011c0)=0x1c, 0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001100)={0xa3, 0x1f, 0x1, 0x0, 0x7fff, 0x6, 0xffffffffffffffe0, 0x3, r3}, &(0x7f0000001140)=0x20) fcntl$getownex(r4, 0x10, &(0x7f0000001200)={0x0, 0x0}) prctl$PR_SVE_SET_VL(0x32, 0x1a911) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001240)={0x0, 0x0}, &(0x7f0000001280)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000012c0)={0xd863, 0x401, r5, 0x0, r6, 0x0, 0x100, 0x86}) 16:14:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:14:55 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x78000080, &(0x7f0000ffe000/0x1000)=nil) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000280)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee01, 0xee01, 0xee01, 0xee01]) r5 = getpgrp(0xffffffffffffffff) r6 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f00000002c0)={{0xd89, r1, r2, r3, r4, 0x80, 0x1}, 0x5, 0x8, 0x1, 0x3, r5, r6, 0xd8a}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r9 = dup(r7) bind$bt_rfcomm(r9, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x4, @random="d156d71ba353", 'team0\x00'}}, 0x1e) sendmsg$can_raw(r1, &(0x7f0000000100)={&(0x7f0000000040), 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{0x1, 0x7fff, 0x0, 0x2}, 0x8, 0x2, 0x0, 0x0, "f92a8527ac97aebc"}, 0x10}}, 0x4000000) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180)={0x1f, {0x0, 0x0, 0x0, 0x4000000000}}, 0xa) 16:14:55 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001600)='/dev/zero\x00', 0x80, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x7, 0x3}, &(0x7f00000004c0)=0x90) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000580)={0x0, 0x2, 0x7, [0x200, 0x7, 0x6, 0x1, 0xffff, 0x0, 0x7fbd7743]}, &(0x7f00000005c0)=0x16) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000600)={0x0, 0xca, "04e7baacbe3fa0a58a09547bf53417e07f180d97730d496bf6ff8f3a4282da88342d2ee6b8c7267bf6d5e9ce48571d312a718164554d9ab9f7f1b6a807359596c99eb19219683a6cbef36eff453eea6b01ace2e7d9a023df64c5f64904b702711e42f02748890f96a26e92c2ff72c374c588244b0b82f742dde70cd22b545febd242df3d4a1cd86410edb748cdec1331f8643b2aa392a916373f4df66884089562ec3cdba2a87c1eed2680046e4d6fe46cdbdaf1e820e75698422fb24f25c8265aa1dfce637a3371a5c6"}, &(0x7f0000000700)=0xd2) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000740)={0x0, 0x80000000, 0x8, [0xa9, 0x3f, 0x101, 0x345, 0x10000, 0x80, 0x80000001, 0x5]}, &(0x7f0000000780)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001640)={r2, 0x1, 0x80000001}, &(0x7f0000001680)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001000)={0x0, 0x4}, &(0x7f0000001040)=0xfffffcdb) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000012c0)={0x0, @in6={{0xa, 0x4e21, 0x9e8, @local, 0x800}}, 0x5, 0x3000000000000, 0x7, 0x4, 0xb50a}, &(0x7f0000001380)=0x98) sendmmsg$inet_sctp(r1, &(0x7f0000001440)=[{&(0x7f00000000c0)=@in={0x2, 0x4e21, @rand_addr=0x1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)="b42f0d71c3900d4bb26a0555cafa701961ff35b91eb4a833952d8235af4b62bcb9583502a3f088beee2faa736b0f30b438a43c150b7a68940850ec0db27eef850b82fa9f835b116632c46f123a07d2490ffc25643bfe", 0x56}], 0x1, 0x0, 0x0, 0x4000804}, {&(0x7f00000002c0)=@in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="8db955e1cb9829f5a9", 0x9}, {&(0x7f0000000340)="caea11ccf24640cf5f92a488361527e9aef8c0ca401271a230b62d2719573475799e78d60337c33b87ea9b1d6a850ff2f13228a766", 0x35}, {&(0x7f0000000380)="5d047a5c85ffbd034e55", 0xa}], 0x3, &(0x7f00000007c0)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x1, 0x10001, 0x8, r2}}, @sndrcv={0x30, 0x84, 0x1, {0x8b, 0x3, 0x0, 0x7, 0x100000001, 0x5, 0x0, 0x10001, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x800, 0x0, 0x9, 0x9, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x9185cb25780569c3, 0x200, 0xd6, r5}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x8002, 0x1ff, 0x35db7dc8, r6}}], 0xd0, 0x40c1}, {&(0x7f00000008c0)=@in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000900)="cb60b3b07d845fa90acb5198f7355a65d31af96cac27ec12c60f1bf21e635beb77eabcbac62b804c4a1d8d0aaf", 0x2d}], 0x1, 0x0, 0x0, 0x4008000}, {&(0x7f0000000980)=@in6={0xa, 0x4e24, 0xffffffffffff8000, @local, 0x5}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000009c0)="d105ba1d5fefdae875403608be5c5bbb280b2551736af1029d501698a6b4d8d7e01bed7ef330db06661e84a5a558f0700c6c509c28cec13abeacea08e97a590e4afd227b1087fb", 0x47}, {&(0x7f0000000a40)="077934e84e0cee89250e0e035319a900a288e248d8045ab717e623becc480aaf497399b966348a301d5a46bc94f47bed0645c8f4aabfa59527d10e7c3bb10a522d932286a2f72e4d999f3739879c47e3d79dc06d503314292e7ebe11df48a781f27ba7aa3c3355c54fc35236a95c920baad81288ebb29d282d32b21a606ebc2505331320cd8d2b4d3be4ec2791e0ba715708c59f5535a03de420a419a2728e52fb421f075c52064bb6ac27e65d06194c17", 0xb1}], 0x2, &(0x7f0000000b40)=[@init={0x18, 0x84, 0x0, {0x6e61, 0xfffffffffffff675, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @init={0x18, 0x84, 0x0, {0xfffffffffffffffd, 0x80, 0xaa8, 0x8}}], 0x48, 0x4}, {&(0x7f0000000bc0)=@in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000c00)="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", 0xfb}, {&(0x7f0000000d00)="8347d6d0914a36d7ef99717fdaef31e8952cb57c8e0aba3327dfe2", 0x1b}, {&(0x7f0000000d40)="143d08c2b64892f2ed4e7b46d8bec544863a2c6240498fb49e0416d3ec97aa3aa6397822aaef7f46bd614aa459b7482766ecd9b2798937984b8246afe1b387b2215a78d44e0fc40ddbe71c353a1a6ab1f1cf4f54719731355f29fd4a63ac5db74300028e2f2f5f505d8550c6f365f6bdb208b53684c83e39e15e1a662dd8f82f8578df947d045925918c296f57aeeb504d8ee9b278330c903293", 0x9a}], 0x3, &(0x7f0000000e40)=[@authinfo={0x18, 0x84, 0x6, {0x4}}, @authinfo={0x18, 0x84, 0x6, {0x7fffffff}}], 0x30, 0x4010}, {&(0x7f0000000e80)=@in6={0xa, 0x4e23, 0x9, @mcast1, 0x25b4}, 0x1c, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)="70f6a324ce0cf673479f7e4681a3c1b810b51b160ca363eef1137780dc09befc7a5df95356ce58ba7108b0d27c05a70f0d924b5c12e2b36e519c7046cfe16dbcc0ff7e933b4073b0333ffaddf68426da282d92c4febc5e84d0f3f350a62f848e73344e235c65c2fee47acdcf8753cab9e1b555ade9ea8de837e1946a824aea2d02781f6c0992d8ea6ff3d60b10ebd2a94254cac8cdfe382219f1f5592fe51492ee5045612623f95b55", 0xa9}, {&(0x7f0000000f80)="86db55f4ff259f71d54b665fc45e9417a76cdf3854b8f7ab46b9d0a2df4a878c2798c625bcf7c0c7b544ea", 0x2b}], 0x2, &(0x7f0000001080)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x8000, 0x4, 0x3, r7}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}], 0x40, 0x40}, {&(0x7f00000010c0)=@in={0x2, 0x4e20}, 0x10, &(0x7f0000001280)=[{&(0x7f0000001100)="a4964128941ed29266bdc09dfa98f3f27e7a12a15e141b644e5ad3b842f9bd6258aa24862a2a3f84e54478f1365675d0420b8f5ae127267dbee00c571f2f35540e492e0fd5a7fa2b2042e0b31e32d9d5e662bb502ae8a009895dca54d334911177e909d4b40c18065f42632b618f45dfd27fb99db36f9f24b672ca0fc7ffba80", 0x80}, {&(0x7f0000001180)="a0b886c8f85e67188100190f4f082b9b626280a9f734fce77e85fa7f08609b1c054564eee9e725f94eb76ec6d7c12419d94e962d6229b28f19083faacda131a5f0ef0f94680fb4fc5fd66171b885943f5a32f125261780181271bda77f5e090152cd14e19cd75ded1f8981444e2ceb87a25e73ef867866694d4232ae7d3674d463c5f2296cf9be40ee6a852aed0f8e49ba5ca1af0526f25ab2fc", 0x9a}, {&(0x7f0000001240)="03461610171e4c68", 0x8}], 0x3, &(0x7f00000013c0)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x276a}}, @sndrcv={0x30, 0x84, 0x1, {0x80000001, 0x200, 0x2, 0x3ff, 0x3, 0x7fff, 0x0, 0x9, r8}}], 0x48}], 0x7, 0x80) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8000000000001) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) socket$can_bcm(0x1d, 0x2, 0x2) 16:14:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 16:14:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:14:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x301002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2f, 'pids'}, {0x2f, 'io'}]}, 0xa) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 16:14:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r3, 0x4, 0x3e, 0x5, 0x7fff, 0x80}, 0x14) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0x8, 0x201, 0x3}}, 0xa) 16:14:55 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x78000080, &(0x7f0000ffe000/0x1000)=nil) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000280)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee01, 0xee01, 0xee01, 0xee01]) r5 = getpgrp(0xffffffffffffffff) r6 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f00000002c0)={{0xd89, r1, r2, r3, r4, 0x80, 0x1}, 0x5, 0x8, 0x1, 0x3, r5, r6, 0xd8a}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r9 = dup(r7) bind$bt_rfcomm(r9, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:14:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) ptrace(0x4207, r2) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) clone(0x88000000, &(0x7f0000000080)="a068710a1acf128f4952a899ae5a581b49e1d9c80580ff3d2928073cb9144c3065a56656710b35e1ca33b9e7e7bc1581f4c364f1b4ddca74bdb737cc70eb725cc9ffc5b0ea0b40fc14c610445e8aabda8f25838cae3dfe8ec4d8d5eadefe2e750c7c166f107f8f4ba2bc99b92cd4ab09f423a33d4c00d90ec7b5820f4026bac1c172a88edd3c6c58cd992dec0a24befdd420231f38b2e60552caa42f8f1d", &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)="3cc7fd10e04df86a1113e69bdfdd407e3817f3750f74") 16:14:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:14:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:14:55 executing program 3: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000040)={{0x6, 0x5bae, 0x40, 0x80, 0x100000000, 0x4}, 0x4, 0x4, 0x8}) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) socket$caif_stream(0x25, 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1) 16:14:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0x2000, 0x1ff, 0x3, 0x10000000000000}}, 0xa) 16:14:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:14:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:14:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x9) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:14:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:14:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0xa28, 0x3, 0x0, 0x0, 0x400}}, 0xa) 16:14:56 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:14:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:14:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:14:56 executing program 4: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r2, &(0x7f0000000180), 0xa) 16:14:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x200, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x104, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x8040) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r4 = dup(r0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000040)={0x3}, 0x1) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x3) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3d, 0x2000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0xff}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r2, 0x800}, &(0x7f0000000280)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e20, @multicast1}}) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:14:56 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:14:56 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:14:56 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:14:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x8c, 0x4) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000001c0)={0xf698}, 0x1) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000140)) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="10020000", @ANYRES16=r2, @ANYBLOB="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"], 0x210}, 0x1, 0x0, 0x0, 0x4000014}, 0x40000) 16:14:56 executing program 5: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) 16:14:56 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:14:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x100000890f, &(0x7f00000000c0)="0a001f1288b0704dd4c25bc3d038744759132f579d31c8c450ce65a748de7f2bcd120bdc0181ba668a5b14079896211184d411a723e253d599595f6e4e33b88da63991e2279d977b0000000008de543f7689ec6742ade0c5774aa3e2677000000000") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:56 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x470000) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000200), &(0x7f00000000c0)=0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0xf000000000000000, r0, &(0x7f0000000240)="214607c79c66d582b56073da55cc2a040d5b8dd0304db266b92c8b384078addbbaab3e1ca3f2af79097466f9875a6182b5", 0x31, 0x3ff, 0x0, 0x3}]) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) 16:14:56 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:14:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0xffffffffffffffff, 0x1ff, 0xe6, 0x0, 0x0, 0xfffffffffffffffc}, 0x800}, 0xffffffffffffff5d) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x6, 0x0, 0x2, {0x3, 0x0, 0x0, 0xffffffff}}) 16:14:56 executing program 5: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) 16:14:56 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:14:56 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:14:56 executing program 1: unshare(0x99253a5b0f6e1f2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000280)={r3}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r5 = dup(r0) bind$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:14:56 executing program 5: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) 16:14:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:14:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) eventfd2(0x4, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0xffffffffffffffff, 0x1f7}}, 0xa) shutdown(r1, 0x1) bind$bt_rfcomm(r1, &(0x7f0000000040), 0xa) 16:14:56 executing program 0: r0 = dup(0xffffffffffffffff) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:14:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000001d40)='./file0\x00', 0x210000, 0x100) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000001d80)={0x2b, 0x36, 0x17, 0x5, 0x6, 0x3, 0x1, 0xe6, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/btrfs-control\x00', 0x2000, 0x0) getsockname$ax25(r1, &(0x7f0000001c80)={{0x3, @netrom}, [@bcast, @remote, @rose, @default, @bcast, @null, @netrom, @bcast]}, &(0x7f0000001d00)=0x48) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000100)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000200)=""/66, 0x42}, {&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000340)=""/199, 0xc7}, {&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/187, 0xbb}, {&(0x7f0000001600)=""/158, 0x9e}, {&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f00000016c0)=""/215, 0xd7}], 0x9, &(0x7f0000001880)=""/119, 0x77}, 0x20) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001980)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000001c00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001bc0)={&(0x7f00000019c0)={0x1e0, r4, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1904}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb93}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x87}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) 16:14:56 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x208001, 0x0) write$P9_RATTACH(r0, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x4, 0x0, 0x1}}, 0x14) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r1) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:57 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:14:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:14:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0x80000000, 0x0, 0x0, 0x0, 0x4}, 0xdb93}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0x0, 0x8d70, 0x0, 0x0, 0x2}}, 0xa) 16:14:57 executing program 0: r0 = dup(0xffffffffffffffff) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:14:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x20000, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0xffffffffffffffc7) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000200)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b80)='loginuid\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={r3, @dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) sendmsg$kcm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000440)="d786cf6e6d8b5be370b672d67e435ff454f3e68623220e6deea3ec6901f1b18533a43b5b6156f409a7d2c973c24eb549981a1f862a30775608ec187584d52abdc19e449cf94ea57ad261435f960d4d263a4536c2bd9c55ea20d7d08e99e5c7a5ecbb6a642ecd4779df4d8f9ea9ce332c407d02dfe17e9e1217d4b7fa48fc272abb", 0x81}, {&(0x7f0000000500)="99eff7b3bf0fd09d9386614878bc46d9b41593579175db661e8f0324dd62991b94eb0360a4e47f37903229ca37989d100ac3973c2b30646c9a03cd04da2179811dbba2856fe2163e", 0x48}, {&(0x7f0000000580)="eb60d56c1c9f24353e45041928df304767800f9d97f28c57e2135f3080ff8d781eb8eaac875d0cb054f6b19cd31a2559f059f731856d592986f8a474f11b886a7a1230075776b5bb1672c410fc62f81b7ac4d2c76937d01162479761f1d055fbd1b914369f229d5a350e9f000675632048f6b94dec6e754bda42e9ce199eeb4aecb55d0bb7809fc8bd31ea3ae3d95ece87d496d235e68fcb7ffd52a2002f54", 0x9f}, {&(0x7f0000000640)="6bf723933a71e09726af371965d60ffdc7b151ebb6dd9962fe7e2374be1cde517c1e16cbbf815b9a0b74dc56564efc03fa93cf1a0e8770113321c53d98615b1a217a8e8c5173ab6260c40e", 0x4b}, {&(0x7f00000006c0)="2fa680d43a066713ad48b01895389ace4bc75380be3e617805928b2f4cb775c477f1afadffd3fd70369e15ecbac2658e4034458014ac67f0d737f4e847c8fa4f45e201163995feb9805dc86e1b2a242382f9a0879039c0038b91c2499f47d2cbb407df2a0c178c6b4f3c", 0x6a}, {&(0x7f0000000740)="891957ac51c05a65a6bd8b42dd0251f562391c5bfd9883364406b9544c568619cd1d1fbbca40b89270cd5ab4f9b1d14de05d6d217384cb7842dc833874a4c1b9273852237aba1cf557f5fcb922eabba4f1e0da795987c6587a884318b261997185ceaf6f2a1c4edb82630ce5867a7303f99e7cde7d95181764713954bdde6b0aeaa47d89413abc506b70f9a847e2", 0x8e}, {&(0x7f0000000800)="043d4d168585a95cd4ca52f8f1ff6ddd0647aaada860b5b8a57a2b82ffab609260c48af4e09c1aad351438146328c2d219be3d3337896215665402ab7a7b0a49c6896ba2cd6015ffb0c895bcb62b7879f2c586de801221fd2d3ae5b0c134091ef829fda47222a54bdb46736da7014fe9e7bd2b8a74fcc9314ccab1535605b9bed080d8bcee584cf2fe9f9fa20d825182da57d546a91fe042f45bb005e92aa13f270d78b2fbc625ec9a5452", 0xab}, {&(0x7f00000008c0)="ecd64ad77f527adb422dfef3f5fd84a124b242b317f5422353c66857435083db8cfaecb2948e9026e9f6d5bd52b8b3670fd4a617a5287708bc51cd3e4ecf549311ef438b313b884c99b72d2f6b3ff8c24569b82b511f1470a3e036eff7faeae2f20ff1ba89b90da918e4ceb46178a72819d3b41544715efa4b6c963edc2900221f1fae3f160613f768d92f91af44883f7e192115c237c706a3719dd76636cd40b8a3ab", 0xa3}], 0x8}, 0x4090) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000c40)) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x8001, 0x189000) writev(r0, &(0x7f0000000b40)=[{&(0x7f0000000a40)="95c8576da3ed43f05025306106c4e0d8fe9df3b8c5ad5eaedb3874cfc7a28269c74010c71e4c10b41d3d0305b3e3d6d7938a544a4bd2203ad75de3b5dffc74b879730454c562aa07193a8cffe6f025e515a20deabea1ffdf5e7c87f2cf994d2fd2d7122a3d0aee04d84fa8ca1052ab3546a1783dc61748af2d11c66af0b0290aa93f", 0x82}, {&(0x7f0000000b00)="f461e1e5e009798aab823700a1a2746e5c65ffb507018f753a66a31000b1e97ebcdca60c3c0ac799ddef11e1b6", 0x2d}], 0x2) ioctl$TCSBRK(r2, 0x5409, 0xfffffffffffffff9) r4 = msgget$private(0x0, 0x10) msgctl$IPC_INFO(r4, 0x3, &(0x7f0000000bc0)=""/69) 16:14:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x130, r2, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bcsh0\x00'}}]}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6ee1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9c4a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x59b}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0xc000}, 0x8080) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000300)="0adc1f123c123f3188b070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x6, 0x6, 0x823}, 0x14}}, 0x0) r5 = dup(r0) bind$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x1f, 0x4) 16:14:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:14:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:14:57 executing program 0: r0 = dup(0xffffffffffffffff) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:14:57 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:14:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:14:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x10000) 16:14:57 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:14:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000500)) 16:14:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f00000000c0)={0x0, @motion_det}) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r2, &(0x7f0000000180), 0xa) 16:14:57 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:14:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0x9f0000, 0x1, 0x44bd, [], &(0x7f00000000c0)={0x9b0942, 0x4b9d, [], @ptr}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:14:57 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:14:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:14:57 executing program 4: r0 = dup(0xffffffffffffffff) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind$bt_rfcomm(r0, &(0x7f0000000180), 0xa) 16:14:57 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) 16:14:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x4200, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x80000}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000400)) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000340)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000380)={r2, r3}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x86, 0x2}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000500)={0x0, 0xa6, "79e7e7462159ec080b260c82dbfb23fcef05af4b45d0df6cb87612a56e1453bc97b25e7c60b1750306f3bd9c76edd21b1f1090dfb074aa9de69bbb0563307fcfb7a4302aa9c1c8290d5bc10312e2969eae1e0b7300e8f636507e9e8784d997133ecd3958c3ec3d02d105d304d9a2f828a66e0742864f69abece639c3137db28e4d1abd263934018419c8db97023b3adc626e1a35ab2191f9a123dc2667e20dfa09a10835ab0a"}, &(0x7f00000005c0)=0xae) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000003c0)={r4, 0x5, 0x20}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000440)={r5, 0x3}, &(0x7f0000000480)=0x11d) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x100, 0x4, 0xfff, 0x101, 0x40}, &(0x7f00000002c0)=0x98) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:14:57 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:57 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:14:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) accept4$alg(r1, 0x0, 0x0, 0x800) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:14:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:14:57 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) 16:14:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x400) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:14:57 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x400) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, 0x2, {0x7, 0x1d, 0x50fd, 0x0, 0x860, 0x5, 0x401, 0x8}}, 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r1) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:14:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:14:58 executing program 3: link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='./file0\x00') r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x254200, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0xe82bb257e4af34d3, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x1, 0x4) connect$unix(r2, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 16:14:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000040), 0xa) 16:14:58 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) 16:14:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) accept4$ax25(r2, &(0x7f00000000c0)={{0x3, @rose}, [@bcast, @rose, @remote, @netrom, @netrom, @netrom, @netrom, @netrom]}, &(0x7f0000000140)=0x48, 0x80800) r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:14:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:14:58 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, 0x0) 16:14:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x59d}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x926, 0x1, 0x5c6, 0x3, r2}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty, 0x2}}, 0xe48, 0x7f, 0x4003, 0x3, 0x8a}, &(0x7f00000002c0)=0x98) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f00000007c0)) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300), &(0x7f0000000340)=0x8) connect$bt_rfcomm(r1, &(0x7f0000000580)={0x1f, {0x100, 0x1f, 0x1, 0x3, 0x7, 0x2}, 0x1}, 0xa) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000180)={0x8, 0x6, 0xae5, 0xff, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}]}) 16:14:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000040)={0x0, 0x3}) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x0, 0x0, 0x0, 0x3}}, 0x23) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:14:58 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:14:58 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, 0x0) 16:14:58 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x17b, 0x18000) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:14:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:14:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x42, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x32}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000340)={0x3, 0x10000, 0x820c, 0x3, 0x8, 0x5, 0x3, 0x7f, r3}, &(0x7f0000000380)=0x20) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000280)="61c5ccd61b27651e9d30a949257bf9c850da8a64b0c497343df12e50", 0x1c) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:14:58 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, 0x0) 16:14:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000200)) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x39ee, 0x800) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040)=0x800000000, 0x4) socket$vsock_dgram(0x28, 0x2, 0x0) 16:14:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x9, &(0x7f0000000080)="0adc1f123c123f3188b070") openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:14:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = geteuid() write$P9_RSTATu(r1, &(0x7f00000001c0)={0x6b, 0x7d, 0x1, {{0x0, 0x55, 0x7, 0x6, {0xc5, 0x0, 0x5}, 0x91050000, 0x3, 0x411, 0x6, 0x0, '', 0x0, '', 0x19, '-wlan0cpusetcgroupwlan1/+', 0x9, 'vmnet0*){'}, 0x1, '\xf3', r2, r3, r4}}, 0x6b) 16:14:58 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:14:58 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x10000) 16:14:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:14:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x30000, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x6, 0x0, [{0xb, 0x8000, 0x7, 0x1000000020000, 0x6}, {0x40000001, 0x1ff, 0x100}, {0xc000000b, 0x1, 0x0, 0x1, 0x7}, {0xc0000019, 0x4, 0x89, 0x3, 0xcbc}, {0x80000007, 0xffffffff80000001, 0x0, 0x7fffffff, 0x7fffffff}, {0x80000019, 0xffffffff, 0x6, 0x1, 0x9}]}) write$9p(r2, &(0x7f00000001c0)="cb115773461cf318619c89dc964a84c413079198957057669783372677bdbd8b66a135148496b8f41f84b9a920d3b207d546a39fcbce6f99b84557368b3c84e6615235dc2a32d72812032662ecf680f5dbd0b96073bc55553c1ee4f0151b9f3f572c93e45531186f0d2807354a8fb0d6b1fc4e1cee457b4322f521be7c27a1b9f0c27cb091044006390368ca0a0c94ae7f94ceee65487c9fdc8686748fddc18bc7050b1c6424ee31dd60fed7044063c0088cbfd6025ff216757737", 0xbb) socket$unix(0x1, 0x5, 0x0) r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000180)={0x9, 0x5}) 16:14:58 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:14:59 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x40, 0x280) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x9, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, @in6={0xa, 0x4e21, 0x1000, @dev={0xfe, 0x80, [], 0x24}, 0x800}, @in={0x2, 0x4e21, @rand_addr=0x8}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e21, 0x4, @empty, 0x8001}, @in={0x2, 0x4e23, @loopback}], 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r2, &(0x7f0000000180)={0x1f, {0x2, 0x800, 0x3, 0x0, 0x0, 0x8000001}}, 0xa) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x1, 0xfffffffffffffffb, 0x80000000, 0x909}) 16:14:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x80) write$9p(r1, &(0x7f0000000040)="b217759f7b8ca4a5d000a08bd0e918fedaa191eedcdf669364fd849200", 0x1d) ioctl$KIOCSOUND(r1, 0x4b2f, 0x1) 16:14:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:14:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000080000c003000000060000ff00ffffffebff0000000000003fc7cfc001d975cbc397b1814700df59f670a2be83f6f4882d20eccedafc4e7968973eae3e6ea793fb4cf0accc652686af0043d883a171f25f1f2762e5aa"]) r2 = dup(r0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3, 0x7, 0x0, 0x3}}, 0x3789542996718c82) 16:14:59 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:14:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x108ffe, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="cc010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000003c0)=0x6) syz_mount_image$nfs4(&(0x7f0000000400)='nfs4\x00', &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000500)=[{&(0x7f0000000480)="6a76c42e0937b78c282f991fc6c4c78e7728e36fbfd719d3948f30af2a1f919dedcaf6e6c7b24b495676e9e5940921a6a7147394af3613fe9c59d64f080439cd4827e0ed57070a5acc82122ddf923db9cc42c760b1a4c693ab4f9adb137f1a45e8bd6eae97c4955adc209838094a60f984a9f07432af", 0x76, 0x4}], 0x100000, &(0x7f0000000540)='TIPCv2\x00') bind$bt_rfcomm(r3, &(0x7f0000000180), 0xa) 16:14:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:14:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sysfs$3(0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x200, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 16:14:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) [ 743.107009][ T6083] FAULT_INJECTION: forcing a failure. [ 743.107009][ T6083] name failslab, interval 1, probability 0, space 0, times 0 16:14:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0x0, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:14:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) getsockname(r2, &(0x7f0000000000), &(0x7f00000000c0)=0x80) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c122d316bb0701760220a773fb9a8f637f796366030bca0a3f770b20012f006c2efc4b3c20f739ea5d884f2563912eb9c34712bc45211b242d209e4935eb94930e41bfe2be9e8e4be5217d9e4f51fe7d56d2eb28f01bd23e97d2ed6c1f279a089f561aabeccaac86ac0dded52817b839f32185d502108d80ea03bf0cd8ca4b3da9b9fb19385a0d862b79fbd1baf39aaa31993d4e143") r3 = dup(r0) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000080)=0x2) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0x0, 0x2, 0x3f, 0x80000, r3}) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f00000001c0)={0xbddc, 0x0, 0x633}) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x7, 0x0) 16:14:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) [ 743.237040][ T6083] CPU: 1 PID: 6083 Comm: syz-executor.5 Not tainted 5.1.0-rc2-next-20190327 #12 [ 743.246114][ T6083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 743.256191][ T6083] Call Trace: [ 743.259974][ T6083] dump_stack+0x172/0x1f0 [ 743.264342][ T6083] should_fail.cold+0xa/0x15 [ 743.268959][ T6083] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 743.274800][ T6083] ? ___might_sleep+0x163/0x280 [ 743.279707][ T6083] __should_failslab+0x121/0x190 16:14:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:14:59 executing program 4: r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1302, [0x7fffec80]}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[{0x28, 0x29, 0x2, "57eeb55a0f95b95e6f6340415e442451d7"}], 0x28}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x6, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000340)=0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x8001, 0x2, 0x2, 0xfffffffffffff657, 0x800, 0x5, 0x8, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={r2, 0x58, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x21, @empty, 0xfff}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e20, 0x8, @ipv4={[], [], @multicast2}, 0x3}, @in={0x2, 0x4e23, @rand_addr=0x4}]}, &(0x7f00000002c0)=0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r4, &(0x7f0000000180), 0xa) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x4480, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x80040, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000380)=0x0) ptrace$peek(0x2, r5, &(0x7f00000003c0)) [ 743.284672][ T6083] should_failslab+0x9/0x14 [ 743.289205][ T6083] kmem_cache_alloc+0x2b2/0x6f0 [ 743.294090][ T6083] ? __might_sleep+0x95/0x190 [ 743.298873][ T6083] ? ima_match_policy+0x9ef/0x13c0 [ 743.304024][ T6083] __anon_vma_prepare+0x62/0x3c0 [ 743.308994][ T6083] ? ima_match_policy+0x9ef/0x13c0 [ 743.314139][ T6083] do_huge_pmd_anonymous_page+0x105f/0x1730 [ 743.320067][ T6083] ? __lock_acquire+0x548/0x3fb0 [ 743.325049][ T6083] ? lock_downgrade+0x880/0x880 [ 743.329918][ T6083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 743.336190][ T6083] ? __thp_get_unmapped_area+0x190/0x190 [ 743.341856][ T6083] ? pmd_val+0x100/0x100 [ 743.346153][ T6083] ? __lock_acquire+0x548/0x3fb0 [ 743.351577][ T6083] __handle_mm_fault+0x2d5e/0x3ec0 [ 743.356721][ T6083] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 743.362291][ T6083] ? find_held_lock+0x35/0x130 [ 743.367086][ T6083] ? handle_mm_fault+0x322/0xb30 [ 743.372068][ T6083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 743.378369][ T6083] ? kasan_check_read+0x11/0x20 [ 743.383251][ T6083] handle_mm_fault+0x43f/0xb30 [ 743.388063][ T6083] __do_page_fault+0x5ef/0xda0 [ 743.392889][ T6083] do_page_fault+0x71/0x581 [ 743.397411][ T6083] page_fault+0x1e/0x30 [ 743.401601][ T6083] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 743.408041][ T6083] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 743.427659][ T6083] RSP: 0018:ffff888040b8f9b0 EFLAGS: 00010206 16:14:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000100)='net/ip6_flowlabel\x00') syz_open_dev$vbi(&(0x7f0000001500)='/dev/vbi#\x00', 0x3, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001540)='/dev/vga_arbiter\x00', 0x82000, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f00000014c0)={@local}, 0x14) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) [ 743.433917][ T6083] RAX: ffffed1008171f50 RBX: 0000000000000018 RCX: 0000000000000003 [ 743.441898][ T6083] RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffff888040b8fa68 [ 743.449881][ T6083] RBP: ffff888040b8f9e8 R08: 1ffff11008171f4d R09: ffffed1008171f50 [ 743.449969][ T6083] R10: ffffed1008171f4f R11: ffff888040b8fa7f R12: 0000000020000100 [ 743.449977][ T6083] R13: 0000000020000118 R14: ffff888040b8fa68 R15: 00007ffffffff000 [ 743.450016][ T6083] ? _copy_from_user+0x10b/0x150 [ 743.450049][ T6083] rfcomm_dev_ioctl+0x504/0x1b60 [ 743.478953][ T6083] ? mark_held_locks+0xa4/0xf0 [ 743.488696][ T6083] ? __local_bh_enable_ip+0x15a/0x270 [ 743.494082][ T6083] ? lock_sock_nested+0xe2/0x120 [ 743.494097][ T6083] ? __local_bh_enable_ip+0x15a/0x270 [ 743.494121][ T6083] ? rfcomm_dev_state_change+0x150/0x150 [ 743.494134][ T6083] ? lock_sock_nested+0x9a/0x120 [ 743.494151][ T6083] ? __local_bh_enable_ip+0x15a/0x270 [ 743.494172][ T6083] rfcomm_sock_ioctl+0x90/0xb0 [ 743.494193][ T6083] sock_do_ioctl+0xde/0x300 [ 743.515419][ T6083] ? compat_ifr_data_ioctl+0x160/0x160 [ 743.515439][ T6083] ? tomoyo_domain+0xc5/0x160 [ 743.515457][ T6083] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 743.515473][ T6083] ? tomoyo_init_request_info+0x105/0x1d0 [ 743.515489][ T6083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 743.515511][ T6083] ? tomoyo_path_number_perm+0x263/0x520 [ 743.535635][ T6083] ? find_held_lock+0x35/0x130 [ 743.535657][ T6083] sock_ioctl+0x32b/0x610 [ 743.535674][ T6083] ? dlci_ioctl_set+0x40/0x40 [ 743.535693][ T6083] ? __fget+0x35a/0x550 [ 743.535713][ T6083] ? dlci_ioctl_set+0x40/0x40 [ 743.535730][ T6083] do_vfs_ioctl+0xd6e/0x1390 [ 743.535755][ T6083] ? ioctl_preallocate+0x210/0x210 [ 743.564362][ T6083] ? __fget+0x381/0x550 [ 743.564385][ T6083] ? ksys_dup3+0x3e0/0x3e0 [ 743.564401][ T6083] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 743.564414][ T6083] ? fput_many+0x12c/0x1a0 [ 743.564435][ T6083] ? tomoyo_file_ioctl+0x23/0x30 [ 743.564460][ T6083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 743.582391][ T6083] ? security_file_ioctl+0x93/0xc0 [ 743.582414][ T6083] ksys_ioctl+0xab/0xd0 [ 743.582433][ T6083] __x64_sys_ioctl+0x73/0xb0 [ 743.582463][ T6083] do_syscall_64+0x103/0x610 [ 743.649487][ T6083] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 743.655413][ T6083] RIP: 0033:0x458209 [ 743.659332][ T6083] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 743.678950][ T6083] RSP: 002b:00007f0919d66c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 16:14:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=r1) r2 = dup(r0) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r2, &(0x7f0000000180), 0xa) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) [ 743.687382][ T6083] RAX: ffffffffffffffda RBX: 00007f0919d66c90 RCX: 0000000000458209 [ 743.695375][ T6083] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 743.703367][ T6083] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 743.711446][ T6083] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0919d676d4 [ 743.719537][ T6083] R13: 00000000004c0699 R14: 00000000004d2308 R15: 0000000000000003 16:14:59 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:14:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:14:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:14:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0x0, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:14:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0xf0b, 0xffff, 0xffffffffffff0001, 0x7fffffff, 0x3, 0xda1}) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:14:59 executing program 3: open(&(0x7f0000000200)='./file0\x00', 0x2, 0x80) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x543002, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @multicast2}, &(0x7f00000000c0)=0xc) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:00 executing program 3: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xa3, 0x40400) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xa7f6) [ 743.891554][ T6140] FAULT_INJECTION: forcing a failure. [ 743.891554][ T6140] name failslab, interval 1, probability 0, space 0, times 0 [ 743.910966][ T6140] CPU: 0 PID: 6140 Comm: syz-executor.5 Not tainted 5.1.0-rc2-next-20190327 #12 [ 743.920040][ T6140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 743.930208][ T6140] Call Trace: [ 743.933538][ T6140] dump_stack+0x172/0x1f0 [ 743.937900][ T6140] should_fail.cold+0xa/0x15 [ 743.942523][ T6140] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 743.948361][ T6140] ? ___might_sleep+0x163/0x280 [ 743.953239][ T6140] __should_failslab+0x121/0x190 [ 743.958208][ T6140] should_failslab+0x9/0x14 [ 743.962741][ T6140] kmem_cache_alloc+0x2b2/0x6f0 [ 743.967649][ T6140] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 743.973393][ T6140] ? anon_vma_compatible+0x70/0x2d0 [ 743.978645][ T6140] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 743.984914][ T6140] __anon_vma_prepare+0x1b1/0x3c0 [ 743.989965][ T6140] ? ima_match_policy+0x9ef/0x13c0 [ 743.995114][ T6140] do_huge_pmd_anonymous_page+0x105f/0x1730 [ 744.001063][ T6140] ? __lock_acquire+0x548/0x3fb0 [ 744.006030][ T6140] ? lock_downgrade+0x880/0x880 [ 744.010938][ T6140] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 744.017207][ T6140] ? __thp_get_unmapped_area+0x190/0x190 [ 744.022986][ T6140] ? pmd_val+0x100/0x100 [ 744.027255][ T6140] ? __lock_acquire+0x548/0x3fb0 [ 744.032217][ T6140] __handle_mm_fault+0x2d5e/0x3ec0 [ 744.037360][ T6140] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 744.042929][ T6140] ? find_held_lock+0x35/0x130 [ 744.047715][ T6140] ? handle_mm_fault+0x322/0xb30 [ 744.052686][ T6140] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 744.058956][ T6140] ? kasan_check_read+0x11/0x20 [ 744.063845][ T6140] handle_mm_fault+0x43f/0xb30 [ 744.068638][ T6140] __do_page_fault+0x5ef/0xda0 [ 744.073433][ T6140] do_page_fault+0x71/0x581 [ 744.077973][ T6140] page_fault+0x1e/0x30 [ 744.082153][ T6140] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 16:15:00 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0x0, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:15:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000040)=0x4) 16:15:00 executing program 3: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) 16:15:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000040)={0x48ff, 0xc, [0xffffffffffffffff, 0x3f, 0x8]}) 16:15:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) [ 744.088582][ T6140] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 744.108205][ T6140] RSP: 0018:ffff8880a49979b0 EFLAGS: 00010206 [ 744.114285][ T6140] RAX: ffffed1014932f50 RBX: 0000000000000018 RCX: 0000000000000003 [ 744.122279][ T6140] RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffff8880a4997a68 [ 744.130264][ T6140] RBP: ffff8880a49979e8 R08: 1ffff11014932f4d R09: ffffed1014932f50 [ 744.130274][ T6140] R10: ffffed1014932f4f R11: ffff8880a4997a7f R12: 0000000020000100 [ 744.130283][ T6140] R13: 0000000020000118 R14: ffff8880a4997a68 R15: 00007ffffffff000 [ 744.130320][ T6140] ? _copy_from_user+0x10b/0x150 [ 744.130351][ T6140] rfcomm_dev_ioctl+0x504/0x1b60 [ 744.154352][ T6140] ? mark_held_locks+0xa4/0xf0 [ 744.154371][ T6140] ? __local_bh_enable_ip+0x15a/0x270 [ 744.154383][ T6140] ? lock_sock_nested+0xe2/0x120 [ 744.154396][ T6140] ? __local_bh_enable_ip+0x15a/0x270 [ 744.154418][ T6140] ? rfcomm_dev_state_change+0x150/0x150 [ 744.154430][ T6140] ? lock_sock_nested+0x9a/0x120 [ 744.154455][ T6140] ? __local_bh_enable_ip+0x15a/0x270 [ 744.164363][ T6140] rfcomm_sock_ioctl+0x90/0xb0 [ 744.164383][ T6140] sock_do_ioctl+0xde/0x300 [ 744.164400][ T6140] ? compat_ifr_data_ioctl+0x160/0x160 [ 744.164417][ T6140] ? tomoyo_domain+0xc5/0x160 [ 744.164434][ T6140] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 744.164456][ T6140] ? tomoyo_init_request_info+0x105/0x1d0 [ 744.174630][ T6140] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 16:15:00 executing program 5 (fault-call:1 fault-nth:2): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:15:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000100)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xc29, 0x420041) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x6, 0x3}}, 0xa) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x9d, "1079372aecc51901571904c6c8d690c10193b9f106eb4f95380cc2be38ba476aff8b37d1d013b21c7ccf90fd0c50ba882bd7a0c71b5682d22f8adfa0e9aab607d89ba0b14563f9d5df0d9bdfb2e01205b2aea823cbdcdb9877608d249920f1408226bc6f701be77325fcb583a431352a0697c8df85d0a5974aaee228ad8a4b6a29a35eec5219487da7df61a76ef91f13f2d059de6e7a3e145a1d443205"}, &(0x7f0000000200)=0xa5) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r4, &(0x7f0000000280)=0x4) 16:15:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x112000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="550000004e1490d871430f51f8f26862b2e0e498af9e87083f9b480a8c6459b3fbbd1e481ea6037f119f0b2f4fa7851ebf0e0b85b23cb7c0908c40fdd9aad4a21069dda79606547e901668c8705e4d79a2e4a0ef4f3e598101a27c4ad93c037da017d864fe49ddf8e5f2e89b43d10903e20a7e47f976bab18ef7f39a924b810eb6b0dd9c73be55b71393f808b454ea44377d7fc1086301b3d4c42a6b86df53f3db1432538ee57ab01d0579abebe55ded9180346660414be87c8f0631dd5f4dfd2e50d203dd", @ANYRES16=r2, @ANYBLOB="000f2abd7000ffdbdf25010000000c00030003000000000000000c00030004000000000000000c00060002000000000000000c0005000300000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40005) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000280)={{0x3f, @dev={0xac, 0x14, 0x14, 0x14}, 0x4e21, 0x0, 'wrr\x00', 0x21, 0x7ff, 0x44}, {@empty, 0x4e22, 0x3, 0x7, 0x800, 0x200}}, 0x44) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x3, 0x4, 0x400, 0x3828000000000000, 0x2, 0xffffffff, 0x6}, 0x1c) 16:15:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) [ 744.174645][ T6140] ? tomoyo_path_number_perm+0x263/0x520 [ 744.174660][ T6140] ? find_held_lock+0x35/0x130 [ 744.174681][ T6140] sock_ioctl+0x32b/0x610 [ 744.174698][ T6140] ? dlci_ioctl_set+0x40/0x40 [ 744.174716][ T6140] ? __fget+0x35a/0x550 [ 744.174737][ T6140] ? dlci_ioctl_set+0x40/0x40 [ 744.185150][ T6140] do_vfs_ioctl+0xd6e/0x1390 [ 744.185174][ T6140] ? ioctl_preallocate+0x210/0x210 [ 744.185189][ T6140] ? __fget+0x381/0x550 [ 744.185209][ T6140] ? ksys_dup3+0x3e0/0x3e0 [ 744.185235][ T6140] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 16:15:00 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) [ 744.195808][ T6140] ? fput_many+0x12c/0x1a0 [ 744.195830][ T6140] ? tomoyo_file_ioctl+0x23/0x30 [ 744.195847][ T6140] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 744.195864][ T6140] ? security_file_ioctl+0x93/0xc0 [ 744.195883][ T6140] ksys_ioctl+0xab/0xd0 [ 744.195910][ T6140] __x64_sys_ioctl+0x73/0xb0 [ 744.206055][ T6140] do_syscall_64+0x103/0x610 [ 744.206087][ T6140] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 744.206100][ T6140] RIP: 0033:0x458209 [ 744.206123][ T6140] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 744.216083][ T6140] RSP: 002b:00007f0919d66c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.216098][ T6140] RAX: ffffffffffffffda RBX: 00007f0919d66c90 RCX: 0000000000458209 [ 744.216105][ T6140] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 744.216112][ T6140] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 16:15:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) [ 744.216119][ T6140] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0919d676d4 [ 744.216128][ T6140] R13: 00000000004c0699 R14: 00000000004d2308 R15: 0000000000000003 [ 744.393290][ T6165] FAULT_INJECTION: forcing a failure. [ 744.393290][ T6165] name failslab, interval 1, probability 0, space 0, times 0 16:15:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={@ipv4={[], [], @initdev}, 0x0}, &(0x7f00000001c0)=0x14) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, r2, 0x1}, 0xc) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f00000000c0)={0x7}) 16:15:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101000, 0x100) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1e) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:00 executing program 4: r0 = dup(0xffffffffffffffff) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x10001ff}}, 0xa) bind$bt_rfcomm(r0, &(0x7f0000000180), 0xa) 16:15:00 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) [ 744.539336][ T6165] CPU: 0 PID: 6165 Comm: syz-executor.5 Not tainted 5.1.0-rc2-next-20190327 #12 [ 744.548397][ T6165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 744.558471][ T6165] Call Trace: [ 744.561787][ T6165] dump_stack+0x172/0x1f0 [ 744.566149][ T6165] should_fail.cold+0xa/0x15 [ 744.570787][ T6165] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 744.576623][ T6165] ? ___might_sleep+0x163/0x280 [ 744.581512][ T6165] __should_failslab+0x121/0x190 [ 744.586482][ T6165] should_failslab+0x9/0x14 [ 744.591011][ T6165] kmem_cache_alloc+0x2b2/0x6f0 [ 744.595960][ T6165] __khugepaged_enter+0x3b/0x390 [ 744.600932][ T6165] do_huge_pmd_anonymous_page+0x1199/0x1730 [ 744.606866][ T6165] ? __thp_get_unmapped_area+0x190/0x190 [ 744.612558][ T6165] ? pmd_val+0x100/0x100 [ 744.616833][ T6165] ? __lock_acquire+0x548/0x3fb0 [ 744.621803][ T6165] __handle_mm_fault+0x2d5e/0x3ec0 [ 744.626943][ T6165] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 744.632514][ T6165] ? find_held_lock+0x35/0x130 [ 744.637300][ T6165] ? handle_mm_fault+0x322/0xb30 [ 744.642272][ T6165] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 744.648546][ T6165] ? kasan_check_read+0x11/0x20 [ 744.653432][ T6165] handle_mm_fault+0x43f/0xb30 [ 744.658231][ T6165] __do_page_fault+0x5ef/0xda0 [ 744.664558][ T6165] do_page_fault+0x71/0x581 [ 744.669104][ T6165] page_fault+0x1e/0x30 [ 744.673290][ T6165] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 744.679648][ T6165] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 744.699279][ T6165] RSP: 0018:ffff888040b8f9b0 EFLAGS: 00010206 [ 744.706507][ T6165] RAX: ffffed1008171f50 RBX: 0000000000000018 RCX: 0000000000000003 [ 744.714485][ T6165] RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffff888040b8fa68 [ 744.714504][ T6165] RBP: ffff888040b8f9e8 R08: 1ffff11008171f4d R09: ffffed1008171f50 [ 744.730467][ T6165] R10: ffffed1008171f4f R11: ffff888040b8fa7f R12: 0000000020000100 [ 744.730477][ T6165] R13: 0000000020000118 R14: ffff888040b8fa68 R15: 00007ffffffff000 [ 744.730511][ T6165] ? _copy_from_user+0x10b/0x150 [ 744.730537][ T6165] rfcomm_dev_ioctl+0x504/0x1b60 [ 744.756378][ T6165] ? mark_held_locks+0xa4/0xf0 [ 744.761167][ T6165] ? __local_bh_enable_ip+0x15a/0x270 [ 744.767950][ T6165] ? lock_sock_nested+0xe2/0x120 [ 744.772909][ T6165] ? __local_bh_enable_ip+0x15a/0x270 [ 744.778304][ T6165] ? rfcomm_dev_state_change+0x150/0x150 [ 744.783954][ T6165] ? lock_sock_nested+0x9a/0x120 [ 744.788945][ T6165] ? __local_bh_enable_ip+0x15a/0x270 [ 744.788969][ T6165] rfcomm_sock_ioctl+0x90/0xb0 [ 744.788996][ T6165] sock_do_ioctl+0xde/0x300 [ 744.799151][ T6165] ? compat_ifr_data_ioctl+0x160/0x160 [ 744.799167][ T6165] ? tomoyo_domain+0xc5/0x160 [ 744.799184][ T6165] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 744.799206][ T6165] ? tomoyo_init_request_info+0x105/0x1d0 [ 744.826527][ T6165] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 744.832791][ T6165] ? tomoyo_path_number_perm+0x263/0x520 [ 744.838450][ T6165] ? find_held_lock+0x35/0x130 [ 744.843249][ T6165] sock_ioctl+0x32b/0x610 [ 744.847606][ T6165] ? dlci_ioctl_set+0x40/0x40 [ 744.852321][ T6165] ? __fget+0x35a/0x550 [ 744.856510][ T6165] ? dlci_ioctl_set+0x40/0x40 [ 744.861209][ T6165] do_vfs_ioctl+0xd6e/0x1390 [ 744.865819][ T6165] ? ioctl_preallocate+0x210/0x210 [ 744.871040][ T6165] ? __fget+0x381/0x550 [ 744.875229][ T6165] ? ksys_dup3+0x3e0/0x3e0 [ 744.879664][ T6165] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 744.885926][ T6165] ? fput_many+0x12c/0x1a0 [ 744.890374][ T6165] ? tomoyo_file_ioctl+0x23/0x30 [ 744.895338][ T6165] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 744.901601][ T6165] ? security_file_ioctl+0x93/0xc0 [ 744.906744][ T6165] ksys_ioctl+0xab/0xd0 [ 744.910926][ T6165] __x64_sys_ioctl+0x73/0xb0 [ 744.915545][ T6165] do_syscall_64+0x103/0x610 [ 744.920160][ T6165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 744.926085][ T6165] RIP: 0033:0x458209 [ 744.930000][ T6165] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 744.949713][ T6165] RSP: 002b:00007f0919d66c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.958147][ T6165] RAX: ffffffffffffffda RBX: 00007f0919d66c90 RCX: 0000000000458209 [ 744.966145][ T6165] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 744.974135][ T6165] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 744.982135][ T6165] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0919d676d4 16:15:00 executing program 4: lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) r1 = gettid() fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) kcmp(r1, r2, 0x5, r0, r0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000180)={0x1f, {0xffff, 0x0, 0x0, 0x0, 0x1}, 0xfffffffffffffffe}, 0xa) 16:15:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) recvfrom$netrom(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x40000000, 0x0, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x6, 0x4) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) [ 744.990130][ T6165] R13: 00000000004c0699 R14: 00000000004d2308 R15: 0000000000000003 16:15:01 executing program 5 (fault-call:1 fault-nth:3): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:15:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000200)) 16:15:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:15:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="fece08c4de39c31588035b309a504a53aa51cfc043e3b26ecd685ab29b318b803c9b68e213655d76768c14a74a6c411a3ca92a2324fbc03bb340bb51e60c17c30cc4c41f5177a984a099e657453b1d55c422a68ee7c7aa3793754e56f1a3f58c4809f64410c3e9dedb48b1edd61c3853539fc96a7240d9007cfea529a50bd102f5c0") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:15:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:15:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:15:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0x1fd, 0x3}, 0x9d}, 0xfffffffffffffda9) [ 745.164570][ T6220] FAULT_INJECTION: forcing a failure. [ 745.164570][ T6220] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 745.184617][ T6220] CPU: 1 PID: 6220 Comm: syz-executor.5 Not tainted 5.1.0-rc2-next-20190327 #12 [ 745.193680][ T6220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 745.203750][ T6220] Call Trace: [ 745.207082][ T6220] dump_stack+0x172/0x1f0 [ 745.211445][ T6220] should_fail.cold+0xa/0x15 [ 745.216071][ T6220] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 745.221928][ T6220] ? ___might_sleep+0x163/0x280 [ 745.226818][ T6220] should_fail_alloc_page+0x50/0x60 [ 745.232050][ T6220] __alloc_pages_nodemask+0x1a1/0x7e0 [ 745.237444][ T6220] ? find_held_lock+0x35/0x130 [ 745.242240][ T6220] ? __alloc_pages_slowpath+0x2900/0x2900 [ 745.247982][ T6220] ? kasan_check_write+0x14/0x20 [ 745.252959][ T6220] ? lock_downgrade+0x880/0x880 [ 745.252978][ T6220] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 745.252997][ T6220] alloc_pages_current+0x107/0x210 [ 745.253018][ T6220] pte_alloc_one+0x1b/0x1a0 [ 745.253046][ T6220] do_huge_pmd_anonymous_page+0x9f6/0x1730 [ 745.253069][ T6220] ? __thp_get_unmapped_area+0x190/0x190 [ 745.253082][ T6220] ? pmd_val+0x100/0x100 [ 745.253103][ T6220] ? __lock_acquire+0x548/0x3fb0 [ 745.269362][ T6220] __handle_mm_fault+0x2d5e/0x3ec0 [ 745.269387][ T6220] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 745.269403][ T6220] ? find_held_lock+0x35/0x130 [ 745.269419][ T6220] ? handle_mm_fault+0x322/0xb30 [ 745.269452][ T6220] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 745.279786][ T6220] ? kasan_check_read+0x11/0x20 [ 745.279808][ T6220] handle_mm_fault+0x43f/0xb30 [ 745.279833][ T6220] __do_page_fault+0x5ef/0xda0 [ 745.279857][ T6220] do_page_fault+0x71/0x581 [ 745.279873][ T6220] page_fault+0x1e/0x30 [ 745.279891][ T6220] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 745.279905][ T6220] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 745.279913][ T6220] RSP: 0018:ffff888040b8f9b0 EFLAGS: 00010206 [ 745.279924][ T6220] RAX: ffffed1008171f50 RBX: 0000000000000018 RCX: 0000000000000003 [ 745.279933][ T6220] RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffff888040b8fa68 [ 745.279951][ T6220] RBP: ffff888040b8f9e8 R08: 1ffff11008171f4d R09: ffffed1008171f50 [ 745.294769][ T6220] R10: ffffed1008171f4f R11: ffff888040b8fa7f R12: 0000000020000100 [ 745.294780][ T6220] R13: 0000000020000118 R14: ffff888040b8fa68 R15: 00007ffffffff000 [ 745.294815][ T6220] ? _copy_from_user+0x10b/0x150 [ 745.294839][ T6220] rfcomm_dev_ioctl+0x504/0x1b60 [ 745.294853][ T6220] ? mark_held_locks+0xa4/0xf0 [ 745.294875][ T6220] ? __local_bh_enable_ip+0x15a/0x270 [ 745.310475][ T6220] ? lock_sock_nested+0xe2/0x120 [ 745.310491][ T6220] ? __local_bh_enable_ip+0x15a/0x270 [ 745.310515][ T6220] ? rfcomm_dev_state_change+0x150/0x150 [ 745.310529][ T6220] ? lock_sock_nested+0x9a/0x120 [ 745.310546][ T6220] ? __local_bh_enable_ip+0x15a/0x270 [ 745.310569][ T6220] rfcomm_sock_ioctl+0x90/0xb0 [ 745.310601][ T6220] sock_do_ioctl+0xde/0x300 [ 745.321976][ T6220] ? compat_ifr_data_ioctl+0x160/0x160 [ 745.321993][ T6220] ? tomoyo_domain+0xc5/0x160 [ 745.322011][ T6220] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 745.322025][ T6220] ? tomoyo_init_request_info+0x105/0x1d0 [ 745.322051][ T6220] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 745.322066][ T6220] ? tomoyo_path_number_perm+0x263/0x520 [ 745.322079][ T6220] ? find_held_lock+0x35/0x130 [ 745.322097][ T6220] sock_ioctl+0x32b/0x610 16:15:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000002140)={0x98, 0x3}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f00000000c0)={0x2, 0x0, 0x2080, {0x6000, 0x4, 0x2}, [], "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", "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"}) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) [ 745.322111][ T6220] ? dlci_ioctl_set+0x40/0x40 [ 745.322129][ T6220] ? __fget+0x35a/0x550 [ 745.322146][ T6220] ? dlci_ioctl_set+0x40/0x40 [ 745.322162][ T6220] do_vfs_ioctl+0xd6e/0x1390 [ 745.322180][ T6220] ? ioctl_preallocate+0x210/0x210 [ 745.322193][ T6220] ? __fget+0x381/0x550 [ 745.322218][ T6220] ? ksys_dup3+0x3e0/0x3e0 [ 745.409380][ T6220] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 745.409396][ T6220] ? fput_many+0x12c/0x1a0 [ 745.409417][ T6220] ? tomoyo_file_ioctl+0x23/0x30 16:15:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:15:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c12") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) [ 745.409440][ T6220] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 745.422370][ T6220] ? security_file_ioctl+0x93/0xc0 [ 745.422390][ T6220] ksys_ioctl+0xab/0xd0 [ 745.422407][ T6220] __x64_sys_ioctl+0x73/0xb0 [ 745.422422][ T6220] do_syscall_64+0x103/0x610 [ 745.422444][ T6220] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 745.422456][ T6220] RIP: 0033:0x458209 [ 745.422478][ T6220] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 745.534198][ T6220] RSP: 002b:00007f0919d66c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 745.534215][ T6220] RAX: ffffffffffffffda RBX: 00007f0919d66c90 RCX: 0000000000458209 [ 745.534224][ T6220] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 745.534233][ T6220] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 745.534242][ T6220] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0919d676d4 [ 745.534251][ T6220] R13: 00000000004c0699 R14: 00000000004d2308 R15: 0000000000000003 16:15:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setfsgid(r2) setfsgid(r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000418}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r3, 0x800, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x4107, 0x0, {0x10, 0x18, {0x3, @bearer=@l2={'ib', 0x3a, 'lo\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:15:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c12") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:15:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000200)={[0x3000, 0x3000, 0x10000, 0xd000], 0x8, 0x1, 0x8}) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:01 executing program 5 (fault-call:1 fault-nth:4): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:15:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) 16:15:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x40, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000100)={0x0, 0x9, 0x8000, &(0x7f00000000c0)=0x1f}) r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000140)={0x1f, {0x2, 0x6, 0x0, 0x100, 0x18000000000, 0x56}}, 0xa) 16:15:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, 0x0) [ 745.808234][ T6257] FAULT_INJECTION: forcing a failure. [ 745.808234][ T6257] name failslab, interval 1, probability 0, space 0, times 0 [ 745.867903][ T6257] CPU: 1 PID: 6257 Comm: syz-executor.5 Not tainted 5.1.0-rc2-next-20190327 #12 [ 745.876973][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 745.887053][ T6257] Call Trace: [ 745.890484][ T6257] dump_stack+0x172/0x1f0 [ 745.894837][ T6257] should_fail.cold+0xa/0x15 [ 745.899445][ T6257] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 745.905281][ T6257] ? ___might_sleep+0x163/0x280 [ 745.910154][ T6257] __should_failslab+0x121/0x190 [ 745.915112][ T6257] should_failslab+0x9/0x14 [ 745.919684][ T6257] kmem_cache_alloc+0x2b2/0x6f0 [ 745.924562][ T6257] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 745.930831][ T6257] ptlock_alloc+0x20/0x70 [ 745.930849][ T6257] pte_alloc_one+0x6d/0x1a0 [ 745.930865][ T6257] do_huge_pmd_anonymous_page+0x9f6/0x1730 [ 745.930885][ T6257] ? __thp_get_unmapped_area+0x190/0x190 [ 745.930896][ T6257] ? pmd_val+0x100/0x100 [ 745.930910][ T6257] ? __lock_acquire+0x548/0x3fb0 [ 745.930929][ T6257] __handle_mm_fault+0x2d5e/0x3ec0 [ 745.930951][ T6257] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 745.930963][ T6257] ? find_held_lock+0x35/0x130 [ 745.930978][ T6257] ? handle_mm_fault+0x322/0xb30 [ 745.931004][ T6257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 745.955531][ T6257] ? kasan_check_read+0x11/0x20 [ 745.955553][ T6257] handle_mm_fault+0x43f/0xb30 [ 745.955585][ T6257] __do_page_fault+0x5ef/0xda0 [ 745.955609][ T6257] do_page_fault+0x71/0x581 [ 745.996839][ T6257] page_fault+0x1e/0x30 [ 745.996861][ T6257] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 745.996875][ T6257] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 745.996892][ T6257] RSP: 0018:ffff88804e5579b0 EFLAGS: 00010206 [ 746.042308][ T6257] RAX: ffffed1009caaf50 RBX: 0000000000000018 RCX: 0000000000000003 [ 746.050290][ T6257] RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffff88804e557a68 [ 746.050300][ T6257] RBP: ffff88804e5579e8 R08: 1ffff11009caaf4d R09: ffffed1009caaf50 [ 746.050308][ T6257] R10: ffffed1009caaf4f R11: ffff88804e557a7f R12: 0000000020000100 [ 746.050317][ T6257] R13: 0000000020000118 R14: ffff88804e557a68 R15: 00007ffffffff000 [ 746.050354][ T6257] ? _copy_from_user+0x10b/0x150 [ 746.050376][ T6257] rfcomm_dev_ioctl+0x504/0x1b60 [ 746.050398][ T6257] ? mark_held_locks+0xa4/0xf0 [ 746.082331][ T6257] ? __local_bh_enable_ip+0x15a/0x270 [ 746.082346][ T6257] ? lock_sock_nested+0xe2/0x120 [ 746.082358][ T6257] ? __local_bh_enable_ip+0x15a/0x270 [ 746.082380][ T6257] ? rfcomm_dev_state_change+0x150/0x150 [ 746.082410][ T6257] ? lock_sock_nested+0x9a/0x120 [ 746.082425][ T6257] ? __local_bh_enable_ip+0x15a/0x270 [ 746.082444][ T6257] rfcomm_sock_ioctl+0x90/0xb0 [ 746.082461][ T6257] sock_do_ioctl+0xde/0x300 [ 746.082476][ T6257] ? compat_ifr_data_ioctl+0x160/0x160 [ 746.082492][ T6257] ? tomoyo_domain+0xc5/0x160 [ 746.082508][ T6257] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 746.082523][ T6257] ? tomoyo_init_request_info+0x105/0x1d0 [ 746.082539][ T6257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 16:15:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) syz_emit_ethernet(0x69, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffffffffffffff91000b00810007000011aaab27b2abf002001ea69fb40886e686a218b62443ce4b52cea3844526343452ad514bbcd2b2a812690290cb2e203c210982a473233ce8099eaf78ff5c522d5bc342c535ea95dd5a00040000"], 0x0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:15:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffff00000000, 0x1, &(0x7f0000001200)=[{&(0x7f0000000200)="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", 0x1000, 0xa34a}], 0x4, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x521400, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000040)=0x800, 0x4) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c12") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) [ 746.082553][ T6257] ? tomoyo_path_number_perm+0x263/0x520 [ 746.082566][ T6257] ? find_held_lock+0x35/0x130 [ 746.082592][ T6257] sock_ioctl+0x32b/0x610 [ 746.082614][ T6257] ? dlci_ioctl_set+0x40/0x40 [ 746.186258][ T6257] ? __fget+0x35a/0x550 [ 746.190475][ T6257] ? dlci_ioctl_set+0x40/0x40 [ 746.195182][ T6257] do_vfs_ioctl+0xd6e/0x1390 [ 746.199807][ T6257] ? ioctl_preallocate+0x210/0x210 [ 746.204952][ T6257] ? __fget+0x381/0x550 [ 746.209140][ T6257] ? ksys_dup3+0x3e0/0x3e0 16:15:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0xffffffffffffff5a}}, 0xa) [ 746.213591][ T6257] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 746.219866][ T6257] ? fput_many+0x12c/0x1a0 [ 746.224321][ T6257] ? tomoyo_file_ioctl+0x23/0x30 [ 746.229294][ T6257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 746.235567][ T6257] ? security_file_ioctl+0x93/0xc0 [ 746.240715][ T6257] ksys_ioctl+0xab/0xd0 [ 746.244900][ T6257] __x64_sys_ioctl+0x73/0xb0 [ 746.249516][ T6257] do_syscall_64+0x103/0x610 [ 746.254138][ T6257] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 746.260063][ T6257] RIP: 0033:0x458209 [ 746.263977][ T6257] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 746.283607][ T6257] RSP: 002b:00007f0919d66c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.283623][ T6257] RAX: ffffffffffffffda RBX: 00007f0919d66c90 RCX: 0000000000458209 [ 746.283631][ T6257] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 746.283638][ T6257] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 16:15:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x383d}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:15:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x2000) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000000040)=0x8000, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, 0x0) 16:15:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) [ 746.283646][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0919d676d4 [ 746.283653][ T6257] R13: 00000000004c0699 R14: 00000000004d2308 R15: 0000000000000003 16:15:02 executing program 5 (fault-call:1 fault-nth:5): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:15:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, 0x0) 16:15:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000380)='+^\x00', r9}, 0x30) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{0x9, r4, r5, r6, r7, 0xa47aea8d4631804e, 0x6}, 0x1, 0x1, 0x1f, 0x2, 0x2, 0x0, r8, r10}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) sendmmsg$unix(r12, &(0x7f0000000980)=[{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000006c0)="8338d004fa276f6bd5e5eac314f6f2c3e4807ce40991b3893bd729997613789362027aec5883de7373930d57bb28ae66e2142390d866deedc4dd0152a8003a276f572270917831310d3eb82180bdb82c7818a6d9ab7c6df471722fd7223ff1fa241d5cb07b4d2847dc68ae88cd972f751a78a71f8616e3054abe7f7c8c9c71218d8a66fa49634550acd1efc6c5bdf5e48242805a401eda784078d96067abe531ecddbbc6ed06d61594892f6846fbc83f3f419c3880448536b0e0ae691832f7d7af5b95e4dc136ecfb3529f1ebdfa569eba2734d69a6d383c228d3a824a", 0xdd}, {&(0x7f00000007c0)="88f51bc1691cfa6ff5767adcb8796e212a6cbedea04e0922d4a988f9d932ce32aee5915f43a674", 0x27}, {&(0x7f0000000800)="2eab1e715c30250ce74e19adb20739da16870fa7f41c0cd73d0e380e12e94828c1e1d16ce442b9095c8786791934266a393f37332b0ad94f579ae9111d88060aa25ace16aed51fbbeb6987f022d96c2eb20694c919dde1dea78e0da1e9220b27d3d7860d90b8378158bba5af5cec", 0x6e}], 0x3, &(0x7f00000008c0)=[@rights={0x20, 0x1, 0x1, [r0, r1, r11, r1]}, @rights={0x18, 0x1, 0x1, [r11, r11]}, @cred={0x20, 0x1, 0x2, r10, r3, r7}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r11, r0, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r10, r3, r7}], 0xa8, 0x4001}], 0x1, 0x800) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r13 = dup(r0) bind$bt_rfcomm(r13, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:02 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000040)=0xe8) sendmsg$can_raw(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f0000000340)={&(0x7f0000000300)=@can={{0x0, 0x2, 0x913f, 0x8f9}, 0x4, 0x1, 0x0, 0x0, "1a8a4d0d65314b7e"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4) 16:15:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000000040)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:15:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b0") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:15:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x5411, &(0x7f0000000100)) 16:15:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x0, 0x0}) 16:15:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b0") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:15:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) 16:15:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0x3, 0x0, 0x8, 0x10001, 0x1f, 0x1}, 0x3ff}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000000340)=0xe8) setsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000380)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, r2}, 0x14) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:15:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x0, 0x0}) 16:15:03 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r1) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000040)={0x1, 0x455, 0x96, 0x6, 0x2, 0xa, 0xc, "0b0e5e7bde6b0486dc0ea09c580459ed1f6aa5de", "6964f90e7a4d282b115ba39260ad324f154e2f94"}) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f00000000c0)=0x90000) 16:15:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x5421, &(0x7f0000000100)) 16:15:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x800000000000003, 0x3) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x2e500) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000200)={0xa, 0x4, 0xfa00, {r2}}, 0xc) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:03 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b0") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:15:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{}, {}]}) 16:15:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffff7fff, 0x1ff, 0x10000, 0x0, 0x0, 0x7}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:15:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x5450, &(0x7f0000000100)) 16:15:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/57, 0x39}, {&(0x7f00000000c0)=""/229, 0xe5}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/173, 0xad}, {&(0x7f0000001280)=""/83, 0x53}, {&(0x7f0000001300)=""/232, 0xe8}], 0x6, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000014c0)=0x52c, 0x4) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000001480)={0x80fd, 0x1}) 16:15:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:03 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x10000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x18a}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)={r1, 0x0, 0x8a, "241613a8c0f7f9bde4c73b76feef280c501d61c716fda7b067e68a8ab2cdd4e1940c40500a001791908336575e91ed1eb827872ae1050a1712da1bd1122e99eec0a18234c3ec162e178b58db3cb2def5feeb8214374811ff68776b51c3ffa5874469a9a0bdbd9a0a92ed57b072efc4873ab30847d36f4c77f08a8a5fea2db2738fa2a32e6acab6820d26"}, 0x92) prctl$PR_SET_FPEXC(0xc, 0x80002) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000740)) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x0, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 16:15:03 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:15:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x5451, &(0x7f0000000100)) 16:15:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) 16:15:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8000, 0x0) fsetxattr$security_capability(r0, &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000200)=@v2={0x2000000, [{0x480000000000, 0x80}, {0x5, 0x3}]}, 0x14, 0x2) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x8) 16:15:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0xfffffffffffffe0b}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x0, &(0x7f00000001c0)}) 16:15:03 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:15:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x5452, &(0x7f0000000100)) 16:15:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180)={0x1f, {0x0, 0x0, 0x0, 0xffffffffffff8001, 0x2}}, 0xa) 16:15:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x0, &(0x7f00000001c0)}) 16:15:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9a2, 0x119502) sendmsg$inet_sctp(r1, &(0x7f0000000840)={&(0x7f0000000040)=@in={0x2, 0x4e23, @rand_addr=0x7}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="99f7f08ebcb7bb57dd80e8a4ab13d723", 0x10}, {&(0x7f0000000200)="664f9bd38d445cf570741402c0361104fd33c58eb4fcf1e7fea1b9a3746170c0eb8574bc818aa088adf3ef1d47ad86863db7110b8fb89f32f895d5f1ab94c9824f7638ae78d3ae5db696", 0x4a}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="348f9a6754cf8ef7e36dc3061af65e7e2bb4279c03d22eefc56a13cabfdd80308f37439c3ee7f476d571a4f376a522f224d17a226338a3cb31c20dc8ab091fa6b605b94850571322d9d00ec91053af07ebd5c19f4d84bbdac2a5d96f50fcc9f4ceb5752f3f0b630038115757fa9b9ffdbf3495c4ee06", 0x76}, {&(0x7f0000000340)="80fb72f1e6504b24d734b4ebfbb957605d0bc1709ec54a07476b3f9de49d8a4ec177097bd4445db9ae39fddd7668f85c618b99de62a4f59dacb3cd298ba23172c8c2267fe4bf89074a17d7498b348402c19276cad634b9b5641a501866cac5c892adf9f37e6288527c09aa14df1c8da6651a774828b3909d50922cdca2e73821b83658256f80e0b067029089b5858c52b481eab9d84f5a769c0606b818cf337e28d76ca7d7b4f889bda17f4c75c1f276001d1b11934dcca880c2cdfb2914a7e964134721e06fd87532f8b2ed396d1d3ef36b28e94444bc27", 0xd8}, {&(0x7f0000000440)="4f26e19ee2a044132e147549a53aca2e9cf1cc56dc4cdb659f6aefa1d28958048d7ebd48f9eae812ea1f26", 0x2b}, {&(0x7f0000000480)="6356e4a41a1e1f25b23d3b0007f07eed3b876832a1df41cd1138334f0dd1a3ebe8f88748388fda86223a556a1fee76cf1d2a690e49db5a4e5bf9c236a0638cce7944f49a5e385cca8e85b2ff800952d180c0ec1c1f35daf9c2bc3aee29051fcae8c155398d46ca6bbd3eda6d69281f503887f6906acf0cef582a114019414d540be9095d8b8be4358f5a20b5b9e6304c3a8fd4e5abf60166b74120cbdd4c8e3b2aba02a900ced538cc4cce1898a07dfd79230aecfd6ee6661d65c997198a84b98b52869b5b0d3cbf56bfdceb62bf4fade170859c9624b3a6980c2f32bb784cc2c066fadd1dc40ba5a75e098c92a0fecdd6cd00cb", 0xf4}, {&(0x7f0000000580)="ef169a42209a7ed8152697ec81f493ba9dde5eb80c124b25ed17c78e88704be12dee5e475ba6bdf638368bdf7c557bb05096228be357f8a6648a357c4223fb35b3f572371e5feea3ecfe5c36cc0e82ecb1a65594623360972193674a42e337b9573c806c034ba4e087866bbba6748093e5bb325b0038304d8b0a85a6f3c3dc07417438131eca23d7594e16fe5e89c6309788378db635b6ee01223575ac8ffd53a75b0e3edf3fc1314723831b096aadb794dc8118558592b1a88b4321cc6fc861", 0xc0}, {&(0x7f0000000640)="ca30a0ea1c87a88e02267aa4d400dd658e7c28b6db16e568f46dd47dc572177c2e5ccb1226513e6b260b28e9d8359051e47f8d311552c8797fc9119cede3114e36be841b5ea04c2343c1be5791de0b282e8fed42ff9be322c00128def8cee5ff3e28e5877e1d9f0500fba5ae3e4c55d7a28c18ce16086386b1c01a371bf463c436012cfc32709327264999ff47101995dc26bf3178fbf08bdbf315076cd5c49074bbb6a655fa78780b6461035c6c95788073f3ca911b0fee9e5c86b64ea51eef", 0xc0}], 0x9, &(0x7f00000007c0)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x1ff}}, @authinfo={0x18, 0x84, 0x6, {0x7}}], 0x80}, 0x48814) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:04 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:15:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x14002) getsockname$unix(r2, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x5460, &(0x7f0000000100)) 16:15:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000180), 0xa) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x1c9c380}}, &(0x7f0000000080)) 16:15:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x0, &(0x7f00000001c0)}) 16:15:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) accept4(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}}}, &(0x7f00000000c0)=0x80, 0x80000) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, &(0x7f0000000200)={@empty, @multicast2, @broadcast}, 0xc) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x8901, &(0x7f0000000100)) 16:15:04 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") dup(r0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:15:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000380)='+^\x00', r9}, 0x30) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{0x9, r4, r5, r6, r7, 0xa47aea8d4631804e, 0x6}, 0x1, 0x1, 0x1f, 0x2, 0x2, 0x0, r8, r10}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) sendmmsg$unix(r12, &(0x7f0000000980)=[{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000006c0)="8338d004fa276f6bd5e5eac314f6f2c3e4807ce40991b3893bd729997613789362027aec5883de7373930d57bb28ae66e2142390d866deedc4dd0152a8003a276f572270917831310d3eb82180bdb82c7818a6d9ab7c6df471722fd7223ff1fa241d5cb07b4d2847dc68ae88cd972f751a78a71f8616e3054abe7f7c8c9c71218d8a66fa49634550acd1efc6c5bdf5e48242805a401eda784078d96067abe531ecddbbc6ed06d61594892f6846fbc83f3f419c3880448536b0e0ae691832f7d7af5b95e4dc136ecfb3529f1ebdfa569eba2734d69a6d383c228d3a824a", 0xdd}, {&(0x7f00000007c0)="88f51bc1691cfa6ff5767adcb8796e212a6cbedea04e0922d4a988f9d932ce32aee5915f43a674", 0x27}, {&(0x7f0000000800)="2eab1e715c30250ce74e19adb20739da16870fa7f41c0cd73d0e380e12e94828c1e1d16ce442b9095c8786791934266a393f37332b0ad94f579ae9111d88060aa25ace16aed51fbbeb6987f022d96c2eb20694c919dde1dea78e0da1e9220b27d3d7860d90b8378158bba5af5cec", 0x6e}], 0x3, &(0x7f00000008c0)=[@rights={0x20, 0x1, 0x1, [r0, r1, r11, r1]}, @rights={0x18, 0x1, 0x1, [r11, r11]}, @cred={0x20, 0x1, 0x2, r10, r3, r7}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r11, r0, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r10, r3, r7}], 0xa8, 0x4001}], 0x1, 0x800) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r13 = dup(r0) bind$bt_rfcomm(r13, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:04 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000002e80)=[{{&(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000100)=""/61, 0x3d}, {&(0x7f00000001c0)=""/222, 0xde}, {&(0x7f00000002c0)=""/205, 0xcd}], 0x4, &(0x7f00000003c0)=""/83, 0x53}, 0x20}, {{&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000004c0)=""/148, 0x94}, {&(0x7f0000000580)=""/185, 0xb9}, {&(0x7f0000000640)=""/141, 0x8d}, {&(0x7f0000000700)=""/75, 0x4b}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/11, 0xb}], 0x6, &(0x7f0000001840)=""/220, 0xdc}, 0xedfa}, {{&(0x7f0000001940)=@alg, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000019c0)=""/17, 0x11}, {&(0x7f0000001a00)}, {&(0x7f0000001a40)=""/80, 0x50}], 0x3, &(0x7f0000001b00)=""/220, 0xdc}, 0x7}, {{&(0x7f0000001c00)=@nfc, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001c80)=""/152, 0x98}, {&(0x7f0000001d40)=""/52, 0x34}, {&(0x7f0000001d80)=""/203, 0xcb}, {&(0x7f0000001e80)=""/116, 0x74}, {&(0x7f0000001f00)=""/10, 0xa}, {&(0x7f0000001f40)=""/68, 0x44}, {&(0x7f0000001fc0)=""/124, 0x7c}, {&(0x7f0000002040)=""/161, 0xa1}, {&(0x7f0000002100)=""/139, 0x8b}], 0x9}, 0xfffffffffffff4e6}, {{&(0x7f0000002280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002300)=""/38, 0x26}, {&(0x7f0000002340)=""/29, 0x1d}, {&(0x7f0000002380)=""/228, 0xe4}, {&(0x7f0000002480)=""/202, 0xca}, {&(0x7f0000002580)=""/253, 0xfd}, {&(0x7f0000002680)=""/111, 0x6f}], 0x6}, 0x10000}, {{0x0, 0x0, &(0x7f0000002780), 0x0, &(0x7f00000027c0)=""/101, 0x65}}, {{&(0x7f0000002840)=@nl=@proc, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000028c0)=""/53, 0x35}, {&(0x7f0000002900)=""/211, 0xd3}, {&(0x7f0000002a00)=""/97, 0x61}, {&(0x7f0000002a80)=""/8, 0x8}], 0x4, &(0x7f0000002b00)=""/69, 0x45}, 0x100}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002b80)=""/140, 0x8c}, {&(0x7f0000002c40)=""/54, 0x36}, {&(0x7f0000002c80)=""/110, 0x6e}, {&(0x7f0000002d00)=""/159, 0x9f}], 0x4, &(0x7f0000002e00)=""/74, 0x4a}, 0x5}], 0x8, 0x40000000, 0x0) bind$isdn_base(r0, &(0x7f0000003080)={0x22, 0x5, 0x0, 0x8, 0x20}, 0x6) r1 = getpid() fcntl$setown(r0, 0x8, r1) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x9, 0x0, 0x0, 0x2}, 0x100000001}, 0xa) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000180)={0x1f, {0x4000000}}, 0xa) 16:15:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000000)) 16:15:04 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") dup(r0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:15:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x20, 0x4) openat$cgroup_ro(r2, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) 16:15:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x8902, &(0x7f0000000100)) 16:15:04 executing program 4: set_tid_address(&(0x7f0000000100)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x1b, 0x80006, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2085c00}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x9, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x7, 0x2, 0x4982, 0x100}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) bind$bt_rfcomm(r3, &(0x7f0000000180), 0xa) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r3, 0x800443d3, &(0x7f0000000080)={{0x681, 0x2, 0x1af, 0x200, 0x13980000}, 0x0, 0x9, 0x2}) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000040)={0x0, 0x1, [0x2, 0x6, 0xb4, 0x588, 0x3f, 0xffffffffffffffd2, 0x8, 0x6]}) 16:15:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000380)='+^\x00', r9}, 0x30) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{0x9, r4, r5, r6, r7, 0xa47aea8d4631804e, 0x6}, 0x1, 0x1, 0x1f, 0x2, 0x2, 0x0, r8, r10}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) sendmmsg$unix(r12, &(0x7f0000000980)=[{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000006c0)="8338d004fa276f6bd5e5eac314f6f2c3e4807ce40991b3893bd729997613789362027aec5883de7373930d57bb28ae66e2142390d866deedc4dd0152a8003a276f572270917831310d3eb82180bdb82c7818a6d9ab7c6df471722fd7223ff1fa241d5cb07b4d2847dc68ae88cd972f751a78a71f8616e3054abe7f7c8c9c71218d8a66fa49634550acd1efc6c5bdf5e48242805a401eda784078d96067abe531ecddbbc6ed06d61594892f6846fbc83f3f419c3880448536b0e0ae691832f7d7af5b95e4dc136ecfb3529f1ebdfa569eba2734d69a6d383c228d3a824a", 0xdd}, {&(0x7f00000007c0)="88f51bc1691cfa6ff5767adcb8796e212a6cbedea04e0922d4a988f9d932ce32aee5915f43a674", 0x27}, {&(0x7f0000000800)="2eab1e715c30250ce74e19adb20739da16870fa7f41c0cd73d0e380e12e94828c1e1d16ce442b9095c8786791934266a393f37332b0ad94f579ae9111d88060aa25ace16aed51fbbeb6987f022d96c2eb20694c919dde1dea78e0da1e9220b27d3d7860d90b8378158bba5af5cec", 0x6e}], 0x3, &(0x7f00000008c0)=[@rights={0x20, 0x1, 0x1, [r0, r1, r11, r1]}, @rights={0x18, 0x1, 0x1, [r11, r11]}, @cred={0x20, 0x1, 0x2, r10, r3, r7}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r11, r0, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r10, r3, r7}], 0xa8, 0x4001}], 0x1, 0x800) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r13 = dup(r0) bind$bt_rfcomm(r13, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:04 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") dup(r0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:15:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10880, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001340)={0x0, 0x7}, &(0x7f0000001380)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001280)={r2, 0x101}, &(0x7f00000013c0)=0xfffffffffffffd6b) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000001200)={0x0, 0x8, 0x9, 0x7, r3}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) write(r0, &(0x7f0000000200)="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", 0x1000) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) write$FUSE_GETXATTR(r1, &(0x7f0000001240)={0x18, 0x0, 0x3, {0xff}}, 0x18) 16:15:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x8903, &(0x7f0000000100)) 16:15:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) r3 = socket(0x2000010000000015, 0x80000000005, 0x0) getsockopt(r3, 0x114, 0x2716, &(0x7f0000af0fe7)=""/13, &(0x7f0000000040)=0x2d8) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, 0x0, 0x0) 16:15:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000380)='+^\x00', r9}, 0x30) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{0x9, r4, r5, r6, r7, 0xa47aea8d4631804e, 0x6}, 0x1, 0x1, 0x1f, 0x2, 0x2, 0x0, r8, r10}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) sendmmsg$unix(r12, &(0x7f0000000980)=[{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000006c0)="8338d004fa276f6bd5e5eac314f6f2c3e4807ce40991b3893bd729997613789362027aec5883de7373930d57bb28ae66e2142390d866deedc4dd0152a8003a276f572270917831310d3eb82180bdb82c7818a6d9ab7c6df471722fd7223ff1fa241d5cb07b4d2847dc68ae88cd972f751a78a71f8616e3054abe7f7c8c9c71218d8a66fa49634550acd1efc6c5bdf5e48242805a401eda784078d96067abe531ecddbbc6ed06d61594892f6846fbc83f3f419c3880448536b0e0ae691832f7d7af5b95e4dc136ecfb3529f1ebdfa569eba2734d69a6d383c228d3a824a", 0xdd}, {&(0x7f00000007c0)="88f51bc1691cfa6ff5767adcb8796e212a6cbedea04e0922d4a988f9d932ce32aee5915f43a674", 0x27}, {&(0x7f0000000800)="2eab1e715c30250ce74e19adb20739da16870fa7f41c0cd73d0e380e12e94828c1e1d16ce442b9095c8786791934266a393f37332b0ad94f579ae9111d88060aa25ace16aed51fbbeb6987f022d96c2eb20694c919dde1dea78e0da1e9220b27d3d7860d90b8378158bba5af5cec", 0x6e}], 0x3, &(0x7f00000008c0)=[@rights={0x20, 0x1, 0x1, [r0, r1, r11, r1]}, @rights={0x18, 0x1, 0x1, [r11, r11]}, @cred={0x20, 0x1, 0x2, r10, r3, r7}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r11, r0, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r10, r3, r7}], 0xa8, 0x4001}], 0x1, 0x800) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r13 = dup(r0) bind$bt_rfcomm(r13, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:05 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x80000001, 0x20000) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f00000000c0)={0x8, "fd04e50d1d1937ca3f46c87cd8fc6c3a05fe982ef8a64659b41bf3b7d23e7ac1", 0x2, 0x1}) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r2, &(0x7f0000000180), 0xa) 16:15:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x200, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x40080}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000200)={r3, 0xdfe, 0x0, 0x7, 0x2}, &(0x7f0000000240)=0x18) 16:15:05 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x8904, &(0x7f0000000100)) 16:15:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, 0x0, 0x0) 16:15:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000001c0)={'bridge_slave_1\x00', {0x2, 0x4e20, @rand_addr=0x2}}) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000040)=0x7, 0x4) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) getdents(r2, &(0x7f0000000100)=""/160, 0xa0) 16:15:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f00000000c0)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x101000, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x4, 0x4) r2 = dup(r0) read(r0, &(0x7f0000000100)=""/55, 0x37) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r2, &(0x7f0000000180), 0xa) 16:15:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000380)='+^\x00', r9}, 0x30) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{0x9, r4, r5, r6, r7, 0xa47aea8d4631804e, 0x6}, 0x1, 0x1, 0x1f, 0x2, 0x2, 0x0, r8, r10}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) sendmmsg$unix(r12, &(0x7f0000000980)=[{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000006c0)="8338d004fa276f6bd5e5eac314f6f2c3e4807ce40991b3893bd729997613789362027aec5883de7373930d57bb28ae66e2142390d866deedc4dd0152a8003a276f572270917831310d3eb82180bdb82c7818a6d9ab7c6df471722fd7223ff1fa241d5cb07b4d2847dc68ae88cd972f751a78a71f8616e3054abe7f7c8c9c71218d8a66fa49634550acd1efc6c5bdf5e48242805a401eda784078d96067abe531ecddbbc6ed06d61594892f6846fbc83f3f419c3880448536b0e0ae691832f7d7af5b95e4dc136ecfb3529f1ebdfa569eba2734d69a6d383c228d3a824a", 0xdd}, {&(0x7f00000007c0)="88f51bc1691cfa6ff5767adcb8796e212a6cbedea04e0922d4a988f9d932ce32aee5915f43a674", 0x27}, {&(0x7f0000000800)="2eab1e715c30250ce74e19adb20739da16870fa7f41c0cd73d0e380e12e94828c1e1d16ce442b9095c8786791934266a393f37332b0ad94f579ae9111d88060aa25ace16aed51fbbeb6987f022d96c2eb20694c919dde1dea78e0da1e9220b27d3d7860d90b8378158bba5af5cec", 0x6e}], 0x3, &(0x7f00000008c0)=[@rights={0x20, 0x1, 0x1, [r0, r1, r11, r1]}, @rights={0x18, 0x1, 0x1, [r11, r11]}, @cred={0x20, 0x1, 0x2, r10, r3, r7}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r11, r0, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r10, r3, r7}], 0xa8, 0x4001}], 0x1, 0x800) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffff801, 0x400000) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, 0x6, {0x7, 0x1d, 0x7, 0x14001, 0x100000001, 0x0, 0x0, 0x8}}, 0x50) 16:15:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, 0x0, 0x0) 16:15:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000040)='nlmon0\x00'}) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:05 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x8906, &(0x7f0000000100)) 16:15:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000380)='+^\x00', r9}, 0x30) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{0x9, r4, r5, r6, r7, 0xa47aea8d4631804e, 0x6}, 0x1, 0x1, 0x1f, 0x2, 0x2, 0x0, r8, r10}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) sendmmsg$unix(r12, &(0x7f0000000980)=[{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000006c0)="8338d004fa276f6bd5e5eac314f6f2c3e4807ce40991b3893bd729997613789362027aec5883de7373930d57bb28ae66e2142390d866deedc4dd0152a8003a276f572270917831310d3eb82180bdb82c7818a6d9ab7c6df471722fd7223ff1fa241d5cb07b4d2847dc68ae88cd972f751a78a71f8616e3054abe7f7c8c9c71218d8a66fa49634550acd1efc6c5bdf5e48242805a401eda784078d96067abe531ecddbbc6ed06d61594892f6846fbc83f3f419c3880448536b0e0ae691832f7d7af5b95e4dc136ecfb3529f1ebdfa569eba2734d69a6d383c228d3a824a", 0xdd}, {&(0x7f00000007c0)="88f51bc1691cfa6ff5767adcb8796e212a6cbedea04e0922d4a988f9d932ce32aee5915f43a674", 0x27}, {&(0x7f0000000800)="2eab1e715c30250ce74e19adb20739da16870fa7f41c0cd73d0e380e12e94828c1e1d16ce442b9095c8786791934266a393f37332b0ad94f579ae9111d88060aa25ace16aed51fbbeb6987f022d96c2eb20694c919dde1dea78e0da1e9220b27d3d7860d90b8378158bba5af5cec", 0x6e}], 0x3, &(0x7f00000008c0)=[@rights={0x20, 0x1, 0x1, [r0, r1, r11, r1]}, @rights={0x18, 0x1, 0x1, [r11, r11]}, @cred={0x20, 0x1, 0x2, r10, r3, r7}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r11, r0, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r10, r3, r7}], 0xa8, 0x4001}], 0x1, 0x800) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0x0, 0x1ff, 0x2}}, 0xa) 16:15:05 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x8907, &(0x7f0000000100)) 16:15:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400801, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x1000) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000380)='+^\x00', r9}, 0x30) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{0x9, r4, r5, r6, r7, 0xa47aea8d4631804e, 0x6}, 0x1, 0x1, 0x1f, 0x2, 0x2, 0x0, r8, r10}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) sendmmsg$unix(r12, &(0x7f0000000980)=[{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000006c0)="8338d004fa276f6bd5e5eac314f6f2c3e4807ce40991b3893bd729997613789362027aec5883de7373930d57bb28ae66e2142390d866deedc4dd0152a8003a276f572270917831310d3eb82180bdb82c7818a6d9ab7c6df471722fd7223ff1fa241d5cb07b4d2847dc68ae88cd972f751a78a71f8616e3054abe7f7c8c9c71218d8a66fa49634550acd1efc6c5bdf5e48242805a401eda784078d96067abe531ecddbbc6ed06d61594892f6846fbc83f3f419c3880448536b0e0ae691832f7d7af5b95e4dc136ecfb3529f1ebdfa569eba2734d69a6d383c228d3a824a", 0xdd}, {&(0x7f00000007c0)="88f51bc1691cfa6ff5767adcb8796e212a6cbedea04e0922d4a988f9d932ce32aee5915f43a674", 0x27}, {&(0x7f0000000800)="2eab1e715c30250ce74e19adb20739da16870fa7f41c0cd73d0e380e12e94828c1e1d16ce442b9095c8786791934266a393f37332b0ad94f579ae9111d88060aa25ace16aed51fbbeb6987f022d96c2eb20694c919dde1dea78e0da1e9220b27d3d7860d90b8378158bba5af5cec", 0x6e}], 0x3, &(0x7f00000008c0)=[@rights={0x20, 0x1, 0x1, [r0, r1, r11, r1]}, @rights={0x18, 0x1, 0x1, [r11, r11]}, @cred={0x20, 0x1, 0x2, r10, r3, r7}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r11, r0, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r10, r3, r7}], 0xa8, 0x4001}], 0x1, 0x800) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x8940, &(0x7f0000000100)) 16:15:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0x0, 0x1ff, 0x2}}, 0xa) 16:15:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000008c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000900)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001040)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x8, 0x3}, &(0x7f0000001100)=0x90) read$FUSE(r1, &(0x7f0000001280), 0x1000) sendmmsg$inet_sctp(r2, &(0x7f0000001200)=[{&(0x7f0000000040)=@in6={0xa, 0x4e24, 0xffff, @remote, 0x100}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000200)="b536f2ff8621bdd478854b2051a97f5d745440362b7ba31f52b431b6e072acfbc70aed1dfd02bab9272f8c19383277bda617b50070a85e00136ec2f83ca34f6aeef400f1de7e31080224f85164abc777bc9caf649e3c15754cb2a54cda4d294f8e103eee7e3b7fa9e1f9a3770758b5ee1702fc9a4cfedb5cd001f490ea3e5367001c95f0b203", 0x86}, {&(0x7f00000002c0)="bf3015323eb32b77c8f74e8f630cd8d21ff7fce1cf0342a1ca3930d761e591e8e30d548c4d6fd883124b75235f2c090636417b9e668be2e48a285bdffaee7e84c66eda7dd46c241e396ae7fcc8daf674d54d079eecd907a19ec3c208d8cce83d380eb1e6462b1445d931d2e3eca637d2a83d7682b6739d43c8b4aad48634af1fe3f41613fbbb11b9b53e98c9e4434127f894ff3f8cc15596ae6ea9", 0x9b}, {&(0x7f0000000380)="6ed1f1f2531f8fab3b7f22dd0807ab9491918f8037e9121d9d5ef359aac8c06cfde56e01e78073c80eb2c8b5145321173faf48a08d6e4968489d8a30d66640d05fa7db3d15a5d5b448d7872b093d60d53c8ad67a99de53e2c15c331db1ee2b86a37d6f87f08456b59a1f0f6fc93153351308963a49ae54bec3aba7d4953e0af2557fbec0d7cc210442d854de7c93b026929e457f091ad486a9cf2bc8a39f2709f8e045e1f85fe73744f8d564b5e3a92156fdfe57b3eca8389e8521932cf060c08b71eaf32f5705d237657d7fc660", 0xce}, {&(0x7f0000000480)="262fb6054fb7c508bb738924aab7823eb9d5fbc312c2c03dcebb7067190d81921874ad800c5cc17b9314679b98e53ecca8f32bf9452367688efad9a5620baff5ba8bb91935e9a71c4909ba5e3595c82df42ede3da2bf4cfa6b730429d6e29b574f8ead383d6df97e45a5c83c3610f58fc4fa68f137eea6dc9cdec15c51095f2313d9911e8752d17b53c5a4290bf819fc6c16efb2cb561188d811348e5a4c2b99123f67c494d4", 0xa6}, {&(0x7f0000000540)="20004e47625c383801e89ef476cb7b5f5a0c73d154803f08250b9a24f571925216425db71259088b41bc8661cfc39eabcbc615a17b83dafad5d5cc36b34e38618dc616b9caf1bc152e1389f19fd3b0677c6f228ffc3893ab69e7d5fe5b4774029fae562846d63b8934834353be8f491a06e9ad84d6c08975fb5199299ea4a4c8f7175062088c0659864e2b547981df", 0x8f}, {&(0x7f0000000600)="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", 0xfc}, {&(0x7f00000000c0)="adfafa835e8904b1393bd38d180600482becc424fd4d9e952553cfb855908787191d27d1d51a1ce5ce8c5725", 0x2c}, {&(0x7f0000000700)="7fa08655cc1a8670d0f6b723b4522c4c338736e6329eaa2fe9c4b11df57411c89b1fd6785f46fa10b4523fcbe661d33764b0ea25ed1632bcce1f629a544fd75b588e02419cce7ed86a2aef9811e35ee2805c93dfea1e999fb54c655531da2818", 0x60}, {&(0x7f0000000780)="6464ee6607e9cac5458e395b48c7ec837c13c5c601ac63c2024254910dbfa72c79d689bbfacdb8a6f1ebcd6a310657d7006cc23040b1465a2ee390dc8d471f9f59c72816fb3bee6b39a92bc2d964afe301adc259dd5d0666aa6796f0370b3dd354605764b63d8fa06edb78", 0x6b}], 0x9, &(0x7f0000000940)=[@sndrcv={0x30, 0x84, 0x1, {0x5, 0x3, 0x8200, 0x7, 0xff, 0x400, 0x10000, 0x2, r3}}], 0x30, 0x4000010}, {&(0x7f0000000980)=@in6={0xa, 0x4e21, 0x4a, @local, 0x2}, 0x1c, &(0x7f0000000f80)=[{&(0x7f00000009c0)="7238f7317e14192b9ed52810c4fe84485413e9f00c7d385df6f06825f3472e1919d945fbfa6e7fc39741465237f6d9de0e38a3b17dca1e05f5a2a67e0059", 0x3e}, {&(0x7f0000000a00)="a55add4476805ed3e40eac56c7a1e5b68077bf019249be89cbc467cfe129a3f444d9cd2e5d11f59093f3c1db6b7bcc038016a848a67d8ee45b489cee03a69e4a7dc944689a7db71157fd21c29b8efefbd3a9ef8a92d6c8f81330520bd76285b5d5dd9f170e763fe8b0b06e578cfa60a34335", 0x72}, {&(0x7f0000000a80)="6ae4fffb4adca8ee38742258b24b3cfe4616b23de1158238ae56a3e593c32eda18db3d2695bb941e983d3ab40a14f83962274c37f6384b77e4903c738e688d3e41fbb245e36769d301b22db724e67473eb813965d347d15e7e6c9cfc3ca96bb9e7a644a5d5713bb0c3a846a2b17f155f4df1b38677f03e116fffef34f52bc986c6a52c50a2c6f3bd4ca5f994a874a735edd35822eeda05363f3f3c1cd543a2f59475d2e5ada9cc2c3f012cb0912b11405d2f1f5d022917ba0716ba2701a8ec90f7664568ef4b50ddac189a825980d3383e8f72433dc9f881", 0xd8}, {&(0x7f0000000b80)="e31d7e90cdefaf91396f33a12d00f2ed61da93b94fd76402545cf83e8e53754a7bd78902da11b99479be6f158306d1ea5f3e032336ca55b1692d50337fefa53653996391972d2aa78fca28342192757eb9e1cfb19a14c20700fff96a782045ff9392671a5ee3cabe3c6e01761fcb44e8a129ccf82dac1c73c6701e5fb5d7591af62ec8099ed7bb1b7e90148b37236aad10b455e397938ee4c32846dbf699c060ef5937ea390e641e0bb6adcd80746e0d4f839654ead1ad14b010edf317", 0xbd}, {&(0x7f0000000c40)="88166bdfc78bb62c7345525eee75b277344e5358bb20324bfbf571a85074941515a19da94a9e54208882f67146d321f0ff22fb166c548ea78bbb264229bcba503e33d74bf23d343118c23e23051f553618c061f5112bc394a0e6c6fa4213b6736421db25020e6130c6bb2bd9683248ba244805e713d0a14c873b99db904f0952000886a9a0c5aeb0fa061b53da1e3923009801fe0f4e3e81a4b08dc4c31f8d4927a86b6188620cd638530ad0cdfdd51bdd32a975919dcb7a6faac58e717f6f881e0cbaa56311ac18bda2180d9829fab1cc426bc750b58af8fc93134c3a8ec65041d4e330fc72d1b57a7fbc647434d3746b0351704c615b9b144402", 0xfb}, {&(0x7f0000000d40)="b1e19bb711d496e584f3f71879c0f4c948", 0x11}, {&(0x7f0000000d80)="8adeca49c51b00bb16b0dd5b12aeb4ddb90c406265d7216c30226bf9ba36c694b6fdf63c51db9878c107e046c255e62aeb81dc1281df4a51aee48ecfb54ff9b3da0c39c5955620f3c77462445c710c5b63568987fda9414ab2f23a443f67048f331b83322ebe32f0d2e5e17fec70bb", 0x6f}, {&(0x7f0000000e00)="de79160a3bd28c7687a9ea8cab81dcbfe83037f2eec3fe9c366bdc1c407f28ceeebee078f1d752bbc5b50def23ba62bb39ed64603230929924434851f2663584864a314538dec04995436acfc7212ff06fb8c216450dd698fc3d5f4d4b30d302f47a5d19c325c834deb00c803110867d44bf7ad2b474ea3584b9346706d21eb054161f970a16bb21f0f6f9530a67b03e81b3584a6415", 0x96}, {&(0x7f0000000ec0)="4de43f49e87829b6866443ac14464ed34808226309c150a0cf472900674827bb2b5aa98ffe7eef0c5a5a5d914646417c4e5311d97c7fd5538a2631ef3745c5fff0cb3e656492a298eff1099b7252b6ea15bc91bf5fb41e77bcd2f99eb2f20267cf595508a2387dbad753b641286118b90270ec92b6e3a2eb6d21a1c56215b53341f928c082cccefc1c6150b42ce703bc8ba2f4dda1743af9", 0x98}], 0x9, &(0x7f0000001140)=[@init={0x18, 0x84, 0x0, {0x1, 0x80, 0x5, 0xffffffffffff95ed}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x28}}, @authinfo={0x18}, @init={0x18, 0x84, 0x0, {0x10001, 0x20, 0x3f, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0xbbee, 0x2, 0x8, 0x1f, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0xa8, 0x8001}], 0x2, 0x20000004) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) write$P9_RLCREATE(r2, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x8, 0x2, 0x3}}}, 0x18) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) acct(0x0) name_to_handle_at(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0xc2, 0xffffffff7fffffff, "2802245945baa41f6cdc4a9cf00e32dafaa06c6a6ad0d7b0a4131f14b353db953f8913b28ffa1abcb7c7e3045a4ff6520707278c1385c0c60aba81e1bffce328c2620516dfea7e8eb47743fb8714c1c971506c45b21d986ef7cd4b61771d85628ea45f7f01af14bb3794be84b8ca4d9b0b53fbe0e4f4b425ec4c3d9e84785408dd06a0b04de7cc238fe8199ca5a733bfc817c40684ba11532557d1c2058082febf1d53b6995b24ba2e10a130e1bd3a1e7b722947d9f7892e50e3"}, &(0x7f0000000200), 0x400) 16:15:06 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x200, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x40080}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000200)={r3, 0xdfe, 0x0, 0x7, 0x2}, &(0x7f0000000240)=0x18) 16:15:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000380)='+^\x00', r9}, 0x30) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{0x9, r4, r5, r6, r7, 0xa47aea8d4631804e, 0x6}, 0x1, 0x1, 0x1f, 0x2, 0x2, 0x0, r8, r10}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) sendmmsg$unix(r12, &(0x7f0000000980)=[{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000006c0)="8338d004fa276f6bd5e5eac314f6f2c3e4807ce40991b3893bd729997613789362027aec5883de7373930d57bb28ae66e2142390d866deedc4dd0152a8003a276f572270917831310d3eb82180bdb82c7818a6d9ab7c6df471722fd7223ff1fa241d5cb07b4d2847dc68ae88cd972f751a78a71f8616e3054abe7f7c8c9c71218d8a66fa49634550acd1efc6c5bdf5e48242805a401eda784078d96067abe531ecddbbc6ed06d61594892f6846fbc83f3f419c3880448536b0e0ae691832f7d7af5b95e4dc136ecfb3529f1ebdfa569eba2734d69a6d383c228d3a824a", 0xdd}, {&(0x7f00000007c0)="88f51bc1691cfa6ff5767adcb8796e212a6cbedea04e0922d4a988f9d932ce32aee5915f43a674", 0x27}, {&(0x7f0000000800)="2eab1e715c30250ce74e19adb20739da16870fa7f41c0cd73d0e380e12e94828c1e1d16ce442b9095c8786791934266a393f37332b0ad94f579ae9111d88060aa25ace16aed51fbbeb6987f022d96c2eb20694c919dde1dea78e0da1e9220b27d3d7860d90b8378158bba5af5cec", 0x6e}], 0x3, &(0x7f00000008c0)=[@rights={0x20, 0x1, 0x1, [r0, r1, r11, r1]}, @rights={0x18, 0x1, 0x1, [r11, r11]}, @cred={0x20, 0x1, 0x2, r10, r3, r7}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r11, r0, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r10, r3, r7}], 0xa8, 0x4001}], 0x1, 0x800) r13 = dup(r0) bind$bt_rfcomm(r13, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x8941, &(0x7f0000000100)) 16:15:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0x0, 0x1ff, 0x2}}, 0xa) 16:15:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000380)='+^\x00', r9}, 0x30) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{0x9, r4, r5, r6, r7, 0xa47aea8d4631804e, 0x6}, 0x1, 0x1, 0x1f, 0x2, 0x2, 0x0, r8, r10}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) sendmmsg$unix(r12, &(0x7f0000000980)=[{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000006c0)="8338d004fa276f6bd5e5eac314f6f2c3e4807ce40991b3893bd729997613789362027aec5883de7373930d57bb28ae66e2142390d866deedc4dd0152a8003a276f572270917831310d3eb82180bdb82c7818a6d9ab7c6df471722fd7223ff1fa241d5cb07b4d2847dc68ae88cd972f751a78a71f8616e3054abe7f7c8c9c71218d8a66fa49634550acd1efc6c5bdf5e48242805a401eda784078d96067abe531ecddbbc6ed06d61594892f6846fbc83f3f419c3880448536b0e0ae691832f7d7af5b95e4dc136ecfb3529f1ebdfa569eba2734d69a6d383c228d3a824a", 0xdd}, {&(0x7f00000007c0)="88f51bc1691cfa6ff5767adcb8796e212a6cbedea04e0922d4a988f9d932ce32aee5915f43a674", 0x27}, {&(0x7f0000000800)="2eab1e715c30250ce74e19adb20739da16870fa7f41c0cd73d0e380e12e94828c1e1d16ce442b9095c8786791934266a393f37332b0ad94f579ae9111d88060aa25ace16aed51fbbeb6987f022d96c2eb20694c919dde1dea78e0da1e9220b27d3d7860d90b8378158bba5af5cec", 0x6e}], 0x3, &(0x7f00000008c0)=[@rights={0x20, 0x1, 0x1, [r0, r1, r11, r1]}, @rights={0x18, 0x1, 0x1, [r11, r11]}, @cred={0x20, 0x1, 0x2, r10, r3, r7}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r11, r0, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r10, r3, r7}], 0xa8, 0x4001}], 0x1, 0x800) r13 = dup(r0) bind$bt_rfcomm(r13, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x549283, 0x0) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x0, 0x2}}, 0xa) 16:15:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x894c, &(0x7f0000000100)) 16:15:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000380)='+^\x00', r9}, 0x30) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{0x9, r4, r5, r6, r7, 0xa47aea8d4631804e, 0x6}, 0x1, 0x1, 0x1f, 0x2, 0x2, 0x0, r8, r10}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) sendmmsg$unix(r12, &(0x7f0000000980)=[{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000006c0)="8338d004fa276f6bd5e5eac314f6f2c3e4807ce40991b3893bd729997613789362027aec5883de7373930d57bb28ae66e2142390d866deedc4dd0152a8003a276f572270917831310d3eb82180bdb82c7818a6d9ab7c6df471722fd7223ff1fa241d5cb07b4d2847dc68ae88cd972f751a78a71f8616e3054abe7f7c8c9c71218d8a66fa49634550acd1efc6c5bdf5e48242805a401eda784078d96067abe531ecddbbc6ed06d61594892f6846fbc83f3f419c3880448536b0e0ae691832f7d7af5b95e4dc136ecfb3529f1ebdfa569eba2734d69a6d383c228d3a824a", 0xdd}, {&(0x7f00000007c0)="88f51bc1691cfa6ff5767adcb8796e212a6cbedea04e0922d4a988f9d932ce32aee5915f43a674", 0x27}, {&(0x7f0000000800)="2eab1e715c30250ce74e19adb20739da16870fa7f41c0cd73d0e380e12e94828c1e1d16ce442b9095c8786791934266a393f37332b0ad94f579ae9111d88060aa25ace16aed51fbbeb6987f022d96c2eb20694c919dde1dea78e0da1e9220b27d3d7860d90b8378158bba5af5cec", 0x6e}], 0x3, &(0x7f00000008c0)=[@rights={0x20, 0x1, 0x1, [r0, r1, r11, r1]}, @rights={0x18, 0x1, 0x1, [r11, r11]}, @cred={0x20, 0x1, 0x2, r10, r3, r7}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r11, r0, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r10, r3, r7}], 0xa8, 0x4001}], 0x1, 0x800) r13 = dup(r0) bind$bt_rfcomm(r13, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0xfffffffffffffffd, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x0, 0x2}}, 0xa) 16:15:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0xfffffffffffffffd, 0x400000, 0x4}, 0x5}, 0xa) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000000c0)={0x7b, 0x0, [0xfffffffffffffff7, 0x5ee, 0x1, 0x1]}) 16:15:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x8980, &(0x7f0000000100)) 16:15:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000380)='+^\x00', r8}, 0x30) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{0x9, r3, r4, r5, r6, 0xa47aea8d4631804e, 0x6}, 0x1, 0x1, 0x1f, 0x2, 0x2, 0x0, r7, r9}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r10 = dup(r0) bind$bt_rfcomm(r10, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000380)='+^\x00', r8}, 0x30) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{0x9, r3, r4, r5, r6, 0xa47aea8d4631804e, 0x6}, 0x1, 0x1, 0x1f, 0x2, 0x2, 0x0, r7, r9}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r10 = dup(r0) bind$bt_rfcomm(r10, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) getsockopt$packet_int(r2, 0x107, 0x13, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x8981, &(0x7f0000000100)) 16:15:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x0, 0x2}}, 0xa) 16:15:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) prctl$PR_SET_FPEMU(0xa, 0x3) 16:15:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) 16:15:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x8982, &(0x7f0000000100)) 16:15:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000380)='+^\x00', r8}, 0x30) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{0x9, r3, r4, r5, r6, 0xa47aea8d4631804e, 0x6}, 0x1, 0x1, 0x1f, 0x2, 0x2, 0x0, r7, r9}) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r10 = dup(r0) bind$bt_rfcomm(r10, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000040)={0xb, 0x0, 0x4, {0x0, 0x6, 0x3, 0xac92}}) 16:15:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x8983, &(0x7f0000000100)) 16:15:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) 16:15:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000002740)={0x0, 0x4}, &(0x7f0000002780)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000002940)={0x0, 0x1000, "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"}, &(0x7f0000003980)=0x1008) sendmmsg$inet_sctp(r1, &(0x7f0000004e40)=[{&(0x7f0000000040)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002480)=[{&(0x7f00000000c0)="e32d01431a6398f75a4f1bee44eb", 0xe}, {&(0x7f0000000200)="b839d08f2cc36b32d38b0c4841f9832b40ecb40cb300ee1058801bfe981c9352a1df0e1b1ca130abecd91c0baf41625b1cef8c58abfb43b1c8e2b75969fb7babc777cf35cffb7f65c96d02193a700b2f46398fb57ccc12441124c4151f4db8e04be155b6a3433c5a4186a0f33f31e91ac95a7dc37e7d3d44393593f251768ff6a797cc91c3e171ffff865eb65bef4c813a567a29d3c81422e133c1989087748754d3261af9e34fa1b7060b01f6771b1f277a30ca0cc4c806945badf6918955cc941e68afac89146944317644ac91b28d32d396538c4ada9e3ca4383845945027f6576e3d28f5859b0ef495338b5f04abbd0d045f70ba94f0fa46bd1211dc3264ecd03ac1d43bebae9b787d07fdedeaa3706f1c727a9ae40cf736a0c27c83f3acebc3b98209d0623ec585671ebb24be873042534915cef4b109a4acb1da2b6ad46b1bcff12246186fcd26ecb224d7f8e846c0c5198af79337e69b2753b2d905760794055f6c9a36cf60728575cc55ae18c597103807d63e3e2492712c48ab2a1d4467cc8ba3cf12ef6af97b4a25ab4ba09158e07cdee3710041d02b8b57bb6e64e0ff638e7901942a105e57d1f0238725080882eff93a61b07876678cde901065166db4ee8e7f488aae51276a52202a1a79758d3300147f840cd89c6f97dac1a0561c24ac0e64c8f8e7a59c72c88da03bd4e79acb288500775fc117c5458823741a377af9e04d4e8756c91c1b0e33e2534eab70697be0edd7de9ea8c066794640baeda8dd26e6e751006a7c44486414e5888653bf169c42e4824127b166d5226cd7713b510a0c2a897c194eba8ae90e98d5ae3533891aa1688bbb6bd72cdcb5b122164ff2dcf62a66c3f3e3694d36044663bba1b85f5aaa8f507b701e9160a84ff7d4b32dda38822b17419e206daa06460dd0c07787e780dad22152e446a1571318618eaf775e493b6d44e966fb63eab59e6fb5df5a8b45a54ed574761ea903d2075ebf26323595a337186aa6bdc7abd9bf9331336bcbc382c0414378e0e217d1b24507511571137f0a6a8ef85ee45bfcf7d045f7752387aa2ca93d2df93c15f40efb0193af7827b77e6ac20d3d61a74aef4b0186bea953e3e304c0ada464ff7671b75a1df28f4a320855e355521806781351413427018423f538a3c2d8988c0b3cf7c37bb59c3751d81874b3116b80df7adcd1ab0b9ffd24d0392c5f96bd4dfa6910700a6e74c93de108c368c5177f25213f88c98cc103229d64b65fec40e3f00a1c3eaa88c1997014b89a2b4350e7d9924b1dc8fccfe98bd0c4f2784bd87e7162ddc1e2be9f564d01bfd476bc3e899dd3de7a19a70b962fd695989c3f01daf149a3ce2179915ba617d44a40cccdc1c96a1896c7fd7174ba35a844b252e7e5ef418c1fd4027ebb2e7b3b8c69232b83a92a92c2e6348771554f36f6e6b3cd493cfc5a5ebef9094d9709837a2e5181621dfd90eaface11299f2ee5f7a09e4dc6beb8a43a8f06063302340a6e13cece7f79ecffea5b317214560aa5c47b3014b95d9438fe5098f0fa6cc992aa6c5078d460f2d6c3eb01b6149712efdeba3b34e09b17f4d6b1f95a2753edec543a9379109ba6da79ebeb5c4ba8db8ac929e20b573a13c91cafb07312038c19a8fec401266c765ddc5447cba51cb13c6a010065bdbf4acd9c28d5265865a41e7e7d625a71542097104afd5f08e1096c96015272f0abb322d0560fd1715922baffe5d244473dadea5c2e7c2420ac2188f2dca0741cb89e1d4571ff7f9d8bfbd3c9b25d582ef2c00103a6bc82598e50cd20d20a7a3e9c0ab8423a447ec2df9a389cf14a9e82e8abb23ab94a3eae9b6c7dfa99d75454697cbdb71d3063b460b7988cb46849278652ead7a65bc988f34378824ff5e5a032bff45000cc44f11ec1999e23608b10b02eda3073731f9a271506c0a4a8656de25cf36a7263286e9202d5fc1b1ce37fcfe6187b945a4c3d0a58ae99f99f92ef825201f76c7b358e54fdbfdf1b42e8836b8c54fd43b13596083b30dc8197500c62633ad991f17f1c7e3426ef7b6c8145379c1b79a8c8d34a289fd17e153aaf55da6490a27fbfc69ce9eaccd55c18d29711ea3cec5d1812f30fbdd819eb26b534515aeb95e5f016943464bcb3362d884daf04bce64240e90a6e50ed4c158adbca91cf81e3c24612d05b4d2444dc119318127a84d1e945daad987532d4dbf32490cc8b7ad4b34aa6e4c570b7bec666981ebe811284b48fa41ee909fc4ade9c4d39681271bfd92517f8042ed0e1a57b788ecac581da85873e9a4054b78052f1a9c80d0b8c99297cc0b7a3ab903511260a836a7347ee39838dc89c78f9759a68e3a1377421a8819b8d4e7214c6c167c81e0bdc813d5c28df8f8c99fac13a102ffb4518a48aa49634aca25f9ae69c2cfa6bb1fe392726da4706162f6d12e12baf4c1c5c2b72cd7202ef273814f30c118e4b4afcb4de7c8ddc0b6e7873b3f5b768700daada07eb9dd02a15802866d7deed4c22abaf3640dcb095324670cebdb49cea48987da0e5bc69984faf8dcf6bae6ffc30eb29e0cce1224ef4d9c7e425974e023fcb344bdbe0bab734cf527417a7203a623db6e8a950d86b52064d62945f3b8351bcdcc78384332d3019bdd3aea836cb40f96916187b5c7ea548d24ea3eb20ba14998307bc1e03491e3479f0a9caf0749274bf4546e3672a5c2421a5290c667a74ff282a651e9d37ed803404aedde49069f4224bc8044b248192ea9716b64d6851cbd1d23d296dd0ad4e3398e59a9b40ac73f3d4fd17b6cfd3b7665b8a4591674d0ef2a4998a03b69819046a2efd0e2f1c0375a70628be40f97fe7aeecaba47ecd9dfdac4bf7c36b606c3753ce38a0ebdc9affd84a9dd2673351b104e76e2ff9af85e588c8325bcd14666d604a2a36e121e4b4f649ad8fb4c1ee800be4a55dc5d7947ccb608ca7bf37dea59d403e6ae6132a0821a8f3f3aec6f2a86c603d5d558cbd294ccd99676da0b6c20199c1e889325579c309c46d3e9b810709e83984005c107b4dd95e8e2cd9f26c162bb57f39cc8f1d54f001f9b1e193664dcc9cef81401dee93f9918a4cefccdbdf6c8fa58538f512acdff4c3bb21f77c7fe24b2b1df97c65e125ed1b4328af63cb3d912fdc33164cab57c46707100205b3ebd644634db8008cfe79d86d727e489b6db14f15d2c155e0dd1d17cb5210137a0597e0b06790241e28a1b60db20e46a916b4cab05b4eda59d42a864f045a2e7263fe34e6048024a36f7f4974c7cd384e31e1d9e1f8e8ac0b63103872fd81794e8bfa76523e4d5682694c9cb6edd6e18c1d73f1a8c18c73f8593c971637aa929b54a9ae7891ee31f4be791e092fee587f4b4d8a7f003bf369287e2f99b411857fb635ab3022aff65e7f735dbced285072b85835b4eb85f0472ffbad8205a1d792ad7ab7bf0501daf935abb82d8034087ef5edd752bef70697e4d2fcdc523d2f703fa713f64215bd95301322f3d5decb2b2718166b1663937e5c826cc08bfafe06b75d4b4375b61d08ca5b0d863b89f3af7edb4ad6d80dfd477066a33592942471a8d42bc414faebbaff7b55044b8715c258e9274aa489dcec2273c5379f9ca55c5f641d1b7b2c21188241fa349d38f3130dfe3ee05af75522bb254e1d2c2d29c393c24827efea8d469566c6d08c02eca74b9a299355b4f45daa288c9636d484ce37c2f2be45be38bfef1ca7f8826ffe61d3f5948a1290c77c9191e0515ae0f33fee7a473904e6c4bc9b844c43002171d0a9ec16cd14d6a63f0b0e271eaa6d343418151e0c49675150d4d6bae460ab3e18d11860cbea0d2283ed295a7f1f29a168bc5242630fe743d3314b3f9c93143fc8312731464cbbd8c75a9e51be74dce8b364ac19737b92b16cddeaaf46b3f81029bc379718d2930b0e0ac40cef19a2d7c04c6e5d8af4c6a1f7d8fab293026e7490014d5963b926a6cbafc23677fcc706f70d830720c70a6a02da3db7eee60368e2ee8e405032c8d879dcea490b36a3ecdee952628c995b84539c9493c19b75c99674e3d81be844cb6b63ad3118e1a07cf13e2c4a90247ad21dff60353fa57c7d9b8202724d0d20180de9766cac53b1e2615f07db990a373336fbdb06a71f922e2421c75c4022b1f228ccd3f749c57a6ffcca203f551b6b580f8ba8c514f48cfa52a809bedf99bc60aa8d6cedf28ff24793c17f90f1b91c01e1fc0b32896e78a9ecb646d1439f03516c5260e5f4ad1994f5fedd5753f54319573ab75a3fe7c44ea00c9a6005f96cd9e0688a6cb5e78b8bbea373f69c19ad8d41bac3f18d242220ccad23c11b82fb5e86c9d5d605d131deb33814449b7977bcd7ded1b60c55c7f22e1024ef1e835a88c78546fe42e8e409204039d2b60750d1a2d4ea7084952a536aba34293a9996a2f4ba40c92555bfe6716a9fa7ed15d4ffcae6b9b27da0f662d5db6676ee190167f491c497d5dc4ad9ddff9f1dee7a2e389b4fe4aa0ae447c4ef609de83591605aef5b4af833d54855c2e769ef4b2baff7888e92a4834cb121ba96f3b495090fc80337183ffce8795a31149ac7049ed17b4fc7346470628d541a88560aa28180989372dd5c8c6a61b79767fe7fd62964bfecf19ea3e5151fe93ee215ab6c2a9c82256661d505ac1cf967b62aa7aa6d4abdaeb6236fcd6026a35cd7043ee1a93c307a6a154211b7c58bdc1eef87d003c5ce90d209726a1a10fa10db6a5a9056513e17752f902ae83e7b57da29976ab034c766b1348cb23bf90ec557d752a54a135fdb66e1da8a266cea9fd917bf1e013b8e7bef6dd4cc93ca50e8bec4036114bc9fae8c1d30ae45a6ee6f59e2873df98403423248b37ed8442dc76c40f050b652a7158598f0e1add026ae42c32a819015b4f683ee0b94a89fdfc9a5bf85d890f61b5b35c0ab8623c9a260e7e183d80fdb2dc7636d57e4786614dd3387e8d524b6de65c633e1b72145efb32264ef15dab5b6946e78847c1f9886d85fc33ea1871b8c8cc0e8e86960841cb45e216ac6d783ac0ecd2b75ca92a76ea270740a4066cdf44a1aa416fec0a7ba64db67f5f8fdaa1d2c859c9eb08a60b24122ef3227d4553221f0b7fd2083ae05f9ed32be50d470a878ced06e78ef37de88f23b2f90d78a142ff01ee9743dc6b8b1394e736b52d754199e586effad473998c39a33411960c15851c673a5fd717d88fc035f7cd8d0947d804229867638d5fe9348000a98824b8888308b9b63e2656e013ef7f8a088f57c00f61d850c013be0e26bfec418330a6e364d1361548e114a694cac9aad8fc10114e73d4b7d869e7ec75dd09dd977d0be8cfb42332f5243147d517562045d522d4a713dc5fee5344f510b9a817534a512de67ac5ac5755a6e424e0e69517fa31b1f656c351a813fb2a712b674d6a087e4260d285e44edd8823c3878a911e21dbb7f7f14798c14c243bbe5097779963d9009e229091242f71940a1c55c8c944223c0949d133f6dece70e989fe8ed56950fdaa4d61b94e99e94b399e59dda9438cb535fec4a9ae0228fb5782f1ca88252bf2fe06a25c5382357874b6b3707e8f09462c3308db5f88158f35794b6cd16e809ad106d12c4f18faf282bb3b03f60e8fcbc15e2c69572a8bd4553e3410cff635c5ddb8144f2f6a015f8a289ffffa7affadc0a19a62ba476d00e6caec0574d3d4d1f459682f26bf5f7604e9bc921dcb902073f7a1b785d19af546ea12cb5ab73d7c53a53eb96249476127b8c2b96292a2900eafb54faa43f002dc7269e5f6cdad9dbcaeb90febde226942bebc65003", 0x1000}, {&(0x7f0000001200)="7ef2a0c459ca0c0a240d9d60f048e4ef603636be7bc7e5a7abfae32d2f2aac098e5f49a1991a57dc7e434d781921020ba9fdfd975b214b08795e766c9964623b506f68c2028b0f09bed94c6bcfde537069", 0x51}, {&(0x7f0000001280)="5545fef6ab702dc7c5afd85bce91f486777a4647ba73408c3909e14c60e4b43cbaf16f8bb1a86826768fb6da1b885d49a27a81eb58bc8a3a548fd81ba6891f8d4d23e20cb8bf3619611901b5ccda2f8b2b8e64af2ce3a260c1ff00c04faf1718a82d73d36ee88691ebcabd9049cb0cbac86989406059334c6c65423392dbdefedecb1aee4c6642b4aa2873cee2bf5fecd20576e2103fa55ea1986176134b4fe30befa84dda62d32e206eefc0191669169c3ba98464c9c43d20c2f5e694b122f2086d475e7f8711fbb21d92552c26351cf3cb19f0412c7017d2420913b5e924bffc075da5ebe794cc1b34406878de187fd60e", 0xf2}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="66ea3b11244a383491e76cfdd41d856411e30ab7ba50a62483d1d4862a552cb4af0cc820666c51041b8bd3ae843bf97d683c9b11467c58627eda1e2904bd819a2d2cad7df566d891e4ddacf002d4867937ae8a11b9e58c88df4a56403a6bb61e7d9c2932efe4872b2273b59cdc2d96ff1360619c51dc7aa608363f254c49c8c7045fb702ef6f45e2d48ac49f4598d67f2475380ab40c10cc4fc294f79d9eba721ba6e73501f60037270cee654750c31ce0708881dfc4a232b10a6a76606f14db6586ba79f536636155908eaa0d09a37f2e751a44d7df14c6a39d2d378e7037ec", 0xe0}], 0x6, &(0x7f0000004f40)=ANY=[@ANYBLOB="200000ffd3ac0000840000000800000000000000000000000000ffffe000000000000000000001008400000008000000c8de0e599f960bce99a4002f37a8d02e18000000000000008400070000000000000014bb00000000180000000000000084000000000000000700aab9000100010018000000000000008400000006000000f8ff00000000008bf48bc3f306ffffffff6019268f17c74b2c3bfd4c3e16074801e1cf85830e47b2bc706ae92ea8b91d0ea7202bc5cc6d"], 0x88, 0x40800}, {&(0x7f00000025c0)=@in6={0xa, 0x4e22, 0x100000000, @rand_addr="7c8cbd26c0106951313d4caaed88bd7d"}, 0x1c, &(0x7f0000002700)=[{&(0x7f0000002600)="7bc4e3de7f2bb42356123d93870ab036f7114cd69d2132e25e75e3bd5b14dd7cac87fc97f4349e64670e1d7fc98fcfb5aafa11b6eddbb84abbb9b00b1527279ed61056dff46019c681daaf235d043368b0d921e430d245c99d405c5172d16c347af9e2656d758efd7f4acff39ef5f3924ec58391c22d7b8f1c", 0x79}, {&(0x7f0000002680)="dba5e9e18672ee5c39cac9bdea70a9bcb9d525ad76024ed63afbce16f0cbe8725f53d8ac9327f51a0c9f19f11fbfc90a89aa3e870a4f08fc2ee9f291408e09d159f1ee4c00e6500bbdd9c419e9f8f4bd2e305052e39469c6f7d93f6d17715b7784749e5295e6", 0x66}], 0x2, &(0x7f00000027c0)=[@sndrcv={0x30, 0x84, 0x1, {0x400, 0x200, 0x1, 0x2, 0x1, 0x5, 0x5, 0x9, r2}}], 0x30, 0xc000}, {&(0x7f0000002800)=@in={0x2, 0x4e21, @rand_addr=0xae}, 0x10, &(0x7f0000002900)=[{&(0x7f0000002840)="cad45f219a54637e39e5f48f1f2a77ca9137121289ef4651a39492f00c200d96bce7b341083bb1236a85609a1cdf5c578383cce530bc27ac6ee6b000e20a9ec1ec63d1fa1612aa8f6e7b5c83a4238f17e1f87e876e11e40f2ecf3ab6609881cbad59b58c904399c5f20fd8cdfbaf33d9cbfddbb4c222e7cf4a31e16735b2874ff316c000329698a4ce5b1324dc9f71737005303c82635c65ac70fa2b7144943d0e205b5512bfbefa60ec38e9f46cf48344f785221a21a1d6e0061dfb153e91", 0xbf}], 0x1, &(0x7f00000039c0)=[@authinfo={0x18, 0x84, 0x6, {0x9}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @sndrcv={0x30, 0x84, 0x1, {0x3ff, 0x0, 0x8000, 0x3, 0x7, 0x76b, 0x4, 0x92, r3}}, @authinfo={0x18, 0x84, 0x6, {0x100000001}}], 0x90, 0x4000}, {&(0x7f0000003a80)=@in6={0xa, 0x4e20, 0x3f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000004d40)=[{&(0x7f0000003ac0)="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", 0x1000}, {&(0x7f0000004ac0)="6e7356521820765a573b0c96d739553486fdd89b1f28ff18099a2d13738472f46053b6d8454ff4eb40136746133a050b86837f7d137a91144fbdd469a54c386dc50173dd277f541aa5d6ba99263f88b16606c7d0927cd2e137cfd99665314b3efd8924e14e5b58dc736912e746c17c430ab94b7e360083c14c7a27cda16ff6092ef78d6b", 0x84}, {&(0x7f0000004b80)="c51eea30f28d6178e7fb284533e76ae7d7c2483616858eefbf29d7227729d9316c9fff63a7c153ccce49a8fcf15c208ae17b1e3866c71404a163853ad4b0af1bc3fbdd1318dacba0d6119e1114f333ed1fe4bf3319722e205b54729b12a9a6a6fd8ea785a811c9ee74cc2f7ad3485d12130f192c498aa05291643d93484924651c4e1579ca4a31ee579f2497b7aa4e611705142bad76f7586a9f400d85bcfdb018048bfc6df773ef67df3e00c3d1e227ba06c982e04af129f7b8f6f70a26a070f1772d19", 0xc4}, {&(0x7f0000004c80)="a034c9d8acacf776d52aa1414bcb7e72635d250b9000c4d8b4d7f5e04d149be295909fc7babbc58bab686a38213edbf4c57407141242c97d0eb95e659f5c7dacbb31e192602f74ae4492854c99796e0fee4fc13395c4f8472794245aa2faa63ea91369e4c0bc68c1f885e329d8c9a34fe30c82f03d75e2b0b742eacfd3a5a951fe9d7bf0e1f9385db4e7f97a475e367c3070cadf0c74713b9c", 0x99}], 0x4, &(0x7f0000004d80)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x100}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x100}}, @authinfo={0x18, 0x84, 0x6, {0x67c}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @authinfo={0x18, 0x84, 0x6, {0x7f}}], 0x90, 0x800}], 0x4, 0x8000) 16:15:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000380)='+^\x00', r8}, 0x30) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{0x9, r3, r4, r5, r6, 0xa47aea8d4631804e, 0x6}, 0x1, 0x1, 0x1f, 0x2, 0x2, 0x0, r7, r9}) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r10 = dup(r0) bind$bt_rfcomm(r10, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:07 executing program 1: r0 = mq_open(&(0x7f0000000040)='ppp1\x00', 0x0, 0x4, &(0x7f00000000c0)={0x7, 0x7, 0x5, 0x9, 0x3, 0x200, 0x1e, 0x6}) fcntl$getown(r0, 0x9) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r1) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x89a0, &(0x7f0000000100)) 16:15:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) 16:15:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x1, 0x0, 0x1, 0x4b3, 0xffffffffffff32b9, {0x0, @in6={{0xa, 0x4e21, 0x6, @mcast1, 0x9}}, 0x401, 0x0, 0x7, 0x80000000, 0x40}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e23, 0x80000000, @dev={0xfe, 0x80, [], 0x22}, 0x88a}}, 0x3, 0xfff}, 0x90) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:07 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000380)='+^\x00', r8}, 0x30) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{0x9, r3, r4, r5, r6, 0xa47aea8d4631804e, 0x6}, 0x1, 0x1, 0x1f, 0x2, 0x2, 0x0, r7, r9}) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r10 = dup(r0) bind$bt_rfcomm(r10, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x89a1, &(0x7f0000000100)) 16:15:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x3ffd) 16:15:08 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) accept4(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}}}, &(0x7f00000000c0)=0x80, 0x80000) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, &(0x7f0000000200)={@empty, @multicast2, @broadcast}, 0xc) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:08 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 16:15:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x3) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1ff8000000000, {0x13, 0x0, 0x100000001, 0x1, 0x7fffffff, 0x5}, 0x2, 0x5}, 0xe) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) fstat(r0, &(0x7f0000000300)) gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000380)='+^\x00', r3}, 0x30) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r4 = dup(r0) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000080)="0adc1f123c88b070000000") r2 = dup(r0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f00000000c0)=""/111) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)=0x8d) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000140)=0xffffffff, 0x4) 16:15:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x76, 0x2) 16:15:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x40049409, &(0x7f0000000100)) 16:15:08 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=r1) r2 = dup(r0) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r2, &(0x7f0000000180), 0xa) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) 16:15:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) fstat(r0, &(0x7f0000000300)) gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)}, 0x10) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x40080000003, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000040)={0x1f, 0x6, 0x94c9}) 16:15:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) semget$private(0x0, 0x2, 0x40) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000100)=""/131, 0x83}, {&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f0000000240)=""/145, 0x91}], 0x3, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f0000000040)={@dev, @local}, &(0x7f00000000c0)=0x8) 16:15:08 executing program 2 (fault-call:4 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:15:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x4020940d, &(0x7f0000000100)) 16:15:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) fstat(r0, &(0x7f0000000300)) gettid() ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0xffffffffffffffc7}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) [ 752.443048][ T6810] FAULT_INJECTION: forcing a failure. [ 752.443048][ T6810] name failslab, interval 1, probability 0, space 0, times 0 [ 752.517917][ T6810] CPU: 1 PID: 6810 Comm: syz-executor.2 Not tainted 5.1.0-rc2-next-20190327 #12 [ 752.527007][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.537209][ T6810] Call Trace: [ 752.540534][ T6810] dump_stack+0x172/0x1f0 [ 752.544907][ T6810] should_fail.cold+0xa/0x15 [ 752.549535][ T6810] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 752.555387][ T6810] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 752.561309][ T6810] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 16:15:08 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1000, 0x1018, 0xfff, {"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"}}, {0x0, "0d833eb1100f7b02d0b3746d40d0bbbb8157456eacba80932d024a72ad2d79a2aa80c6b1ff083c0d079dc30f258929c44551fea99134f608689b19e3a471023df5e3dac6af5fcb47047ab7c3"}}, &(0x7f0000001140)=""/242, 0x1066, 0xf2}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:08 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x80000, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x5e34) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000200)) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000040)={0x0, 0xfffffffffffffffd}) [ 752.567586][ T6810] ? format_decode+0x2a9/0xc30 [ 752.572376][ T6810] __should_failslab+0x121/0x190 [ 752.577362][ T6810] should_failslab+0x9/0x14 [ 752.581893][ T6810] kmem_cache_alloc_node+0x56/0x710 [ 752.587207][ T6810] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 752.593122][ T6810] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 752.599387][ T6810] __alloc_skb+0xd5/0x5e0 [ 752.599403][ T6810] ? skb_trim+0x190/0x190 [ 752.599417][ T6810] ? mark_held_locks+0xf0/0xf0 [ 752.599438][ T6810] send_monitor_note+0xe0/0x460 [ 752.599452][ T6810] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 752.599468][ T6810] ? create_monitor_ctrl_close+0x480/0x480 [ 752.599491][ T6810] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 752.624009][ T6810] ? security_capable+0x9b/0xd0 [ 752.624030][ T6810] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 752.624060][ T6810] hci_sock_bind+0x8db/0x1120 [ 752.652072][ T6810] ? hci_sock_ioctl+0x830/0x830 [ 752.656950][ T6810] ? apparmor_socket_bind+0xb6/0x160 16:15:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:08 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) write$P9_RRENAMEAT(r0, &(0x7f00000000c0)={0x7, 0x4b, 0x1}, 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r1) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) [ 752.663687][ T6810] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 752.663702][ T6810] ? security_socket_bind+0x93/0xc0 [ 752.663723][ T6810] __sys_bind+0x23f/0x290 [ 752.663740][ T6810] ? __ia32_sys_socketpair+0xf0/0xf0 [ 752.663757][ T6810] ? fput+0x1b/0x20 [ 752.663780][ T6810] ? ksys_write+0x166/0x1f0 [ 752.693297][ T6810] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 752.698774][ T6810] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 752.704248][ T6810] ? do_syscall_64+0x26/0x610 [ 752.704269][ T6810] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 752.704282][ T6810] ? do_syscall_64+0x26/0x610 [ 752.704308][ T6810] __x64_sys_bind+0x73/0xb0 [ 752.719734][ T6810] do_syscall_64+0x103/0x610 [ 752.719759][ T6810] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 752.719772][ T6810] RIP: 0033:0x458209 [ 752.719793][ T6810] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 752.758257][ T6810] RSP: 002b:00007f43b92dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 16:15:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) [ 752.768190][ T6810] RAX: ffffffffffffffda RBX: 00007f43b92dec90 RCX: 0000000000458209 [ 752.776195][ T6810] RDX: 000000000000000a RSI: 0000000020000000 RDI: 0000000000000005 [ 752.784187][ T6810] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 752.792202][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f43b92df6d4 [ 752.792212][ T6810] R13: 00000000004be1b0 R14: 00000000004ce6c0 R15: 0000000000000006 16:15:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6(0xa, 0x3, 0x81) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) getsockname$inet6(r2, 0x0, &(0x7f00000000c0)) gettid() ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) arch_prctl$ARCH_GET_CPUID(0x1011) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:09 executing program 2 (fault-call:4 fault-nth:1): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:15:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0xc0045878, &(0x7f0000000100)) 16:15:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) fstat(r0, &(0x7f0000000300)) gettid() ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.u'}, 0x15) 16:15:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) fstat(r0, &(0x7f0000000300)) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0xc0045878, &(0x7f0000000100)) [ 753.108421][ T6856] FAULT_INJECTION: forcing a failure. [ 753.108421][ T6856] name failslab, interval 1, probability 0, space 0, times 0 16:15:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) timer_create(0x2, &(0x7f0000000000)={0x0, 0x25, 0x5}, &(0x7f0000000040)=0x0) prctl$PR_MCE_KILL_GET(0x22) timer_gettime(r1, &(0x7f00000000c0)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x6002, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000480)={0x0, 0xfffffffffffffffd, 0xbd, 0x24, @buffer={0x0, 0x26, &(0x7f0000000240)=""/38}, &(0x7f0000000280)="5075282de9f11ea5c3a339ce68b93d7497212f59d4d05a733037365daf7a013dc9d06fa3b988c873a0ff78eabc7375bed039fc58900484a5ced5d0b1591903d80f38d805b0e40796b18cf1b314413371ab99c0b666710d58534411afa5db2346adcb129c8c2294fecd9283e2950336a118cf3a5103902f7de698129bf8e8062b5bd2a30354ad635514d564645134aaa39d2cc8e1731497286f2493d15ebb45a526554b4011b5b6060e8bbb028e97d271882a7824418151df5c9ca313de", &(0x7f0000000340)=""/193, 0x0, 0x20, 0x2, &(0x7f0000000440)}) [ 753.178724][ T6856] CPU: 1 PID: 6856 Comm: syz-executor.2 Not tainted 5.1.0-rc2-next-20190327 #12 [ 753.188064][ T6856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.198162][ T6856] Call Trace: [ 753.201573][ T6856] dump_stack+0x172/0x1f0 [ 753.205946][ T6856] should_fail.cold+0xa/0x15 [ 753.210615][ T6856] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 753.216446][ T6856] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 753.222190][ T6856] ? widen_string+0xe0/0x2e0 16:15:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = dup(r0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) [ 753.226809][ T6856] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 753.233079][ T6856] ? should_fail+0x1de/0x852 [ 753.237700][ T6856] __should_failslab+0x121/0x190 [ 753.242679][ T6856] should_failslab+0x9/0x14 [ 753.247300][ T6856] kmem_cache_alloc_node_trace+0x5a/0x720 [ 753.253062][ T6856] __kmalloc_node_track_caller+0x3d/0x70 [ 753.253083][ T6856] __kmalloc_reserve.isra.0+0x40/0xf0 [ 753.253099][ T6856] __alloc_skb+0x10b/0x5e0 [ 753.253115][ T6856] ? skb_trim+0x190/0x190 [ 753.253131][ T6856] ? mark_held_locks+0xf0/0xf0 [ 753.253154][ T6856] send_monitor_note+0xe0/0x460 [ 753.282540][ T6856] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 753.282561][ T6856] ? create_monitor_ctrl_close+0x480/0x480 [ 753.282585][ T6856] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 753.282610][ T6856] ? security_capable+0x9b/0xd0 [ 753.305767][ T6856] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 753.312045][ T6856] hci_sock_bind+0x8db/0x1120 [ 753.316753][ T6856] ? hci_sock_ioctl+0x830/0x830 [ 753.321710][ T6856] ? apparmor_socket_bind+0xb6/0x160 16:15:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0xc0189436, &(0x7f0000000100)) [ 753.327021][ T6856] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 753.327045][ T6856] ? security_socket_bind+0x93/0xc0 [ 753.327065][ T6856] __sys_bind+0x23f/0x290 [ 753.327123][ T6856] ? __ia32_sys_socketpair+0xf0/0xf0 [ 753.348203][ T6856] ? fput+0x1b/0x20 [ 753.352047][ T6856] ? ksys_write+0x166/0x1f0 [ 753.356586][ T6856] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 753.362079][ T6856] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 753.367581][ T6856] ? do_syscall_64+0x26/0x610 [ 753.367602][ T6856] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 16:15:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = dup(r0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) [ 753.367616][ T6856] ? do_syscall_64+0x26/0x610 [ 753.367639][ T6856] __x64_sys_bind+0x73/0xb0 [ 753.387587][ T6856] do_syscall_64+0x103/0x610 [ 753.392209][ T6856] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 753.398114][ T6856] RIP: 0033:0x458209 [ 753.402064][ T6856] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 753.421687][ T6856] RSP: 002b:00007f43b92dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 753.421702][ T6856] RAX: ffffffffffffffda RBX: 00007f43b92dec90 RCX: 0000000000458209 [ 753.421709][ T6856] RDX: 000000000000000a RSI: 0000000020000000 RDI: 0000000000000005 [ 753.421715][ T6856] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 753.421723][ T6856] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f43b92df6d4 [ 753.421730][ T6856] R13: 00000000004be1b0 R14: 00000000004ce6c0 R15: 0000000000000006 16:15:09 executing program 2 (fault-call:4 fault-nth:2): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:15:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x20, 0x40) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3, 0x28a, 0x9, 0xccaa, 0xfff, 0x4, 0x401, 0x0, 0x101, 0x200}, 0xb) getpeername$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000200)=0x10) 16:15:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000040)={0x239d0af1}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000100)={0x1b, 0x0, 0x8, 0x11, 0x1, 0x7, 0x5, 0x96}) r3 = dup(r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x10) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0xc020660b, &(0x7f0000000100)) 16:15:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = dup(r0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0xda002, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={0x1, @default, @bpq0='bpq0\x00', 0x1000, 'syz1\x00', @bcast, 0x7, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:09 executing program 3: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vfio/vfio\x00', 0x40, 0x0) write$vhci(r0, &(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, "92977c6b8b7cc6adf36a5d772689643b362c55097782a40247368e5eafe44fcb5d22c2334d9c766ff031b777e9e642e9c6eef792aa8b6beb06ed9158fbb4e336b920280d2b4c334a65e5a58fc194ded04b83d61fcb27af7da2e06d9f5c26de07ed4472a7ccb992ca16cb64eb66e97b878d7f1e4a4e48745baf49353d0eaa7ced3d48531d53e591cff8b622b5d202c4d2cb556195415a689bd05d9d37fcf370bc0722ced93e8958aea603df212e9e1097b2acf1398f8078ee63130b9d79be5d9481c243eb51783f43e6d6a5f4f912766ed4ff877df78051e7a8c6c61c9a61104dbe2b0e"}, 0xe4) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x117, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r2, 0x2}}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000100)) [ 753.712597][ T6902] FAULT_INJECTION: forcing a failure. [ 753.712597][ T6902] name failslab, interval 1, probability 0, space 0, times 0 16:15:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x6, 0x28800) sendmsg$inet_sctp(r1, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20000, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @mcast1, 0x8001}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setfsgid(r3) [ 753.795648][ T6902] CPU: 1 PID: 6902 Comm: syz-executor.2 Not tainted 5.1.0-rc2-next-20190327 #12 [ 753.804718][ T6902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.814817][ T6902] Call Trace: [ 753.818126][ T6902] dump_stack+0x172/0x1f0 [ 753.822508][ T6902] should_fail.cold+0xa/0x15 [ 753.827119][ T6902] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 753.832953][ T6902] ? put_dec+0xd0/0xd0 [ 753.837056][ T6902] __should_failslab+0x121/0x190 16:15:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) vmsplice(r0, &(0x7f0000001440)=[{&(0x7f0000000040)="8ebba9ddf1038852", 0x8}, {0x0}, {&(0x7f00000000c0)="eba66a099f3ce20e47f288a9900ed4f2db8a19c1f3aabfb146df5a01709f48629b15bd802197a90256045499a8462ad77d", 0x31}, {&(0x7f0000000100)="aa3170439bc79f8e9d71d5716a5ba8b06d8f8fbe89c5b8336973b3502dadafe43d9615fca565834d857c0185f8cd3c1a2f5e8fe67a33dcf40ddab5003366129c3bde58b2de6217725d09703f3eccabf5132a0edbc63dbf6d88281fd95674b64989f8979570433c7d0f3556782b343c492417d2ed5cda30af783d4902b7cef50ff4a445bba5795bce5e12b9a7264da73d6214", 0x92}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="9bb2bbf8a8149a3685b8a46c3c67fccf21b21e4794c01c56a31f2612d04d62d9aa5aaf04b9774f089abc23b65b9b65922d2e73daff0e5f58d58ee14e2d9f4cb0aa11cff6b021e7f78bfdb49fa24f2f1ae47bf46c9e67006edc027db5241cc2f6744487a6bb74e5970f8cc2127a338b853833fad78662ff644cc28d64e738dd59e1651745668ef101d80c71a7bd28b09dc035db1ee702e583ccf036095252189f46bf86fee2a3eda987af86c2081598e86fac4e07cf5fac33fc23f9e559b1b9e318af7a9b", 0xc4}, {&(0x7f00000012c0)="204beb7c63ae422d18ec3630d7fefecb85e14ddf17a96bfab2a0fe4aa4c82ffd81eb96a5e8ed3a0dc0fc6c6b3c2fe5adc89f0a2eb48f00b9ec07cda94611e22fd09eff64d16e6cfeb4d433f221e1e26f86d328419f16ebfb426939a3d26670", 0x5f}, {&(0x7f0000001340)="4718b1cb9aea0ce6a515e92c4ab92427e60a2a955e90a8f5e2e9d728bcaac70d17323799c45100244a05fd7a439ae79ddd9fef0e9012651c1ce9246d990816c7f573863f9e630c89f7c15c50f3f39d3448869980f807430a7c59d21115baaf3bee67d5b32bf2f205b6e1865c7e17f6671d11b3392e6fe2e44ea9aaa477a8d1c52b6fb638cb6cdc4be0013cf6dc9e901f07bd5800e8749f7d7cd780da7950e2ac96971bca46ea1ae00cecd16597e2f43da1795b42c22eabbed686e039ed9bd1a10234c06384bdbb642f5df5dc23f4a3dddae9a3efabcc9b9e0ad3f248dbfdb786f1578a", 0xe3}], 0x8, 0x2) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x7fff) [ 753.842019][ T6902] should_failslab+0x9/0x14 [ 753.846547][ T6902] kmem_cache_alloc_node+0x56/0x710 [ 753.851863][ T6902] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 753.858133][ T6902] __alloc_skb+0xd5/0x5e0 [ 753.862486][ T6902] ? skb_trim+0x190/0x190 [ 753.866836][ T6902] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 753.872650][ T6902] ? ktime_get_with_offset+0x256/0x370 [ 753.878154][ T6902] send_monitor_note+0xe0/0x460 [ 753.883027][ T6902] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 753.889302][ T6902] ? create_monitor_ctrl_close+0x480/0x480 16:15:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xffffffffffffffff, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) [ 753.895131][ T6902] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 753.901394][ T6902] ? security_capable+0x9b/0xd0 [ 753.906270][ T6902] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 753.912533][ T6902] hci_sock_bind+0x8f4/0x1120 [ 753.917235][ T6902] ? hci_sock_ioctl+0x830/0x830 [ 753.922104][ T6902] ? apparmor_socket_bind+0xb6/0x160 [ 753.927407][ T6902] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 753.933671][ T6902] ? security_socket_bind+0x93/0xc0 [ 753.938895][ T6902] __sys_bind+0x23f/0x290 [ 753.943248][ T6902] ? __ia32_sys_socketpair+0xf0/0xf0 [ 753.948647][ T6902] ? fput+0x1b/0x20 [ 753.952483][ T6902] ? ksys_write+0x166/0x1f0 [ 753.957006][ T6902] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 753.962503][ T6902] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 753.967996][ T6902] ? do_syscall_64+0x26/0x610 [ 753.972708][ T6902] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 753.978799][ T6902] ? do_syscall_64+0x26/0x610 [ 753.983506][ T6902] __x64_sys_bind+0x73/0xb0 [ 753.988025][ T6902] do_syscall_64+0x103/0x610 [ 753.992654][ T6902] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 753.998582][ T6902] RIP: 0033:0x458209 [ 754.002492][ T6902] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 754.022111][ T6902] RSP: 002b:00007f43b92dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 754.022126][ T6902] RAX: ffffffffffffffda RBX: 00007f43b92dec90 RCX: 0000000000458209 [ 754.022134][ T6902] RDX: 000000000000000a RSI: 0000000020000000 RDI: 0000000000000005 16:15:10 executing program 2 (fault-call:4 fault-nth:3): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:15:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000200)={0x4}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001b00)={'syzkaller0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000001b40)={0x1d, r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000240)="3b48ec11a351f40ff9da7fd7b13b0555", 0x10) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000180)=0x6) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/59, &(0x7f0000000140)=0x3b) semget$private(0x0, 0x3, 0x420) 16:15:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x8, 0xdb6c, 0x8, 0x1, 0x80}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x1}, 0x8) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) getsockname(r1, &(0x7f0000000540)=@ipx, &(0x7f00000005c0)=0x80) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4b, 0x81) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) [ 754.022142][ T6902] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 754.022151][ T6902] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f43b92df6d4 [ 754.022169][ T6902] R13: 00000000004be1b0 R14: 00000000004ce6c0 R15: 0000000000000006 16:15:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000000c0)=0x3) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x200, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000200)) 16:15:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) [ 754.227523][ T6944] FAULT_INJECTION: forcing a failure. [ 754.227523][ T6944] name failslab, interval 1, probability 0, space 0, times 0 [ 754.248218][ T6944] CPU: 0 PID: 6944 Comm: syz-executor.2 Not tainted 5.1.0-rc2-next-20190327 #12 [ 754.257282][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 754.257297][ T6944] Call Trace: [ 754.270705][ T6944] dump_stack+0x172/0x1f0 [ 754.275053][ T6944] should_fail.cold+0xa/0x15 [ 754.279662][ T6944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 754.285968][ T6944] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 754.291798][ T6944] ? put_dec+0x3b/0xd0 [ 754.295889][ T6944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 754.302149][ T6944] ? should_fail+0x1de/0x852 [ 754.306753][ T6944] __should_failslab+0x121/0x190 [ 754.306773][ T6944] should_failslab+0x9/0x14 [ 754.306799][ T6944] kmem_cache_alloc_node_trace+0x5a/0x720 [ 754.322008][ T6944] __kmalloc_node_track_caller+0x3d/0x70 [ 754.327667][ T6944] __kmalloc_reserve.isra.0+0x40/0xf0 [ 754.333151][ T6944] __alloc_skb+0x10b/0x5e0 [ 754.337590][ T6944] ? skb_trim+0x190/0x190 [ 754.341936][ T6944] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 754.347671][ T6944] ? ktime_get_with_offset+0x256/0x370 [ 754.353194][ T6944] send_monitor_note+0xe0/0x460 [ 754.358063][ T6944] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 754.364330][ T6944] ? create_monitor_ctrl_close+0x480/0x480 [ 754.370159][ T6944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 754.376419][ T6944] ? security_capable+0x9b/0xd0 [ 754.381281][ T6944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 754.381302][ T6944] hci_sock_bind+0x8f4/0x1120 [ 754.381317][ T6944] ? hci_sock_ioctl+0x830/0x830 [ 754.381332][ T6944] ? apparmor_socket_bind+0xb6/0x160 [ 754.381346][ T6944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 754.381358][ T6944] ? security_socket_bind+0x93/0xc0 [ 754.381377][ T6944] __sys_bind+0x23f/0x290 [ 754.381392][ T6944] ? __ia32_sys_socketpair+0xf0/0xf0 [ 754.381417][ T6944] ? fput+0x1b/0x20 16:15:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:10 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) getsockname$inet6(r0, &(0x7f0000000240), &(0x7f0000000280)=0x1c) sendmsg$nl_crypto(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@getstat={0xe0, 0x15, 0x408, 0x70bd29, 0x25dfdbfe, {{'sha1-generic\x00'}, [], [], 0x2400, 0x400}, ["", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$nfc_llcp(r0, &(0x7f0000000400)={0x27, 0x0, 0x1, 0x1, 0x2cad, 0x1, "90ae9fbb19d09a9897f290b6a1ef9a650828b40a966e616520852eb665b8c7e6345e906f634485e4eef5a71044647c0d8136693a251344c5c04404fe793aa0", 0x2f}, 0x60) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) [ 754.427303][ T6944] ? ksys_write+0x166/0x1f0 [ 754.431833][ T6944] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 754.437306][ T6944] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 754.442797][ T6944] ? do_syscall_64+0x26/0x610 [ 754.447503][ T6944] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 754.447520][ T6944] ? do_syscall_64+0x26/0x610 [ 754.447544][ T6944] __x64_sys_bind+0x73/0xb0 [ 754.447562][ T6944] do_syscall_64+0x103/0x610 [ 754.447581][ T6944] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 754.447593][ T6944] RIP: 0033:0x458209 [ 754.447608][ T6944] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 754.447615][ T6944] RSP: 002b:00007f43b92dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 754.447629][ T6944] RAX: ffffffffffffffda RBX: 00007f43b92dec90 RCX: 0000000000458209 [ 754.447637][ T6944] RDX: 000000000000000a RSI: 0000000020000000 RDI: 0000000000000005 16:15:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000000c0)={0x5, 0x0, [{}, {}, {}, {}, {}]}) 16:15:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) [ 754.447645][ T6944] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 754.447653][ T6944] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f43b92df6d4 [ 754.447661][ T6944] R13: 00000000004be1b0 R14: 00000000004ce6c0 R15: 0000000000000006 16:15:10 executing program 2 (fault-call:4 fault-nth:4): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:15:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x101) msgctl$IPC_RMID(r2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000000c0)="fde60039927995b2ea36a7dd9cbdbe767d024037ee4cec4fc97f7c56") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:10 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x9, 0xf, 0x2, "02d991f40c72342279b4c4092b9ade44ae375fcfd54b3c1a34e97a792b2837f4", 0x34343459}) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 16:15:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = dup(r0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xfffffffffffffffc, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in={0x2, 0x4e21, @empty}, 0x10, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = dup(r0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$VT_RELDISP(r2, 0x5605) r3 = inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0xc50) inotify_rm_watch(r2, r3) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x2000200000000000, 0x0, 0xfff, 0x10000, 0x0, 0x80000000, 0x2001, 0x4, 0x8, 0x4ce8c864, 0x0, 0x41f, 0x5, 0x4e6a, 0x7fffffff, 0x1ff, 0x5, 0xd3f, 0x0, 0x8000, 0x8, 0x91f6, 0x2000000000000000, 0x1, 0x3, 0x0, 0xffff, 0x8, 0x2, 0x7, 0x6, 0x1, 0x100, 0x4a32, 0x1, 0x9, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x100, 0x800, 0x4, 0xc, 0x1, 0x0, 0x3}, r1, 0x1, 0xffffffffffffff9c, 0x2) 16:15:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) msgget$private(0x0, 0x101) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:15:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000040)) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x2, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:15:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = dup(r0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x101040, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000080)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r2 = dup3(r0, r0, 0x80000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)=0x1828000000) 16:15:11 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0xdd29, 0x40100) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl(r0, 0x80000003, &(0x7f0000000040)="0abd1f12123f3188b07000e709d127d5413b1380930b000015ce657147fd27e21abbad7a47c9213236084cd8e22ed7b0a479a8f6a37b9b3194d078292c4a66739c89198a0c0fbcaeaa479ba582617dadd177354a2ff846ad3a4e00d912618365f4d4443d774499e68bef3694318e44527e5770e47c27251b375aeb8410bc9ded2c2711b8018fe678cd9f48482a47206cec1ca1d7bc90729be8a0081ebfdac1e9dc8225624e89407bcfe499bb2e03f498c113dd652a7260a54f5b2d896cd392a5df929fe4e8b4f9b6f5e88ab52c47e901d07e7fa945fd19fa20bd4155ebdd28c2cc5c224f1772b8733b7f1c080c18720ffff9417004d3e3b2b4e12bb7e33c4f61ca56ca7062d5a449e59fd5c5e1b1d2c5f19b828c9dc3a9446f0000007e4fc6fa3e7cf68bf1ef4a9808002c9c82589e3f2bb08de3b5e9ae2a9a94dbab23902c6ae7c9aef12cf63baa30375630ff826ad49b123e5eda940ab89d9775521e21d9a9b50882cb4afd3f1351259ca6e5f3bb723307fe8de5e232f540d31b30396ca307761602efa154e9bbcc19e7ac70de4844cf020910f93ff8e84fa1fe59ff14625a2a02044b7f3c663c37f092c4") bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0x3, 0x2, 0x3}, 0x1}, 0xa) [ 755.234059][ T7124] QAT: Invalid ioctl 16:15:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x440002, 0x11) write$P9_RLOCK(r1, &(0x7f0000000040)={0x8, 0x35, 0x2, 0x3}, 0x8) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) [ 755.264211][ T7126] QAT: Invalid ioctl 16:15:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x8000, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x4, 0x4}) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:15:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x200000) getsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r2, 0x1000008911, &(0x7f0000000040)="0adcd57addfac00426d474f2ec28610a79ba0b4297f7984861365b7213bb7a") r3 = dup(r0) ioctl$VT_WAITACTIVE(r3, 0x5607) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0xa, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:15:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000010}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7ff, 0x280082) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) getgroups(0x3, &(0x7f0000000300)=[0xee01, 0xffffffffffffffff, 0x0]) getsockopt$inet_buf(r1, 0x0, 0x23, &(0x7f00000003c0)=""/192, &(0x7f0000000480)=0xc0) write$FUSE_ATTR(r1, &(0x7f0000000340)={0x78, 0xfffffffffffffff5, 0x5, {0x0, 0x8c5, 0x0, {0x4, 0xfff, 0xffff, 0x73, 0x889e, 0x3, 0x4, 0x9, 0x800, 0x98a, 0x3, r2, r3, 0x878c, 0x3}}}, 0x78) 16:15:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x2, &(0x7f0000000280)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@fscache='fscache'}, {@rq={'rq', 0x3d, 0x400}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'vboxnet0bdev\x90'}}, {@fowner_gt={'fowner>', r1}}, {@smackfshat={'smackfshat', 0x3d, ']security'}}, {@dont_measure='dont_measure'}]}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:11 executing program 5: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80000) accept4(r0, &(0x7f0000000200)=@nfc, &(0x7f0000000280)=0x80, 0x80800) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x210000, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000040)={'vcan0\x00', {0x2, 0x4e24, @multicast1}}) write$apparmor_current(r2, &(0x7f00000002c0)=@hat={'permhat ', 0x2, 0x5e, ['!!vboxnet0[vmnet0\'%userproc:nodev[\x00', 'vcan0\x00', 'ppp0keyringppp1-%self\x00']}, 0x5a) shutdown(r0, 0x1) 16:15:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) sync_file_range(r0, 0x6, 0x7, 0x7) 16:15:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffff00000006, 0x1ff, 0x2}}, 0xa) 16:15:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:12 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fdatasync(r0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x100000000, 0x200000) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)=0x1) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = semget$private(0x0, 0x2, 0xa0) semctl$GETZCNT(r1, 0x1, 0xf, &(0x7f0000000080)=""/126) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:15:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffff00000017, 0x1ff, 0x2}}, 0xa) 16:15:12 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5) 16:15:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x3, &(0x7f0000000200)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'gretap0\x00', 0x4}) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000100)={r3, 0x8f, "2989e8221b84b7a5f3d03b9beb2f6365b96f53c828b68bd1f07784d52be01af2c09f7594d40c5e81ec5656aba03d8ebf6b4326fc9b2b536336310435012c5bd26c0db7da16fd7538d6ed8bd8237b16b03b4df8da287a12a1ab586b9ed3758c4de9ddebd2b2de7cffd952b84d981b5defc67a9dd73fdee6e23bef17428599e0eae5c3c450a16f4ea2a420505a05fb77"}, &(0x7f00000001c0)=0x97) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) ptrace$setopts(0x4200, r4, 0x9, 0x21) 16:15:12 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:15:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffff06000000, 0x1ff, 0x2}}, 0xa) 16:15:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:12 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0xa, 0x4e24, 0x1000, @dev={0xfe, 0x80, [], 0x13}, 0x6}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x44000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x80, 0xfffffffffffffffd}) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000280)={0x9e0000, 0x3, 0x5, [], &(0x7f0000000240)={0x990b7b, 0x0, [], @string=&(0x7f0000000200)=0x7f}}) 16:15:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000000)) 16:15:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) close(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x3ff, 0x8, [@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @bcast, @null]}) 16:15:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffff17000000, 0x1ff, 0x2}}, 0xa) 16:15:12 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x10000, 0x0) r1 = dup2(r0, 0xffffffffffffff9c) r2 = accept$unix(0xffffffffffffff9c, &(0x7f0000000480)=@abs, &(0x7f0000000500)=0x6e) ioctl$void(r1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000340)={0x10}) r3 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) fcntl$setstatus(r3, 0x4, 0xea6c0ee7534d63e8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80600, 0x0) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f00000000c0)) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x80000001, 0x80) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$TUNSETOWNER(r5, 0x400454cc, r7) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, &(0x7f0000000100)) connect$netrom(r6, &(0x7f00000003c0)={{0x3, @default, 0x8}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) 16:15:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:15:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x80100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x9, &(0x7f0000000340)={0xffffffffffffffff}, 0x113, 0x1002}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {&(0x7f00000002c0), 0x3, r3, 0x30, 0x1, @ib={0x1b, 0x5, 0x34f, {"8f7370a1c32c206c62c3833ee4581575"}, 0x8a6, 0xbb3, 0x339e}}}, 0xa0) r4 = accept4(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000280)=0x80, 0x80000) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000140)={@initdev, @empty, 0x0}, &(0x7f0000000180)=0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x80000, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x2, 0xaa, 0x100, 0xd4, 0x80000040, r5}) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r6 = dup(r1) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4) dup(r0) bind$bt_rfcomm(r6, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:12 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0xa2180) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{}, {}]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000280)={r2, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) 16:15:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getpeername(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000080)=0x80) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000005c0)="21d5a70da7deb61ef370f372f7308e94", 0x10) recvmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/137, 0x89}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f00000002c0)=""/156, 0x9c}, {&(0x7f0000000380)=""/59, 0x3b}, {&(0x7f00000003c0)=""/217, 0xd9}], 0x5, &(0x7f0000000540)=""/30, 0x1e}, 0x120) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) ioctl(r1, 0x0, &(0x7f0000000600)="89bac600f8e0f8b7340779aa06a581e7ad02a6be378e9c5c6cc94ea635e45d5f25a603d918b47d5ff406bb56a384f417506c9df2b67b538c5f51bf9f3b9bfe67c480184ee933328804f0551454b22473e520acd726e75d180d683be8590abf0b10dda0444082037c1e14508b81c16d092282") 16:15:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f00000000c0)) r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:12 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xffffffffffffffff, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x280280, 0x0) write$UHID_CREATE(r1, &(0x7f00000002c0)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000200)=""/166, 0xa6, 0xee91, 0xfffffffffffffff7, 0x9, 0xd5, 0x8b0}, 0x120) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16:15:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x4}}, 0xa) 16:15:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000300)) 16:15:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x20) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) 16:15:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x2) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0x2000) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000100)=0x3) ioctl(r1, 0x7, &(0x7f0000000180)="0adc1f123c123f3188b070") r3 = dup(r1) flock(r2, 0x5) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}, 0x100000000}, 0xa) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000080)={0x1, 0x3, 0x3, 0xffffffffffffffff}) 16:15:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0xa}}, 0xa) 16:15:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = dup(r0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:13 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) fstat(r0, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f00000001c0)=""/77, &(0x7f0000000240)=0x4d) r3 = dup(r1) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x40000, 0x0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="f26d13c048bfb2d15748b92ef0c2467948afc629d87b7d28bb12dfed49483c9c66bd3a6282196f38f85e92a8e47c043d8fc03bb92cc491ed9f50eeebca4eebbe4e2591ef163614138a656e7c", 0x4c) 16:15:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x7fffffda}}, 0xa) 16:15:13 executing program 3 (fault-call:3 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:13 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffffffffffffff8e, 0x100) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xab7, 0x0, 0x100, 0x800}]}, 0x10) r1 = fcntl$getown(r0, 0x9) sendmsg$nl_generic(r0, &(0x7f0000001280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001240)={&(0x7f0000001340)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="140022002f6465762f7573626d6f6e2300000000"], 0x1030}, 0x1, 0x0, 0x0, 0x1}, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x40000b, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001300)={0x1, &(0x7f00000012c0)=[{0x0, 0xe7, 0x800, 0x9}]}, 0x10) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000200)=0x2) 16:15:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x5, 0x10000) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000001c0)={@loopback}, &(0x7f0000000200)=0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f00000000c0)=""/213) 16:15:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) [ 757.710120][ T7360] FAULT_INJECTION: forcing a failure. [ 757.710120][ T7360] name failslab, interval 1, probability 0, space 0, times 0 [ 757.751102][ T7360] CPU: 0 PID: 7360 Comm: syz-executor.3 Not tainted 5.1.0-rc2-next-20190327 #12 [ 757.760173][ T7360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 757.760181][ T7360] Call Trace: [ 757.760208][ T7360] dump_stack+0x172/0x1f0 [ 757.760231][ T7360] should_fail.cold+0xa/0x15 [ 757.760251][ T7360] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 757.760271][ T7360] ? ___might_sleep+0x163/0x280 [ 757.760292][ T7360] __should_failslab+0x121/0x190 [ 757.760319][ T7360] should_failslab+0x9/0x14 [ 757.802663][ T7360] __kmalloc+0x2dc/0x740 [ 757.806925][ T7360] ? hci_get_dev_list+0x93/0x340 [ 757.811889][ T7360] hci_get_dev_list+0x93/0x340 [ 757.816677][ T7360] hci_sock_ioctl+0x2e0/0x830 [ 757.821384][ T7360] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 757.827642][ T7360] ? _parse_integer+0x139/0x190 [ 757.832511][ T7360] ? hci_sock_sendmsg+0x2150/0x2150 [ 757.837743][ T7360] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 757.844010][ T7360] ? _kstrtoull+0x14c/0x200 [ 757.848538][ T7360] sock_do_ioctl+0xde/0x300 [ 757.853060][ T7360] ? compat_ifr_data_ioctl+0x160/0x160 [ 757.858546][ T7360] ? tomoyo_domain+0xc5/0x160 [ 757.863237][ T7360] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 757.869507][ T7360] ? tomoyo_init_request_info+0x105/0x1d0 [ 757.875254][ T7360] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 757.881518][ T7360] ? tomoyo_path_number_perm+0x263/0x520 [ 757.887168][ T7360] ? find_held_lock+0x35/0x130 [ 757.891959][ T7360] sock_ioctl+0x32b/0x610 [ 757.896319][ T7360] ? dlci_ioctl_set+0x40/0x40 16:15:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) 16:15:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x0, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0x9, 0x1ff, 0x3}}, 0xa) [ 757.901021][ T7360] ? __fget+0x35a/0x550 [ 757.905201][ T7360] ? dlci_ioctl_set+0x40/0x40 [ 757.909896][ T7360] do_vfs_ioctl+0xd6e/0x1390 [ 757.914512][ T7360] ? ioctl_preallocate+0x210/0x210 [ 757.919639][ T7360] ? __fget+0x381/0x550 [ 757.923812][ T7360] ? ksys_dup3+0x3e0/0x3e0 [ 757.928254][ T7360] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 757.934525][ T7360] ? fput_many+0x12c/0x1a0 [ 757.938959][ T7360] ? tomoyo_file_ioctl+0x23/0x30 [ 757.938975][ T7360] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 757.938991][ T7360] ? security_file_ioctl+0x93/0xc0 [ 757.939009][ T7360] ksys_ioctl+0xab/0xd0 [ 757.939028][ T7360] __x64_sys_ioctl+0x73/0xb0 [ 757.939064][ T7360] do_syscall_64+0x103/0x610 [ 757.950254][ T7360] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 757.950268][ T7360] RIP: 0033:0x458209 [ 757.950283][ T7360] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:15:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x0, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) [ 757.950289][ T7360] RSP: 002b:00007f9efc8fac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 757.950302][ T7360] RAX: ffffffffffffffda RBX: 00007f9efc8fac90 RCX: 0000000000458209 [ 757.950310][ T7360] RDX: 0000000020000040 RSI: 00000000800448d2 RDI: 0000000000000003 [ 757.950317][ T7360] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 757.950324][ T7360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9efc8fb6d4 [ 757.950331][ T7360] R13: 00000000004cb6f0 R14: 00000000004d6418 R15: 0000000000000005 16:15:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x2}}, 0xa) 16:15:14 executing program 3 (fault-call:3 fault-nth:1): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xc2) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)) write$P9_RATTACH(r1, &(0x7f0000000040)={0x14, 0x69, 0x2, {0xc, 0x0, 0x6}}, 0x14) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) 16:15:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x0, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) semget$private(0x0, 0x3, 0xa8) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f00000000c0)={"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"}) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0x5, {0x1, 0x6, 0x0, 0x4}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x3}}, 0xa) 16:15:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, 0x0) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:14 executing program 1 (fault-call:1 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:14 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x5, 0x6, 0x30, &(0x7f0000ffb000/0x3000)=nil, 0x7}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 16:15:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, 0x0) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) [ 758.563150][ T7427] FAULT_INJECTION: forcing a failure. [ 758.563150][ T7427] name failslab, interval 1, probability 0, space 0, times 0 [ 758.618100][ T7427] CPU: 0 PID: 7427 Comm: syz-executor.1 Not tainted 5.1.0-rc2-next-20190327 #12 [ 758.629556][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 758.639891][ T7427] Call Trace: [ 758.643204][ T7427] dump_stack+0x172/0x1f0 [ 758.647565][ T7427] should_fail.cold+0xa/0x15 [ 758.652189][ T7427] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 758.658026][ T7427] ? ___might_sleep+0x163/0x280 16:15:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5421, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) [ 758.665440][ T7427] __should_failslab+0x121/0x190 [ 758.670409][ T7427] should_failslab+0x9/0x14 [ 758.674952][ T7427] kmem_cache_alloc_node+0x264/0x710 [ 758.680262][ T7427] ? process_measurement+0xd5d/0x1570 [ 758.685670][ T7427] __alloc_skb+0xd5/0x5e0 [ 758.690028][ T7427] ? skb_trim+0x190/0x190 [ 758.694435][ T7427] ? __mutex_lock+0x3cd/0x1310 [ 758.699336][ T7427] rtmsg_ifa+0x18e/0x2c0 [ 758.703606][ T7427] ? inet_fill_ifaddr+0xe60/0xe60 [ 758.708667][ T7427] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 16:15:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = msgget(0x0, 0x200) msgsnd(r1, &(0x7f0000000200)={0x2, "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"}, 0x106, 0x800) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xd2563b6c7b9c18bc, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x3e, &(0x7f0000000040)}, 0x10) openat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) [ 758.714996][ T7427] ? rtnl_is_locked+0x30/0x40 [ 758.719709][ T7427] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 758.726002][ T7427] __inet_del_ifa+0x541/0xbe0 [ 758.731538][ T7427] devinet_ioctl+0x5cb/0x1cf0 [ 758.736258][ T7427] inet_ioctl+0x2d4/0x410 [ 758.740614][ T7427] ? inet_stream_connect+0xa0/0xa0 [ 758.745770][ T7427] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 758.752035][ T7427] ? _parse_integer+0x139/0x190 [ 758.756951][ T7427] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 758.763220][ T7427] ? _kstrtoull+0x14c/0x200 [ 758.769497][ T7427] ? _parse_integer+0x190/0x190 [ 758.774465][ T7427] sock_do_ioctl+0xde/0x300 [ 758.778990][ T7427] ? compat_ifr_data_ioctl+0x160/0x160 [ 758.784464][ T7427] ? tomoyo_domain+0xc5/0x160 [ 758.789167][ T7427] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 758.795432][ T7427] ? tomoyo_init_request_info+0x105/0x1d0 [ 758.801175][ T7427] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 758.807444][ T7427] ? tomoyo_path_number_perm+0x263/0x520 [ 758.813112][ T7427] ? find_held_lock+0x35/0x130 16:15:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000300)) [ 758.817912][ T7427] sock_ioctl+0x32b/0x610 [ 758.822271][ T7427] ? dlci_ioctl_set+0x40/0x40 [ 758.826982][ T7427] ? __fget+0x35a/0x550 [ 758.831170][ T7427] ? dlci_ioctl_set+0x40/0x40 [ 758.835867][ T7427] do_vfs_ioctl+0xd6e/0x1390 [ 758.840489][ T7427] ? ioctl_preallocate+0x210/0x210 [ 758.845619][ T7427] ? __fget+0x381/0x550 [ 758.849811][ T7427] ? ksys_dup3+0x3e0/0x3e0 [ 758.854249][ T7427] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 758.860516][ T7427] ? fput_many+0x12c/0x1a0 [ 758.864963][ T7427] ? tomoyo_file_ioctl+0x23/0x30 [ 758.869926][ T7427] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 758.876187][ T7427] ? security_file_ioctl+0x93/0xc0 [ 758.881327][ T7427] ksys_ioctl+0xab/0xd0 [ 758.885507][ T7427] __x64_sys_ioctl+0x73/0xb0 [ 758.890127][ T7427] do_syscall_64+0x103/0x610 [ 758.894746][ T7427] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 758.900660][ T7427] RIP: 0033:0x458209 [ 758.904583][ T7427] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 758.924211][ T7427] RSP: 002b:00007f4bf7ab7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 758.932644][ T7427] RAX: ffffffffffffffda RBX: 00007f4bf7ab7c90 RCX: 0000000000458209 [ 758.940626][ T7427] RDX: 0000000020000040 RSI: 0000000000008918 RDI: 0000000000000003 [ 758.948614][ T7427] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 758.956604][ T7427] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4bf7ab86d4 16:15:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5450, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, 0x0) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) [ 758.964592][ T7427] R13: 00000000004cb800 R14: 00000000004d6688 R15: 0000000000000004 16:15:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x4}}, 0xa) 16:15:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000000003, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:15:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:15 executing program 1 (fault-call:1 fault-nth:1): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5451, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:15 executing program 5: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) 16:15:15 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5452, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x5}}, 0xa) 16:15:15 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000040)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:15:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5460, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x2, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x6}}, 0xa) 16:15:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c12") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:15 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8901, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:15 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x401, 0x20001) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @rand_addr=0x8000}, {0x2, 0x4e24, @empty}, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x5, 0x5}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 16:15:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x5421, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c12") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8902, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x7}}, 0xa) 16:15:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x5450, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:16 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x7ff, 0x42, 0x2, 0x0, 0x0, [{r0}, {r0, 0x0, 0x8}]}) 16:15:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8903, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c12") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x5451, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8904, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:16 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x42) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000040)) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000200)=""/190) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f00000004c0)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x6, 0x0]}, 0x8) 16:15:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x48}}, 0xa) 16:15:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x5452, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8940, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x4c}}, 0xa) 16:15:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x5460, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup2(r0, r0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:15:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8941, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x68}}, 0xa) 16:15:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x894c, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000000)) 16:15:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8901, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x9, 0x181000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="8c695ed1a23eaa10a76df74869dac66a", 0x10) pread64(r0, &(0x7f0000000200)=""/233, 0xe9, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000380)=0x0) setpgid(r2, r3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:15:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b0") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8980, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x6c}}, 0xa) 16:15:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8902, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b0") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8981, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x10001, 0x4000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200280}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x204, r2, 0x700, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x6c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf2}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1403}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_MEDIA={0x24, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x54}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER={0xe8, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xffffffff, @mcast1, 0xecc3}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x91fc, @dev={0xfe, 0x80, [], 0x1d}, 0xffffffffffffff81}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4c58a71bb40f699d}, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x7fffffff, 0x0, 0x10003, 0x10}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000200)={0x3f, r3}) 16:15:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x74}}, 0xa) 16:15:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8903, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b0") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) bind$bt_rfcomm(r2, 0x0, 0x0) 16:15:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8982, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8904, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x7a}}, 0xa) 16:15:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(0xffffffffffffffff) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) bind$bt_rfcomm(r2, 0x0, 0x0) 16:15:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x20102, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r1, 0xd, 0x2}, 0x14) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) 16:15:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8983, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8906, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) bind$bt_rfcomm(r2, 0x0, 0x0) 16:15:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x300}}, 0xa) 16:15:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(0xffffffffffffffff) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xb87, 0x0, 0x7ff, 0x6b9, 0x7, 0x101}) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000200)) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000040)) 16:15:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x89a0, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8907, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:18 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0xac5, 0x0, 0x3, 0x7, 0xaf}, &(0x7f0000000200)=0x14) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) 16:15:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(0xffffffffffffffff) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x500}}, 0xa) 16:15:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x89a1, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0x0, 0x1ff, 0x3}}, 0xa) 16:15:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x402, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x1, @empty, 0xab8e}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240)={r2, 0x8}, &(0x7f0000000280)=0x8) 16:15:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x890b, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") dup(r0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x600}}, 0xa) 16:15:18 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) 16:15:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0x0, 0x1ff, 0x3}}, 0xa) 16:15:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") dup(r0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x890c, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x700}}, 0xa) 16:15:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0x0, 0x1ff, 0x3}}, 0xa) 16:15:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") dup(r0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x890d, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:19 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) 16:15:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448ca, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x0, 0x3}}, 0xa) 16:15:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, 0x0, 0x0) 16:15:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x4800}}, 0xa) 16:15:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8914, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, 0x0, 0x0) 16:15:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000000)) 16:15:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x0, 0x3}}, 0xa) 16:15:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) sendmmsg$nfc_llcp(r2, &(0x7f0000001540)=[{&(0x7f0000000200)={0x27, 0x0, 0x2, 0x5, 0x40, 0xff, "2843d712536666eff2055dfa2f197e23d5af421a4f3cfe69c8ac80f80acda3cb8ff4921fd39f8c162e47d11d5225404538b2fe57623a02f8af8235675175fa", 0x16}, 0x60, &(0x7f0000000280)=[{&(0x7f00000000c0)="a03d03925ef20b", 0x7}], 0x1, &(0x7f00000002c0)={0x98, 0x11d, 0x266b, "904edf8245d84f1edff948ac52e04c845d1735fc6806836eea61a89ebaa6cf7a9f5f360956a6eb84f0af452fa4014f0ea9da71ee244d844ab00baefa866f3952d46505766f9d2c56f0e589f34cf2fa1436b54b75fbb54405e314bc15b18e40b8d87a94b396b9ca525a3ef6a6d14c2ca737810a1741190ce67305f8552267b9a07706b4ff0c"}, 0x98, 0x11}, {&(0x7f0000000380)={0x27, 0x1, 0x2, 0x6, 0x0, 0x5, "a9768f29a06e32a3c2cb220dea3563879f73f7d0c397f6ab645cd33588178d6374340a5adbc0909d19c06a330b65892014ecf4d5569976b11e51864b834c7a", 0x14}, 0x60, &(0x7f00000014c0)=[{&(0x7f0000000400)="5952a37713e03921a514bf641fadb49dfb44066eb43fc52de5c8b18da4f31b1129495d65ab6a28f35f005acece4942b46ce655521cdf496ca2c9713d8b48db17210a31dbb7a8a515700af885dbaaa5d4c026c5dbb6d071ab1add2f38cbfefe42c1aed1f09687aaaa681e9968e1e0d422e963ee28358ada581235d58dcb8b2f865ed7e1f70e8cffe4ae5d6d7c66bd3209434f5879437f4106f8fa057bde5ab9828181a6d0fe877acfe80a76e5bfcc415bf5e0df28245525d2eeb11f2bfd51db8f96231238a8edd05f5a7b29de7406f0aebe807168ad971491847ac31103954cb646700abddff1b5ba2ee12b597fd89e5dada93a932d93a9ec551935de148580774050a74f03292df8da84ecde3e1f9323494845a9d50e1053a0c9ea6ea73afcf19b650db2efad4992d0b158a620c3c7ba9e4078a436c9bd4e33a4390dcc25ab7cb76596d7878331bf66b08b9b6a6cc39ecb346b387bf5ac3773631663097fb4cdd696b2b6e75e050ca25adeb5c91ade81879afeefcf90d057fc496b1dc6f816d18befe75c1397337813b905502c2bc238dc04c365e8bdd12e89afad7b26412f202e90d4a22a4e2d3c8c6733574f436030f21eaefcc0e3116e1cda048a1b7418b657aa24e40c38113b837df1d80378e58f2650ee6592e7e47630a7a7d115f61007f0d78d58dcb29069b4ec336489094a4bc241848e3ffea1b1f955838884e32e62e5b47f7ebb5e96039ee859f306204593fe8a7a0cebada0bc227af21f8101eab531337ea831748207246360e11a0c96d026247d9a1663e154edac72e8433a8431eea9a501c54bb5b2238a3eafbeeb7631c83ab11061cfb22683011898db284f1cf16fac7f18b516514c32c73511bd1db011dd0567f5ad8bebd453e782a8e42b08cbe4ffa95af8832f585717396609ad82b7e142033c5d03d64284f690990842e4430ee07a0e8dd2423881348825cc15ef47f36c8a739bfa4819bba0ff564e8622dfc30e45846b8e798db543e56bf097021a45d35a6fe6912470590abd6332fe43670847fcf192cc92d49e240e8f48ff54574951d0d71eb88863b96711bf438ccbcd68118316bace89bc6f3a4355c53e2342c4dda4d3e03085b4be135745e1b0dbb611c222fabb0cfb384b58662572afa936a39c2b3f45050682e875637666c2dd4131e25c8ccc1e10351806f1c0e29731db293dd3956e380bcb596852353f63b7826f89b53a8ec88cab70df56b86e4c98653619818d2909b61a36a16f700daeb8161f90f4153f405c9d2dfa0745709fca48438936721747b7d49164e45e128664e84db8ca876e1d6a86cd2061fd5ca60e18ae465c6fbbc546a54fe53d08da99ec86faaa53e879a79ca2f870691a34cf0dbcddb3ded554c28bc2f8d30add81c123f102a2e7f1a35ea4dd76aa37e9266bdb482a6e2fb9c3c0554182194b4fbe692de52beb7b1e055b45ef9710b7551f737eea7c64d2662728eb64c0fa56b86d7c95ce67a9e9dce51bb403a69617d02b70d62ba476550ade323da3e01d6e5c367aa080c3fb78decfafb9f3b64cfe6dc0b2841ec6bf225b2e7e1765b9a08ad4ef447de55ba7f8312c72d6f3254c6e737bd26241fc7c7462db4bea079d8f6157a3247dcbe4de4af50f312e1a7b17bb7b07ded4dc93baa758f7932d090f153e42c9a28e74ee444e8128c96b41124123d0d5444e9e995d1a993994a16b9e65fb894d79987ec52d5f12860c11796c85f6fb258aaaca8b61a00074657cf08a7a194e453c9bf2bb860ed759841be2da3139138a0479043406df44f479a028d407433f2b0aaee928a47dbd8c05f9d6760a3e1765aeb02151b55f17194d750190966606db415242f9c1e93df4a1b5a1a7a665464f6f96dba2c119d06d098c0e0e64fa49ce6fd7df73a068e7d67007dbc8eeacb65c8bd1e9d294d397965712725bc80b41f98c7fec3049d5dc2ab73a86a0fcf55013138741c3ff7bd962b12695067d925023578974041f76306fd684365f03b5d3074c5a20680f1e90fb16b31690df8e223ee41f06bfef46737607c8450f01d620d9fb7db7b1c1dabdb93395c4aa657663338dc6bd284e98a961c53f114af51e6ad5e5dfcf9746ba881b3d27481adcf504a9dea0ca5a7f76df41d102a9ea92bf89ee1085de7bf2f9261f1158ac47bf904b99efecc6bdfe8d4d625e006e493504a0e63a235c3084143882d3aa48bbb31318b05234abcba49ed9beb5f06d72fab09bd6e9fd30f6d7973e008064ad74b183e6087361987d89b2bc2e11e702b8464d21b4aab7024da35a2ba82bb289f5133e6b1f8a70fcd54db3d8f2dc47a983121d2bb57776fc5102affd04151cfa80f6b463cca9e2eeebacdc60f416b5cd2b1e4dbdc1fa832deb5a2a5463ac7a6453ce60ec4da8cd1e1ce1eded3fb40969638e4c4fd4c203e5c5e14b74f18d6d82e69ad5c56557e0d95faaf3062f9026bb1019d9f13696cec33a9cb073f44bcddda1ab4cc18e53b1c3ade23ccab94958a260d657fce27ebb348402d76d726edb12bf28d4892b7d847323ca7321ef8a526bed6a8f668fe78d8624d797c6e203ca9fd345bf52197fb8e9898f969a44934c17ceb2ae38a35b1cc00c6ba5133e3ba57ae78c49f6d871dbb9b704aff1c21b623edfadc50eeb8177959f5dcea736cf3abb0afb86792c6394e0a6ca60e731a1022894332aa419d0abc1b23564cc2668ddd840e919f96c08ba70bd3a40a49ebab6c3a0e53d04d3638484af047d496a8124c43126671c2c99d9f6ce534200c46a884253ff85bc771f919fb2f0788445522664316fd045dc54af332e9bbd752c2b130d7fdcebe9d9ec99a3d9da8355b856262d39a36afc48bf0ad3e3b0cd1f4978812ce1567f540de97419d3cc7337e06d60e882eef895e101847a23ca754d753bb4eb139649ae84a9343535fd882d55854efdd164cec3f356a5b5d4bd80f98c22141494f2af9537f84e502f4418b2d76cdb66f3c3b6581644257740834be6e441e5900da71537065d4f57abb02ace021bc7aafd70f95efdd74834942caa3006363d83f10f9b6cb34fbfc465bb03e3badbeabedca74cdbf64e7b7766500e238117d550d2f085efe26a38b0475578402402682b7524cc457734fc020d62c0ab5a5184dd0a7e471cc7e49b279a297fea2c77f47e55916ba546e71b67ec66c96b618cfca9774f9a86bd53500036de98c28a48259404343fb892bbdb8450b53a786c6d23524b87612cf7cbedf52e0d0430ccc4ddd5fb4142cdfcda0891fac1b9b3ebe9d7c376ce3ecd58e4e64a5b6e3f66dbe2bd9a85e95bae05658394e02903b7be7c415e17aa550459c21adf528530754459ffb5c0e1b33ee9e9bcfc336c0ed2fc2f0f3b3d4bc098d7d179aa7917f1be55bf53a4b8e13141b48bd172221fd21a585486b5148dd689458b5d6d0c2bf38c33d0d511c9b061b5ec6c394954fc55487606f3b8708be0f037130f88e20b634d5e2792bddc1be75d60be23efb4f7463b5b874147d93a33b7c7efca9b5fdc09f77b950c8ed890f7737f5bc442f2fb10b08c2e9f88b280368575f2a8ce9c5132efd33f643c939048078e78c30e3b7682377c410cc67a4138121b173f8b88cdfea5fa91315478b3a48ec5d1c2bc49700ec99a550630d480febaec8e7abb817345fe05124e083247141b22071715e519e46b91eff03c7770d2359b9e095c6e637fbb0ee4a97a0281a69ec46495fd8f1fa57aeec686e00c3f35c1275d028fc8a7a3ee3f5c17912a35e1a19a5b4c9c74ef6567f90aaa663a018fb6ebe9c10670aa4d27a0a6525719e350cadfeb40322a8d2580ae48e56a03794698ae3abd688e6cae2db4526de77b26e3f7355c8a4f0c2ef2488f44b79f64f253edbbb015cea0dfc5485623313eb8d299308f0f245ec80a0d102db919fd9d74fdabc33f202afdf5decb8c76ed7b2ffe5c2cd4f1690e1fab75b407a98f372d197f2b71c7280b64b4b7a739e46c82ea4687b04718194ded497959f67e6e3cd3c0d06b7261f85de5c85a3b408fd35cc2402545a108f566214adfa78b02bcc558cdcdd26e73084ef37edc6fb4b783f470b62964f076235912a9dbeb293136f50263ad9e6ab159c30b944f713ecb9b82224f0c329c30effd50815a8fd816208e5f6903398680a6a80bb455414ab7a4304f96b0951b6e7da13073610ba3e10569016fe7a98cfaca93b75b0369daaefea64bb7b72f816a36f1d59c3faa5dc48eaa323cbfbac8ae070467feec4807e2e97081963308788c2337ee73f91e9dddd946cc8f5cdfbbed7d308abb9741e003cbe2aeff2ae918fc887526533d55d2802e5d0710ef933fe3794c1a82f9d4dc99666b521476e0e995b7dd02abef132f7b2c45bd1dfe4e9f12b3792af641f5ee030d47ccca3350c737a3ea58f679e76adf1785dcf8c59b374ad692b8533ab2e6ef3e5055a1d45b4a328143c576b558b0c07efd36a9c9447c3001ac27114ed57d5b86afa9a6f1736f2d6ea2341a5deac744fc70022009f9c016eb7070968060a2261f52d6748425419e968bc1f01fe7303af41ba122cb4c3424cbec04af2f70f04d5c07eba80eab0e21f85ab25cd5f130618f0be68178df8c84fafe98788b7f077555b8e014de5916154b7cf3cd65e552b2492372114c1ff1399393e13b9b99c4f034f3291c593ccafc1fa8beaf3c4589c66dcf5bf497d923d56516e2d480f2a73f67aa84ea0725f0ca32867a0dcb88189339cb5ea6023291ff6357bcc8f4463660bae518564e8d5ec3717b8337076fae0700abbcc975f78fe861a1df37c2065d575b47843925998ca059f53d2d08415c75266c69d5cc4623723de6f87c1def3d1d426943bd5a115d957deff6a06a4554eb97596f791264d4678a536b8f559d799aa1beb12766ab01b67d0cbb4f3d0b625eeb771fa346f39849ec890a9d5fd39fb32f65d2ca87bcc2577ede96e09b58a127435e6b9946795d67e503ee02ce14bdcce3b15af3b3150f7c814a80f30864952704b522e44e64dabcbd5730490eb09df7e399ba22a6678e6fdbc40743463e7bca5a366311c6e5369590d703c11916f4886cb986132319435ac73ab3217fdeb636ea9ae644a5d0d4f7cf9a846655d26b0104ba6192ae7bbfb43751cab5e6912310a7867474350a7adbf4fb371a78e8727aeaafaae7b38ef4185d88f41d8c94868bb5625774cc657d06ed74783701e4dbc2e17981e0b5b6dbda504091e78f4c6b6a630087410bfa23100fa7e63796594861336423a3c9da9b7852e34ae576c07d91207eb776c29df6d8483560f50223faa0ae4119f4ff90251a8db1ffc0f60f941db1650e9c0f03ecc404a6efe5b618b327d6ed055c0db6a6cb0a191e4ced9659b93de5d264ec732bfbecf2e10053aa8ab57ada29a7098f0270487f474f303eeb911284bb866fdb8c5a5cdf7336b3378cd7d245df71bcd4072eef4234d9b24a778393533afff3b09d3e585fb33fa087530befcbaec59ebce52073c367ea4ca785b52576cbadb1a0b55248198c654fab825803d1a2cdb000079a83b2ab736002aee04946a342c0d663592e3f5c740f34d4ee353a4d5e9abc2faf8c678143c01978148d3f1f831247b63f310c08852ec6ad25507c56d5cf69be958c93deeda64461490def2e999a59c2fd19311a0cebd317d9d8a5b7dc0f4f3e4fce866268375e99210d1716e63a22036301852e1db0342dd786f52369ad6c996ab3fa465a2a0b044b81456617c1e11d311f76a874ea6731fa78ee0d3810ee29a807a8411e0cb508762d997e709aa2d8effa531ca623d0f21af6e54e434331320b38", 0x1000}, {&(0x7f0000001400)="8e555ed0363ddf26eb1a3bec32de45", 0xf}, {&(0x7f0000001440)="165a35ee46ed15032c1f89d953bba336ae57c111affc2a7879a277a30c759ae99e684edf997115400f90164f5dd3a4cb76dc8e66e268b3e79597718773c48a558a1b99d05ac75b04302a94e260dc52c56abe881c7ef32e6eb4ff4911cdd6162b1b7dceefd1cdffd1fbed90fcc2ef1751", 0x70}], 0x3, &(0x7f0000001500)={0x10, 0x1, 0xfffffffffffffc00}, 0x10, 0x24000000}], 0x2, 0x8001) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000080)={0x1, r3}) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000015c0)={0x0, @in6={{0xa, 0x4e24, 0x1, @rand_addr="91d70d372e63d17da8119931ddb4736c", 0x800}}, 0xfff, 0x3, 0x4, 0xf53, 0x3f}, &(0x7f0000001680)=0x98) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000016c0)={r4, 0x3, 0x400, 0x3, 0x4, 0x41}, 0x14) 16:15:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000001c0)=0x2) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000000)) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000200)) 16:15:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448dd, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="77f942898a47210163a6d1598936e11cb0148e27c2b1fb1a7d9ce140f3999c836eb52444061d62129b9aa9da264e92a18ce7e4c9653c380e5984f908929cf997b78be8a05fe2825ddb756094068a", 0x4e, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000200)={r1, 0x8}, &(0x7f0000000240)={'enc=', 'raw', ' hash=', {'crc32c\x00'}}, &(0x7f00000002c0)="ac189b851741ef0d2de306982166093bf087d72215bd7a27de3e8389b35a74a12f7647f24b41d1f62f0d741f155695f840d0d5a3db2863cece2cc8a00424beebcf16c447e48e7398a36e2fcadf9aaa31f88202822c8efe7a24535bcefac304bc", &(0x7f0000000340)=""/20) 16:15:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, 0x0, 0x0) 16:15:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x4c00}}, 0xa) 16:15:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8915, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x0, 0x3}}, 0xa) 16:15:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448e4, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x30, r2, 0x502, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x400, @bearer=@udp='udp:syz1\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x8040) 16:15:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0x0, 0x1ff, 0x3}}, 0xa) 16:15:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x6800}}, 0xa) 16:15:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8916, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) 16:15:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x40049409, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r1 = socket(0x13, 0x80005, 0xffffffff) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000002940)=@assoc_value={0x0}, &(0x7f0000002980)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000029c0)={r2, 0x1, 0x4, 0x7, 0x8, 0xfff}, &(0x7f0000002a00)=0x14) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000000)) 16:15:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x4020940d, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) 16:15:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffff, 0x101200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x350, 0x0, 0x130, 0x0, 0x130, 0x0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, &(0x7f0000000040), {[{{@ipv6={@local, @dev={0xfe, 0x80, [], 0x17}, [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x0, 0xff0000ff], 'ip6gretap0\x00', 'lapb0\x00', {0xff}, {}, 0x7d, 0x2fc, 0x4, 0x8}, 0x0, 0x110, 0x130, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x9, 0x2, 0x1, [0xbe, 0x3, 0x101, 0x9, 0x80000001, 0x5300, 0x7f, 0x14a, 0x8, 0x2d3, 0x8807, 0x8b, 0x20, 0x0, 0xfffffffffffffffb, 0x7], 0xf}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@remote, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'bridge_slave_1\x00', 'rose0\x00', {0xff}, {0xff}, 0xae, 0x7, 0x5, 0x40}, 0x0, 0x110, 0x150, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x2, 0x5, 0x1, [0x0, 0x5, 0x9, 0x1, 0x58e0, 0x1, 0x100, 0x2, 0x6, 0x20, 0x200, 0x68, 0x40000000, 0x1, 0x7, 0x7], 0xe}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x6, 0x9, 0x0, 0xfffffffffffffff9, 0xfffffffffffffffa, 0x2, 0x2]}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 16:15:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x6c00}}, 0xa) 16:15:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0x0, 0x1ff, 0x3}}, 0xa) 16:15:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0x0, 0x1ff, 0x3}}, 0xa) 16:15:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) 16:15:20 executing program 5: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000f281d970f6c10408000000002000000000000000000000"]) 16:15:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8919, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x7400}}, 0xa) 16:15:20 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x4000000000000000, 0x8a200) bind$ax25(r0, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48) r1 = syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0xee, 0x80) set_mempolicy(0x8000, &(0x7f00000005c0)=0x20000000000000, 0x8) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) fcntl$notify(r0, 0x402, 0x80000008) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r2, r0}}, 0x18) ioctl$int_in(r0, 0x5473, &(0x7f0000000300)=0x5) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000740)) connect$nfc_llcp(r0, &(0x7f0000000600)={0x27, 0x1, 0x2, 0x3, 0x6, 0x8, "f31e2669dd98c141a59d321802480183aba24ec42c917ddf78bcabb6ba0d6ba21cdfd68045144ba6a8b2dc3cbbf468ba6ea9b534b3f7c434ba0f9d348409f1", 0xa}, 0x60) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 16:15:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8914, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x891a, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x0, 0x3}}, 0xa) 16:15:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448f0, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x7a00}}, 0xa) 16:15:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000240)={0x0, 0x8001, 0x201a, 0x1}) r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0xec, 0x41) getpeername$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000280)={0x1, 0x4, 0x0, 0x0, 0x16}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={r1, 0xffffffffffffffff, 0x6, 0x1}, 0x10) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000040)) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f00000000c0)={0x2, 0x2, 0x3f, 0x7d63, 0x4, 0x4}) 16:15:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x800, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) 16:15:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0xc0045878, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x80000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x844000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x30, r2, 0xd10, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x7, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) fchdir(r0) 16:15:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0xc0045878, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:15:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0xc0189436, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x891b, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x0, 0x3}}, 0xa) 16:15:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x34000}}, 0xa) 16:15:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) 16:15:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0xc020660b, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x891c, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x300, &(0x7f00000001c0)=[{}]}) 16:15:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x0, 0x3}}, 0xa) 16:15:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) bind(r0, &(0x7f0000000000)=@ethernet={0x306}, 0x80) 16:15:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x400300}}, 0xa) 16:15:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8934, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0xffffff1f, &(0x7f00000001c0)=[{}]}) 16:15:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000000)) 16:15:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) 16:15:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x1000000}}, 0xa) 16:15:22 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d4, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8935, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000200)) 16:15:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:22 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d4, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) 16:15:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8940, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x2000000}}, 0xa) 16:15:22 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d4, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80000, 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x9) 16:15:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) 16:15:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x3000000}}, 0xa) 16:15:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8941, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:22 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d4, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v1={0x1000000, [{0x0, 0xb9}]}, 0xc, 0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x10000, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f00000000c0)={{0x7, 0x9, 0x6, 0x10000, 0x1, 0x7fff}, 0x8, 0x1f, 0x3}) ioctl$SIOCRSACCEPT(r1, 0x89e3) 16:15:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x4000000}}, 0xa) 16:15:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x894c, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:22 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d4, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:15:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x5000000}}, 0xa) 16:15:22 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d4, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 16:15:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8953, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x6000000}}, 0xa) 16:15:23 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d4, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:23 executing program 5: syz_emit_ethernet(0x193, &(0x7f0000000240)={@remote, @local, [{[{0x9100, 0x20, 0x1, 0x2}], {0x8100, 0xffff, 0x200, 0x1}}], {@ipv4={0x800, {{0x20, 0x4, 0x4, 0x2677, 0x17d, 0x66, 0x8000, 0x2, 0x62, 0x0, @multicast2, @empty, {[@end, @rr={0x7, 0x13, 0x0, [@broadcast, @broadcast, @loopback, @multicast2]}, @end, @timestamp={0x44, 0x18, 0x2, 0x1, 0x3, [{[], 0x5}, {[], 0x7fff}, {[@loopback], 0xfffffffffd567f21}, {[], 0x8}]}, @generic={0x88, 0x11, "9c6b36c52122c7d6651a57335a32a0"}, @end, @end, @lsrr={0x83, 0x17, 0x10000, [@remote, @empty, @empty, @empty, @loopback]}, @lsrr={0x83, 0x13, 0x4, [@local, @empty, @broadcast, @broadcast]}]}}, @dccp={{0x4e22, 0x4e22, 0x4, 0x1, 0x100000001, 0x0, 0x0, 0x6, 0x4, "7f1b0b", 0x4, "97e30d"}, "7a09b4c4c1d5f567348cb14872b4a00a435f2aa30e938c20b1e4258c44954d96fccc17c79a5db8eb22d8e3748452008833d92e583831a41e1aecf4d1cdae1b8f51aab567162c1989e4e6e4d1b51c7939be9bcaf64122e5636a94e50dfa5b5aa91861f69116105eab0de7f864a2d7aadd5fb0ca25821421b5714decf881fcd821ec295d30bc0f8655d17703ce57bd3709bedfb4adea32001d09c4b8254d1de458cdbb4e4021dbc3230ef6ab39fcf0fd9a1a58987eb332e685f025d368d454ca26213a13800f7c0456856859d6a55df70431dde3520645d21049d2ecaba65207c2e3a87d1058ca40edf6dea47dd1"}}}}}, &(0x7f0000000400)={0x1, 0x4, [0x79c, 0x81c, 0xd91, 0x80f]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000200)=0xfffffffffffffff7) r1 = request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000440)=0x0) sched_setattr(r2, &(0x7f0000000480)={0x30, 0x5, 0x1, 0x5, 0x70, 0x4, 0x1000000000000000, 0xfffffffffffffc01}, 0x0) keyctl$revoke(0x3, r1) r3 = userfaultfd(0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000800)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 16:15:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8955, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x7000000}}, 0xa) 16:15:23 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d4, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8980, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x400448cb, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:23 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d4, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:23 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000000)={0x3, 0x29cc}) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000040)={0x0, @reserved}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x381}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1d4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff0000}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f00000003c0)) 16:15:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x48000000}}, 0xa) 16:15:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x400448cb, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8981, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x800, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) fcntl$addseals(r0, 0x409, 0x3) r3 = syz_open_dev$usbmon(&(0x7f0000001280)='/dev/usbmon#\x00', 0x81, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000012c0)={'bridge0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000001300)={0x1d, r4}, 0x10) 16:15:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d4, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x400448cb, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8982, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x4c000000}}, 0xa) 16:15:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = semget(0x2, 0x0, 0x40) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000000)=""/134) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:15:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d4, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:23 executing program 5: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x2, 0xe, 0x4, 0x20000000, {0x0, 0x7530}, {0x3, 0xc, 0xfffffffffffffff8, 0x5, 0x0, 0x7, "bf4894ec"}, 0x8, 0x7, @userptr=0x7, 0x4}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) 16:15:23 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x400448cb, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8983, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x68000000}}, 0xa) 16:15:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d4, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:24 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x400448cb, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x545400, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@initdev, @multicast1, @initdev}, &(0x7f0000000080)=0xc) 16:15:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x6c000000}}, 0xa) 16:15:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x89a0, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:24 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x400448cb, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:24 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x9, 0x2000) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000003c0)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x4001000000008, 0x3) finit_module(r1, &(0x7f0000000400)='TIPCv2\x00', 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0) fsync(r1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9d6478cc", @ANYRES16=r3, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x3) 16:15:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, 0x0) 16:15:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x89a1, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, 0x0) 16:15:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x40049409, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x74000000}}, 0xa) 16:15:24 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x400448cb, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:24 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x4800, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000200)={0x5aa7, 0x0, 0x3, 0x7fff, 0x5f08, 0x3f, 0xfffffffffffffff9}) 16:15:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{{}}]}) 16:15:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, 0x0) 16:15:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x4020940d, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x7a000000}}, 0xa) 16:15:24 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x400448cb, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{{}}]}) 16:15:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000000)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100)) 16:15:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0xc0045878, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:24 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x400448cb, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0xffffff7f}}, 0xa) 16:15:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{{}}]}) 16:15:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) 16:15:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x400448cb, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0xc0045878, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x600}}, 0xa) 16:15:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{{}}]}) 16:15:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x40030000000000}}, 0xa) 16:15:25 executing program 4 (fault-call:2 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0xc0189436, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x400448cb, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101040) write$UHID_INPUT(r1, &(0x7f0000000200)={0x8, "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", 0x1000}, 0x1006) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:15:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{{}}]}) 16:15:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x100000000000000}}, 0xa) [ 769.191168][ T8857] FAULT_INJECTION: forcing a failure. [ 769.191168][ T8857] name failslab, interval 1, probability 0, space 0, times 0 16:15:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x400448cb, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{{}}]}) [ 769.298260][ T8857] CPU: 0 PID: 8857 Comm: syz-executor.4 Not tainted 5.1.0-rc2-next-20190327 #12 [ 769.307330][ T8857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.317398][ T8857] Call Trace: [ 769.320713][ T8857] dump_stack+0x172/0x1f0 [ 769.325079][ T8857] should_fail.cold+0xa/0x15 [ 769.329704][ T8857] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 769.335530][ T8857] ? ida_alloc_range+0x38c/0x820 [ 769.340495][ T8857] __should_failslab+0x121/0x190 [ 769.345457][ T8857] should_failslab+0x9/0x14 [ 769.349979][ T8857] kmem_cache_alloc_node+0x56/0x710 [ 769.355194][ T8857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 769.361455][ T8857] ? refcount_sub_and_test_checked+0x154/0x200 [ 769.367633][ T8857] __alloc_skb+0xd5/0x5e0 [ 769.371982][ T8857] ? skb_trim+0x190/0x190 [ 769.376325][ T8857] ? refcount_dec_and_test_checked+0x1b/0x20 [ 769.382331][ T8857] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 769.388604][ T8857] create_monitor_ctrl_open+0x183/0x810 [ 769.394163][ T8857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 769.400429][ T8857] ? send_monitor_note+0x460/0x460 [ 769.400448][ T8857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 769.400462][ T8857] ? ns_capable_common+0x93/0x100 [ 769.400478][ T8857] hci_sock_ioctl+0x382/0x830 [ 769.400491][ T8857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 769.400504][ T8857] ? _parse_integer+0x139/0x190 [ 769.400517][ T8857] ? hci_sock_sendmsg+0x2150/0x2150 [ 769.400532][ T8857] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 769.400545][ T8857] ? _kstrtoull+0x14c/0x200 16:15:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{{}}]}) 16:15:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) 16:15:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x200000000000000}}, 0xa) [ 769.400564][ T8857] sock_do_ioctl+0xde/0x300 [ 769.400579][ T8857] ? compat_ifr_data_ioctl+0x160/0x160 [ 769.400595][ T8857] ? tomoyo_domain+0xc5/0x160 [ 769.400611][ T8857] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 769.400634][ T8857] ? tomoyo_init_request_info+0x105/0x1d0 [ 769.475273][ T8857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 769.481552][ T8857] ? tomoyo_path_number_perm+0x263/0x520 [ 769.487209][ T8857] ? find_held_lock+0x35/0x130 [ 769.491990][ T8857] sock_ioctl+0x32b/0x610 [ 769.496341][ T8857] ? dlci_ioctl_set+0x40/0x40 [ 769.501038][ T8857] ? __fget+0x35a/0x550 [ 769.505226][ T8857] ? dlci_ioctl_set+0x40/0x40 [ 769.509940][ T8857] do_vfs_ioctl+0xd6e/0x1390 [ 769.509962][ T8857] ? ioctl_preallocate+0x210/0x210 [ 769.509977][ T8857] ? __fget+0x381/0x550 [ 769.509995][ T8857] ? ksys_dup3+0x3e0/0x3e0 [ 769.510008][ T8857] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 769.510020][ T8857] ? fput_many+0x12c/0x1a0 [ 769.510040][ T8857] ? tomoyo_file_ioctl+0x23/0x30 [ 769.510054][ T8857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 769.510072][ T8857] ? security_file_ioctl+0x93/0xc0 [ 769.510097][ T8857] ksys_ioctl+0xab/0xd0 [ 769.510115][ T8857] __x64_sys_ioctl+0x73/0xb0 [ 769.510133][ T8857] do_syscall_64+0x103/0x610 [ 769.510162][ T8857] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 769.519890][ T8857] RIP: 0033:0x458209 [ 769.519907][ T8857] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:15:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x300000000000000}}, 0xa) 16:15:25 executing program 4 (fault-call:2 fault-nth:1): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0xc020660b, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) [ 769.519914][ T8857] RSP: 002b:00007f886cebac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 769.519928][ T8857] RAX: ffffffffffffffda RBX: 00007f886cebac90 RCX: 0000000000458209 [ 769.519937][ T8857] RDX: 0000000020000040 RSI: 00000000800448d4 RDI: 0000000000000003 [ 769.519944][ T8857] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 769.519952][ T8857] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f886cebb6d4 [ 769.519959][ T8857] R13: 00000000004cb6f0 R14: 00000000004d6418 R15: 0000000000000005 16:15:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\xff\xff\xfd\xfd\x00', {0x2, 0x0, @remote}}) [ 769.677592][ T8891] FAULT_INJECTION: forcing a failure. [ 769.677592][ T8891] name failslab, interval 1, probability 0, space 0, times 0 [ 769.731659][ T8891] CPU: 1 PID: 8891 Comm: syz-executor.4 Not tainted 5.1.0-rc2-next-20190327 #12 [ 769.740734][ T8891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.750842][ T8891] Call Trace: [ 769.754155][ T8891] dump_stack+0x172/0x1f0 [ 769.758521][ T8891] should_fail.cold+0xa/0x15 [ 769.763137][ T8891] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 769.763157][ T8891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 769.763171][ T8891] ? should_fail+0x1de/0x852 [ 769.763190][ T8891] __should_failslab+0x121/0x190 [ 769.763212][ T8891] should_failslab+0x9/0x14 [ 769.775290][ T8891] kmem_cache_alloc_node_trace+0x5a/0x720 [ 769.775315][ T8891] __kmalloc_node_track_caller+0x3d/0x70 [ 769.775334][ T8891] __kmalloc_reserve.isra.0+0x40/0xf0 [ 769.775351][ T8891] __alloc_skb+0x10b/0x5e0 [ 769.775372][ T8891] ? skb_trim+0x190/0x190 [ 769.814845][ T8891] ? refcount_dec_and_test_checked+0x1b/0x20 [ 769.820929][ T8891] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 769.827200][ T8891] create_monitor_ctrl_open+0x183/0x810 [ 769.832770][ T8891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 769.839169][ T8891] ? send_monitor_note+0x460/0x460 [ 769.844336][ T8891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 769.850614][ T8891] ? ns_capable_common+0x93/0x100 [ 769.855660][ T8891] hci_sock_ioctl+0x382/0x830 [ 769.860360][ T8891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 769.866632][ T8891] ? _parse_integer+0x139/0x190 [ 769.871530][ T8891] ? hci_sock_sendmsg+0x2150/0x2150 [ 769.876755][ T8891] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 769.883015][ T8891] ? _kstrtoull+0x14c/0x200 [ 769.887596][ T8891] sock_do_ioctl+0xde/0x300 [ 769.892095][ T8891] ? compat_ifr_data_ioctl+0x160/0x160 [ 769.897554][ T8891] ? tomoyo_domain+0xc5/0x160 [ 769.902230][ T8891] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 769.908609][ T8891] ? tomoyo_init_request_info+0x105/0x1d0 [ 769.914347][ T8891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 769.920593][ T8891] ? tomoyo_path_number_perm+0x263/0x520 [ 769.926221][ T8891] ? find_held_lock+0x35/0x130 [ 769.930982][ T8891] sock_ioctl+0x32b/0x610 [ 769.935321][ T8891] ? dlci_ioctl_set+0x40/0x40 [ 769.940027][ T8891] ? __fget+0x35a/0x550 [ 769.944194][ T8891] ? dlci_ioctl_set+0x40/0x40 [ 769.948860][ T8891] do_vfs_ioctl+0xd6e/0x1390 [ 769.953450][ T8891] ? ioctl_preallocate+0x210/0x210 [ 769.958571][ T8891] ? __fget+0x381/0x550 [ 769.962745][ T8891] ? ksys_dup3+0x3e0/0x3e0 [ 769.967152][ T8891] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 769.973388][ T8891] ? fput_many+0x12c/0x1a0 [ 769.977815][ T8891] ? tomoyo_file_ioctl+0x23/0x30 [ 769.982779][ T8891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 769.990190][ T8891] ? security_file_ioctl+0x93/0xc0 [ 769.995323][ T8891] ksys_ioctl+0xab/0xd0 [ 769.999500][ T8891] __x64_sys_ioctl+0x73/0xb0 [ 770.004083][ T8891] do_syscall_64+0x103/0x610 [ 770.008669][ T8891] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 770.014552][ T8891] RIP: 0033:0x458209 [ 770.018444][ T8891] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 770.038382][ T8891] RSP: 002b:00007f886cebac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 770.046805][ T8891] RAX: ffffffffffffffda RBX: 00007f886cebac90 RCX: 0000000000458209 [ 770.054792][ T8891] RDX: 0000000020000040 RSI: 00000000800448d4 RDI: 0000000000000003 [ 770.062756][ T8891] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 770.070742][ T8891] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f886cebb6d4 [ 770.078743][ T8891] R13: 00000000004cb6f0 R14: 00000000004d6418 R15: 0000000000000005 16:15:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{{}}]}) 16:15:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x400000000000000}}, 0xa) 16:15:26 executing program 0 (fault-call:2 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) 16:15:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x46, 0x800) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x16) 16:15:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\xfd\xfd\xff\xff\x00', {0x2, 0x0, @remote}}) [ 770.167266][ T8915] FAULT_INJECTION: forcing a failure. [ 770.167266][ T8915] name failslab, interval 1, probability 0, space 0, times 0 16:15:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x500000000000000}}, 0xa) [ 770.243174][ T8915] CPU: 1 PID: 8915 Comm: syz-executor.0 Not tainted 5.1.0-rc2-next-20190327 #12 [ 770.252244][ T8915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.262326][ T8915] Call Trace: [ 770.265644][ T8915] dump_stack+0x172/0x1f0 [ 770.270015][ T8915] should_fail.cold+0xa/0x15 [ 770.274660][ T8915] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 770.280492][ T8915] ? ida_alloc_range+0x38c/0x820 [ 770.285481][ T8915] __should_failslab+0x121/0x190 [ 770.290528][ T8915] should_failslab+0x9/0x14 [ 770.295065][ T8915] kmem_cache_alloc_node+0x56/0x710 [ 770.300290][ T8915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 770.306547][ T8915] ? refcount_sub_and_test_checked+0x154/0x200 [ 770.312730][ T8915] __alloc_skb+0xd5/0x5e0 [ 770.317086][ T8915] ? skb_trim+0x190/0x190 [ 770.321436][ T8915] ? refcount_dec_and_test_checked+0x1b/0x20 [ 770.327430][ T8915] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 770.333714][ T8915] create_monitor_ctrl_open+0x183/0x810 [ 770.339286][ T8915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 770.345558][ T8915] ? send_monitor_note+0x460/0x460 [ 770.350705][ T8915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 770.356975][ T8915] ? ns_capable_common+0x93/0x100 [ 770.362026][ T8915] hci_sock_ioctl+0x382/0x830 [ 770.366730][ T8915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 770.372993][ T8915] ? _parse_integer+0x139/0x190 [ 770.377866][ T8915] ? hci_sock_sendmsg+0x2150/0x2150 [ 770.383175][ T8915] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 770.389435][ T8915] ? _kstrtoull+0x14c/0x200 [ 770.393958][ T8915] sock_do_ioctl+0xde/0x300 [ 770.398502][ T8915] ? compat_ifr_data_ioctl+0x160/0x160 [ 770.403977][ T8915] ? tomoyo_domain+0xc5/0x160 [ 770.408673][ T8915] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 770.414957][ T8915] ? tomoyo_init_request_info+0x105/0x1d0 [ 770.420691][ T8915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 770.426951][ T8915] ? tomoyo_path_number_perm+0x263/0x520 [ 770.432625][ T8915] ? find_held_lock+0x35/0x130 [ 770.437417][ T8915] sock_ioctl+0x32b/0x610 [ 770.441767][ T8915] ? dlci_ioctl_set+0x40/0x40 [ 770.446469][ T8915] ? __fget+0x35a/0x550 [ 770.450644][ T8915] ? dlci_ioctl_set+0x40/0x40 [ 770.455355][ T8915] do_vfs_ioctl+0xd6e/0x1390 [ 770.459968][ T8915] ? ioctl_preallocate+0x210/0x210 [ 770.465097][ T8915] ? __fget+0x381/0x550 [ 770.469290][ T8915] ? ksys_dup3+0x3e0/0x3e0 [ 770.473735][ T8915] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 770.479999][ T8915] ? fput_many+0x12c/0x1a0 [ 770.484456][ T8915] ? tomoyo_file_ioctl+0x23/0x30 16:15:26 executing program 4 (fault-call:2 fault-nth:2): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x600000000000000}}, 0xa) 16:15:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x2, &(0x7f0000000040)={0x0, 0x0}) 16:15:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x700000000000000}}, 0xa) 16:15:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5421, &(0x7f0000000040)={0x0, 0x0}) [ 770.489414][ T8915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 770.495676][ T8915] ? security_file_ioctl+0x93/0xc0 [ 770.500813][ T8915] ksys_ioctl+0xab/0xd0 [ 770.504991][ T8915] __x64_sys_ioctl+0x73/0xb0 [ 770.509604][ T8915] do_syscall_64+0x103/0x610 [ 770.509631][ T8915] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 770.509644][ T8915] RIP: 0033:0x458209 [ 770.509660][ T8915] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:15:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5450, &(0x7f0000000040)={0x0, 0x0}) 16:15:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4003, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000200)) [ 770.509668][ T8915] RSP: 002b:00007fedb27d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 770.509683][ T8915] RAX: ffffffffffffffda RBX: 00007fedb27d6c90 RCX: 0000000000458209 [ 770.509699][ T8915] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000003 [ 770.520192][ T8915] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 770.520201][ T8915] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fedb27d76d4 [ 770.520209][ T8915] R13: 00000000004cb6f0 R14: 00000000004d6418 R15: 0000000000000005 16:15:26 executing program 0 (fault-call:2 fault-nth:1): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) 16:15:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x4800000000000000}}, 0xa) 16:15:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00\x00\x00\x00\xff\xff\xfd\xfd\x00', {0x2, 0x0, @remote}}) 16:15:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{{}}]}) 16:15:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x100) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) r3 = getuid() getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000080)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001a80)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) sendmsg$netlink(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000300)={0x175c, 0x1b, 0x30, 0x70bd29, 0x25dfdbfc, "", [@nested={0x1140, 0x5d, [@typed={0x8, 0xd, @ipv4=@multicast1}, @generic="6e9728726f621ff5c8e8dce373532b38a9f54b8df689751dc8d790c6b9dfe044d4c99c9c4bc3519db58db28582274e5891c5f529c7fba340419e8ec4abb652bb1405e47509c66328cb2533e1e3e61a21911eda6b8c039c3b3bdd0324e169e6c039515bd03d38266961ea87936c5e6d2e70e127a1033affe22fb2372e2bf39445f75f9572d5", @typed={0x14, 0x20, @ipv6=@remote}, @generic="5dd8496d3383055e55438cf969fdb2bcad4c28281becfb7382e7b5a8994d0a08b0380d8f4968e8ac7112ad585617d134b51cb53243615ff5633e53a6d4a52b3f03c87c5b67db45aab005e6feaf6e9da6cf584418fabcac27b728d7f5d50c677378ac2270ca8951e010b59af88a0c5bf14a28c3d44d734ea0d8dafdc041b17dfb5c9517e0c8e635255a00ac", @typed={0x8, 0x67, @fd=r0}, @typed={0x8, 0x20, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="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"]}, @nested={0x8c, 0x29, [@generic="8a5d57335f3b1f94872b961ee86e0b689c490ac643fc87dce3484beb40209a35ad0613475031445744a7c34703b6070858d4f431e0c96c4392ca8b0ffdf4c2c94359e423ce21bbae9c6e1062654eefa9bfd90b9771a17daa84bae37f8a61e93e0f583efc9f3886506b25656120505f7527bf19735aa89b554d90bac5c97b8d3997e0c4dc48"]}, @typed={0x8, 0x2, @uid=r3}, @nested={0x1d4, 0x7f, [@typed={0x8, 0x81, @u32=0x2}, @generic="2b70eb9a72cb7a3b4c89b0dfed96253fa7226f9e959cd836791492e189fdbcd2e340d112ff1628f697c787e264394817fce7c0172a38cdc3cb02fbf36531626764cb2c10664daf2d268f57b8469ce8affefecc37763616f1ec8a13337c286cf4c7e00aa46914b0498c9ddec8d1d61bc641a3c3ba35e8ca257e5b84264b7fc4338cbd6671f7a15b0bce8e5b664dccd0515675370d7fca0889d7135e0478fe03984cd03e59e3d6fcdb50a2afbe45ba348a87b90aef4be1c261fdb1323d4cbe94d1a1f9890c028f8cc7b5ea3f89ecb87b1c96d62c8f82755c86139bbcbae396e4b4096006", @generic="a61fdf4e88b0f6d4a74be96fdb2eb6b476fe75a8582ceb853e8246a2387e3293f0dc8d010eed3b1c69b3a7815a7d191e9cb01f495ebc650e623e8ed377a2cc45546b4615a9674f0e79563a390ea79563dc667b2eb596782b6809a2395692d66ef879387de71a28069d1cb962d469a68544cafe91f57f5cf28b56771aa47dc36b45b48dc08eb7a11c7714187876fbdebc5773abe7824917fcb7cb5cf473b74843ad95b1a681c8da5430df6aecca916a24e94250b4aff890b41f0fdeb5ecc90e540a3b32668d546160d0ec6ecabd54df6d33530eafddcf52cde6caa96f281557e82acd"]}, @generic="ba1a2f07e0bde2192341b096a00f061c83e0305f3e639a8d3498da4950b7f46529fe76616fc30755c896f33b8b43ae70435f9242b7ad4fbecad8768d8296e64ad6d76f402101d00322bc42eb2ed82d3a953ea742ce15c8d1b9f340deb6247af2fa11b39e1c03584f05db642519488fdad2c4d619e18817f269ff1761140ce953f9052502ca14f47b8d9f2180efc79d524e4ab1e9c88ca4fd463521c09053af71e31581323379e6b839199ba1bf", @typed={0xc, 0x58, @u64=0x1}, @generic="33cae7825f14b4b21c0c9ef016077897ad99e7fa3cbb94ab97fd30de1a510fd1a86df59478631d0eabed63002546f6c54599097cce5498cc786f26", @nested={0x1f0, 0x1a, [@typed={0x8, 0x8f, @uid=r4}, @generic="9ba70cfea164216316f8dd27010eae400260389f93ce8b2df26cb5fe931cca70b83e0aab9ad78b33c82497956b41e11a8bdc06b24909a11917b6274dbac3d9a54157542f4fc7f151e035d691f668a87d0a24ffe782840567d040d0a66c2102516446a81e7616d6bd65163e7e44a7486c4d72ae2090fd0ef1d68b8d6bb4649049e7221665d2d1e0dab26bd7f177bfc006f089857f6e07e8d47287f2262eb42895639220d9ee6d2e1df0c94313eb68b6ed09afe30c", @generic="f67fc7c2ed975974f77f01a3b523e550a1c727c9e820cfdb38b328b0ce45dad3b753fd3b25f3e36d1043744ee2c10362a7743690aa5c39f01de22471a1acb8", @typed={0x10, 0xf, @str='cgroup.stat\x00'}, @generic="34aedf0c19de63fd1d6ec1616ca164b66108dc9687f06a5a3ef8ed7d79fe563fa5d3e7dd3b0bc2be83e55ec63999cd96f2d667ffcbe1823fc79c4cfec434ae1eb748ea19a8359a9757acf926733275f02e799f7fe6b70a334cf2662bafd2d3bbf2220dc7b3d7149f62e923cf520f2e1e1facf8acbd073bedaebe65a918706f2ff00cbed63b2c6bca34ad8379591ba115574388f55accac7d8a9094c31955f565eaa4874f77ae444cc83f0f3d4087cd91373a037a1871e9cf6815b57daa68", @generic="8dd857dd", @generic="74d760e519f4c636c476b438ff12aa3d4a1a", @typed={0xc, 0x54, @u64=0x8}]}, @typed={0x8, 0x39, @u32=0xffffffffffffff7f}, @generic="f0bf10eb0d29801487a824506ce8916e7e08fe69657e9993d986bdb1b587d3f776818ccf0c590464dca8ffa2dc21fae6289390b9f6e825c0cf5d93d8cab4b9672c170dcc3363f6ccb8007e8faa32dabc1d2a30ea22184473bb73ae1a84159fea48da63adc11a3f7391939b0395de9432345ba0a72e0f0a724fc1ae3bba1f8d13337fb494889019dab9f7372c75e29fd059efa08034f5772179faadd8eef153b884f78729bbb16fd0651e35dad68fa23d74f23811cd3d55dc"]}, 0x175c}, {&(0x7f0000001b80)={0xa4, 0x2a, 0x10, 0x70bd28, 0x25dfdbfc, "", [@nested={0x6c, 0x42, [@generic="a9cc3b0a2b0996568eeb6be99bb50adb59394b776caf5358d9147a4b92e14e3ce49ceabb9275c3c3ce2f5fb56ea35876fef5bc0c8dfc16e81bcf33ab7e06d77df5e866224fb6bed65e78dd50bb17465cc5823409d3aab67bb6f6d95d20da0b01a0fd6a360881d3bf"]}, @typed={0xc, 0xd, @u64=0x4}, @typed={0x8, 0x29, @uid=r5}, @typed={0x14, 0x2e, @ipv6=@mcast2}]}, 0xa4}], 0x2, &(0x7f0000001c80), 0x0, 0x4040}, 0x0) 16:15:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5451, &(0x7f0000000040)={0x0, 0x0}) 16:15:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x4c00000000000000}}, 0xa) [ 770.832363][ T8975] FAULT_INJECTION: forcing a failure. [ 770.832363][ T8975] name failslab, interval 1, probability 0, space 0, times 0 [ 770.897316][ T8975] CPU: 1 PID: 8975 Comm: syz-executor.0 Not tainted 5.1.0-rc2-next-20190327 #12 [ 770.906384][ T8975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.916457][ T8975] Call Trace: [ 770.919771][ T8975] dump_stack+0x172/0x1f0 [ 770.924126][ T8975] should_fail.cold+0xa/0x15 [ 770.928742][ T8975] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 770.934572][ T8975] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 770.940841][ T8975] ? should_fail+0x1de/0x852 [ 770.945471][ T8975] __should_failslab+0x121/0x190 [ 770.950451][ T8975] should_failslab+0x9/0x14 [ 770.954985][ T8975] kmem_cache_alloc_node_trace+0x5a/0x720 [ 770.960754][ T8975] __kmalloc_node_track_caller+0x3d/0x70 [ 770.966419][ T8975] __kmalloc_reserve.isra.0+0x40/0xf0 [ 770.971813][ T8975] __alloc_skb+0x10b/0x5e0 [ 770.976261][ T8975] ? skb_trim+0x190/0x190 [ 770.980644][ T8975] ? refcount_dec_and_test_checked+0x1b/0x20 [ 770.986649][ T8975] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 770.992912][ T8975] create_monitor_ctrl_open+0x183/0x810 [ 770.998480][ T8975] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 771.004744][ T8975] ? send_monitor_note+0x460/0x460 [ 771.009877][ T8975] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 771.016164][ T8975] ? ns_capable_common+0x93/0x100 [ 771.021222][ T8975] hci_sock_ioctl+0x382/0x830 [ 771.025930][ T8975] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 771.032194][ T8975] ? _parse_integer+0x139/0x190 [ 771.037095][ T8975] ? hci_sock_sendmsg+0x2150/0x2150 [ 771.042323][ T8975] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 771.048583][ T8975] ? _kstrtoull+0x14c/0x200 [ 771.053144][ T8975] sock_do_ioctl+0xde/0x300 [ 771.057668][ T8975] ? compat_ifr_data_ioctl+0x160/0x160 [ 771.063148][ T8975] ? tomoyo_domain+0xc5/0x160 [ 771.067847][ T8975] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 771.074119][ T8975] ? tomoyo_init_request_info+0x105/0x1d0 [ 771.079866][ T8975] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 771.086127][ T8975] ? tomoyo_path_number_perm+0x263/0x520 [ 771.091775][ T8975] ? find_held_lock+0x35/0x130 [ 771.096560][ T8975] sock_ioctl+0x32b/0x610 [ 771.100909][ T8975] ? dlci_ioctl_set+0x40/0x40 [ 771.105616][ T8975] ? __fget+0x35a/0x550 [ 771.109798][ T8975] ? dlci_ioctl_set+0x40/0x40 [ 771.114500][ T8975] do_vfs_ioctl+0xd6e/0x1390 [ 771.119112][ T8975] ? ioctl_preallocate+0x210/0x210 [ 771.124243][ T8975] ? __fget+0x381/0x550 [ 771.128418][ T8975] ? ksys_dup3+0x3e0/0x3e0 [ 771.132854][ T8975] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 771.139111][ T8975] ? fput_many+0x12c/0x1a0 [ 771.143901][ T8975] ? tomoyo_file_ioctl+0x23/0x30 [ 771.148862][ T8975] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 771.155111][ T8975] ? security_file_ioctl+0x93/0xc0 [ 771.155133][ T8975] ksys_ioctl+0xab/0xd0 [ 771.164504][ T8975] __x64_sys_ioctl+0x73/0xb0 [ 771.169111][ T8975] do_syscall_64+0x103/0x610 [ 771.169132][ T8975] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 771.169143][ T8975] RIP: 0033:0x458209 16:15:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00\xff\xff\xfd\xfd\x00', {0x2, 0x0, @remote}}) 16:15:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5452, &(0x7f0000000040)={0x0, 0x0}) 16:15:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00\xfd\xfd\xff\xff\x00', {0x2, 0x0, @remote}}) 16:15:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5460, &(0x7f0000000040)={0x0, 0x0}) 16:15:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00\x00\x00\x00\x00\xff\xff\xfd\xfd', {0x2, 0x0, @remote}}) [ 771.169158][ T8975] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 771.169165][ T8975] RSP: 002b:00007fedb27d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 771.169178][ T8975] RAX: ffffffffffffffda RBX: 00007fedb27d6c90 RCX: 0000000000458209 [ 771.169195][ T8975] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000003 [ 771.179686][ T8975] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 771.203212][ T8975] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fedb27d76d4 16:15:27 executing program 0 (fault-call:2 fault-nth:2): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) 16:15:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8901, &(0x7f0000000040)={0x0, 0x0}) 16:15:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00\x00\xff\xff\xfd\xfd\x00', {0x2, 0x0, @remote}}) 16:15:27 executing program 5: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) 16:15:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x6800000000000000}}, 0xa) 16:15:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{{}}]}) [ 771.203222][ T8975] R13: 00000000004cb6f0 R14: 00000000004d6418 R15: 0000000000000005 16:15:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x28600, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0xc2, "ef2fda1ee7e4a0f947fff5355dc63457e1d5dcba9470d0a54f9700fbcec81c1c5e2778b977923a4d07c29dd8d6f699320ae74a53c1c56e51616f918cb15b97e9742c49cdf4af2eb0611136a2cf8858c613d2f18b7d6c697cf3cc793ddb3f192e1d8458d621678b0a101ad56dc5649d451f5666bd96eaae9de7c56af7d671221b9bd66a8e1eb66f755544af586e0f618cf6342a44593cb6f18b9d311155ada8b93424d55115542e6c5c409dc02cb6cb8df23024455d30ec6ab0ffe04c354fccde893e"}, &(0x7f0000000040)=0xca) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r2, 0x80000001}, 0x8) 16:15:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x6c00000000000000}}, 0xa) 16:15:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00\x00\xfd\xfd\xff\xff\x00', {0x2, 0x0, @remote}}) 16:15:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) 16:15:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{{}}]}) 16:15:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8902, &(0x7f0000000040)={0x0, 0x0}) 16:15:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x83, 0x0) recvfrom$rose(r1, &(0x7f0000000400)=""/56, 0x38, 0x2, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x2) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000240)="b680a46b6341fed55d67645a9b32050b97d0bb25c28708447efe14522c039c558342dd391d0aef81412de27aa03e7e42e912b59f9b2d3ad70cf8be108ad1f4", 0x3f}, {&(0x7f0000000280)="1cf8e2415bbed0a5b2c4c7692ddc25a89d896de95af46e44710ee044f748664e610041b463175c8d9ad346d160bb697329b9905f624a93caae192ec4523c216fd63fc5139f87f6d09aaa5c7c32263563c43006dfa10fc16d685cd93937d3c6f2cd155c6ae365a8702f310dd025bc9b50ccfceabfa910da1a894fe3e75472", 0x7e}, {&(0x7f0000000300)="e1767f7e69ccdac2987a06e63c1fa05b08fc3333f93e1923e927d2479f597fa899", 0x21}], 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000200)={0xff, @remote, 0x4e20, 0x4, 'wrr\x00', 0x0, 0x0, 0x42}, 0x2c) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000000c0)=0xce53, 0x8) recvfrom(r2, &(0x7f0000000440)=""/90, 0x5a, 0x60, &(0x7f00000004c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}, 0x8000}}, 0x80) openat(r2, &(0x7f0000000380)='./file0\x00', 0x8000, 0x14) 16:15:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00\x00\x00\x00\x00\x00\xff\xff\xfd', {0x2, 0x0, @remote}}) 16:15:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x7400000000000000}}, 0xa) 16:15:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000100)=0x9, 0x4) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = shmget$private(0x0, 0x1000, 0x102, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r2, 0x0) 16:15:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8903, &(0x7f0000000040)={0x0, 0x0}) 16:15:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x2, 0x0) 16:15:27 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 16:15:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00\x00\x00\xff\xff\xfd\xfd\x00', {0x2, 0x0, @remote}}) 16:15:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f00000000c0)) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x1, 0x0) getuid() setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000280), 0x4) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x0, 0x0, 0x0, 0x3}}, 0xa) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000080)={0x80000000}) socketpair(0x0, 0x7, 0x6, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000180)={0x3, 0x2663558f}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8904, &(0x7f0000000040)={0x0, 0x0}) 16:15:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x7a00000000000000}}, 0xa) 16:15:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5421, 0x0) 16:15:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x400000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) 16:15:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00\x00\x00\xfd\xfd\xff\xff\x00', {0x2, 0x0, @remote}}) 16:15:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8940, &(0x7f0000000040)={0x0, 0x0}) 16:15:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r2) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000140)={0x2}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000280)={0x0, 0x0, {0x7, 0xff, 0x202b, 0x0, 0x7, 0x0, 0x1, 0x3}}) 16:15:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0xffffff7f00000000}}, 0xa) 16:15:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5450, 0x0) 16:15:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:15:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00\x00\x00\x00\x00\x00\x00\xff\xff', {0x2, 0x0, @remote}}) 16:15:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8941, &(0x7f0000000040)={0x0, 0x0}) 16:15:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7fff, 0x80080) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e22, @loopback}, 0x102, 0x0, 0x0, 0x0, 0x3ff, &(0x7f00000000c0)='batadv0\x00', 0x1f, 0x7, 0x100000000}) read$rfkill(r1, &(0x7f0000000180), 0x8) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000500)={0x5, 0x10, 0xfa00, {&(0x7f0000000280), r3, 0x2}}, 0x18) 16:15:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5451, 0x0) 16:15:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x2}}, 0xa) 16:15:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00\x00\x00\x00\xff\xff\xfd\xfd\x00', {0x2, 0x0, @remote}}) 16:15:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x6, 0xdfb, 0x0, 0x8, 0x3, 0xfffffffffffff000, 0x1f}, 0xc) 16:15:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x894c, &(0x7f0000000040)={0x0, 0x0}) 16:15:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{}]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x100000000}}, 0x38, 0xfffffffffffff682, 0x6e, 0x9}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={r2, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0xffffffff, @loopback, 0xcae}, @in6={0xa, 0x4e23, 0x9, @local, 0x200000000000}, @in6={0xa, 0x4e21, 0x27, @mcast1, 0x400}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000300)=0x10) 16:15:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x250000) setsockopt$packet_int(r1, 0x107, 0x1f, &(0x7f0000000040)=0x4b, 0x4) 16:15:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5452, 0x0) 16:15:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00\x00\x00\x00\xfd\xfd\xff\xff\x00', {0x2, 0x0, @remote}}) 16:15:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x3}}, 0xa) 16:15:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8980, &(0x7f0000000040)={0x0, 0x0}) 16:15:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=""/138, &(0x7f0000000280)=""/98}) 16:15:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5460, 0x0) 16:15:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x28000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f00000000c0)={0x3, @bcast, r2}) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000100)={0xfff, 0x570a, 0x4, 0x2d88dfe2, 0x5, 0x5}) 16:15:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x4}}, 0xa) 16:15:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00\x00\x00\x00\x00\x00\x00\x00\xff', {0x2, 0x0, @remote}}) 16:15:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8981, &(0x7f0000000040)={0x0, 0x0}) 16:15:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8901, 0x0) 16:15:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) sendto$rxrpc(r1, &(0x7f0000000080)="056dbd67daa6f30f603170b47cd66c096b71b8c08a5c078eff20cf1f19bb4a7dcc882e6bac12e0a9ce081d7a3d30efc16d77f76bb2a4dda1b66faf376ff8ba8857c459f2ebcff377c125fff5608e5f1f7819d1e3e926233a3456fd2fd96339dbc939c2d2e00d68e4db7f551827fb4127601ced", 0x73, 0x0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x6, @empty, 0xa557}}, 0x24) 16:15:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x5}}, 0xa) 16:15:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00\x00\x00\x00\x00\xff\xff\xfd\xfd', {0x2, 0x0, @remote}}) 16:15:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8982, &(0x7f0000000040)={0x0, 0x0}) 16:15:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r1 = dup(r0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 16:15:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8902, 0x0) 16:15:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lseek(r0, 0x0, 0x1) r1 = dup(r0) memfd_create(&(0x7f0000000080)='security(\x00', 0x2) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 16:15:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x6}}, 0xa) 16:15:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00\x00\x00\x00\x00\xfd\xfd\xff\xff', {0x2, 0x0, @remote}}) 16:15:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8983, &(0x7f0000000040)={0x0, 0x0}) 16:15:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) r3 = add_key(&(0x7f00000002c0)='pkcs7_test\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="07d0a275310e21d88cc8a018e6bdd465a48230c150d1cab5650e1a7a996bf977d495efbec12ce190849ebfcfce9e5eee75684d03b2a67b8745e7da7cce989d4bf524718da58dab30f0418905d0aea6c6f612d2ea46432e6a80c0f058441f7352229e44791c4957c08dd8896d78a97e3145a517c955dfa224d4e95b376aad44701c1833bc4955c6c043e1bfb570a7a429a5d7663228c18cbff192f113e69f125466cac6260d2777df4a856cbad5ca03a71a9c83e3106a6761d17b3eac95dc2c2ce3ff66903aa01e839d8265a333900ad7157da82cc3e302bcec0ea1eb5e8608034c703505ad0498b7d8dcc50c8563235488195de8fd329bb1", 0xf8, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x82000) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r2, 0x9}}, 0x10) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) 16:15:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8903, 0x0) 16:15:29 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x802) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000100)={0xa4, 0x28, &(0x7f0000000280)="fb9cc70d8e325d3cb2c92accb86145c02fb459bfe5ecb9973d352bb57982d7b60ab2d3e72dc3ff745cdc5c235ea1640997a70e223680b7097c1a5121b7eea587922ce46fbaa75b5410a55c98c398132358b1cc46f5aa80ce2fd335051197d7b2bdca1cba5ddbcbaa70e85408b8d08fa56b6a14fc9574263ce93dfef342c67836d8dbdb13b644f055d609b9e8d529b68bf95f5c4056b051fce66b06c249e8fd3d13c96af39baf5c5fb0cdccf42aac968ceb4a9a30e802", {0x3, 0xb73, 0x7b777773, 0x7, 0x9, 0x81, 0x0, 0xbb}}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0xfffffffffffffff8, @mcast2, 0x1}, @in={0x2, 0x4e20, @empty}], 0x2c) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x80, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f00000000c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) setsockopt$sock_void(r3, 0x1, 0x1b, 0x0, 0x0) 16:15:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x89a0, &(0x7f0000000040)={0x0, 0x0}) 16:15:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x7}}, 0xa) 16:15:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8904, 0x0) 16:15:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000800)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0xff, 0x9, 0x2, 0x81}, 0x10) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x8001006, 0x1, 0x2}) sendmmsg$alg(r1, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="320470d41bc80769c368d95b333024942ff55c2820f42da3e26fa3898ec156c4ec05b92d2fe1f36c76686759062115d9f7e47dc7f079b23775eed177378db2996f3720ae32fe5f0446ee1fe391dc625b1f4710faf2293e5616d675f0e5d8bed62945d6c753522f773037ccfbf74d58adf300364e974b6fd9883e40e7888afaacb14f98891238b91588fa9e457b3da0808c9b45e85800b24638c561269ab3ba33c5a269a403e8de6b6fbf0d2efcbded449a68c3", 0xb3}, {&(0x7f00000002c0)="8feaf9d66ef9708aa6e63ea89b6ba67e78af355ff2b88f73259ca720ddf667267b8d1ae73a9ddb058464536fbfaed6464b09607150b081ea680b270c08a5d0b886209c759f4a1f3411ca21bbd8bf8005b43451d3e764103830a581d1635f4a83160b1b69e361a11a0aa163c893a81e4465ba496f1ad37ad04b5b949a", 0x7c}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x168}], 0x1, 0x1) 16:15:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00\x00\x00\x00\x00\x00\xff\xff\xfd', {0x2, 0x0, @remote}}) 16:15:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) setpriority(0x3, r1, 0x100000000) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x48}}, 0xa) 16:15:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x89a1, &(0x7f0000000040)={0x0, 0x0}) 16:15:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8940, 0x0) 16:15:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x240) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='nfs4\x00', 0x0, 0x0) accept$ax25(r1, 0x0, &(0x7f0000000600)) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000000c0)={0x3, @default, r2}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xc01026}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x248, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_LINK={0xe0, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x424675f9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_BEARER={0x140, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2a79}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xff, @mcast1, 0x1000}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @mcast2, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @remote, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8001, @loopback, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) openat$random(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x6a00, 0x0) fadvise64(r0, 0x0, 0x20, 0x0) 16:15:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00\x00\x00\x00\x00\x00\xfd\xfd\xff', {0x2, 0x0, @remote}}) 16:15:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0xfffffffffffffffd}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000040)={0x0, 0x0}) 16:15:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8941, 0x0) 16:15:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x4c}}, 0xa) 16:15:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xffffffffffffffff, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x109000) ioctl$CAPI_INSTALLED(r1, 0x80024322) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$CAPI_SET_FLAGS(r2, 0x80044324, &(0x7f0000000040)=0x1) 16:15:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x88000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) getsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 16:15:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448ca, &(0x7f0000000040)={0x0, 0x0}) 16:15:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x894c, 0x0) 16:15:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00\x00\x00\x00\x00\x00\x00\xff\xff', {0x2, 0x0, @remote}}) 16:15:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x68}}, 0xa) 16:15:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0xffffffffffffffff, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000}, 0x200200008000000}, 0xa) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) 16:15:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, &(0x7f0000000040)={0x0, 0x0}) 16:15:30 executing program 5: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) 16:15:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x6c}}, 0xa) 16:15:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00\x00\x00\x00\x00\x00\x00\xfd\xfd', {0x2, 0x0, @remote}}) 16:15:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8980, 0x0) 16:15:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setregs(0xf, r2, 0x894, &(0x7f00000000c0)="2998ecba2f71db6e5becfb1c25fe9b374fe66c5fc01520f88d2fd68b1ade5b5e39964c304a6de3afa9608e3167f10be3756a0b9f6c71b3cbfc036b649278d4b1012875acfa1fd5fcac9fb43b67957ab1afdf08faa0ccb5e4ee3be7e80ac547716fcf33d6b78f05979e2087348121a07620324fd9a0c5e7537b274b48dd3edaa633e3abbaa4faf188d53041ec356798dd6dce749f0f7cda9bdb8d03fd991d879ffb62053760862cc6") ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cc, &(0x7f0000000040)={0x0, 0x0}) 16:15:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'veth1_to_bridge\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x101, 0xc1, "f38cc52b1bc664a4e81a13c2b2dc0edd74f5e50756a7ebeef0945d1fa450e022bde60f6e73a3b128c6158faa4d08c20e273b6e731018a02ebf43aadfff6c7d7ba33b5eca1dbf75366f92dde124851cd8723c11a71febc37b16a1ffd0353da68a2f5b3ff06a8c04aaf1cf1377a8fcaa0f6d1fa6db81d142e8d5412fb0283ec1f8783f44be47d098c82d039cb9f838300f6b4d78f8fc940f58718160c927f5f51531ae6ac5b2c1002bdbe628c1241d9f204d0e68e907d3719046f130d90366385630"}}) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:15:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x74}}, 0xa) 16:15:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8981, 0x0) 16:15:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:15:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x52002, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{}]}) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000080)) 16:15:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448dd, &(0x7f0000000040)={0x0, 0x0}) 16:15:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00\x00\x00\x00\x00\x00\x00\x00\xff', {0x2, 0x0, @remote}}) 16:15:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8982, 0x0) 16:15:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x7a}}, 0xa) 16:15:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x88, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x2, @empty, 0x80}, @in6={0xa, 0x4e22, 0x7, @local}, @in={0x2, 0x4e20, @rand_addr=0x5}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000300)={r2, 0x80000001, 0x26, "a5f72549e26b2914e7cde6f9ee3303bec7070f632d42b0a101f3c8d84bac19e61e9d51d36017"}, 0x2e) r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) exit_group(0x80000001) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000080)={0x4, 0x6, 0x3}) 16:15:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r1 = dup3(r0, r0, 0x80000) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000000)=0x6) 16:15:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00\x00\x00\x00\x00\x00\x00\x00\xfd', {0x2, 0x0, @remote}}) 16:15:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448e4, &(0x7f0000000040)={0x0, 0x0}) 16:15:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8983, 0x0) 16:15:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x300}}, 0xa) 16:15:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000040)=""/163, &(0x7f0000000200)=0xa3) 16:15:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x40049409, &(0x7f0000000040)={0x0, 0x0}) 16:15:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) socket$bt_cmtp(0x1f, 0x3, 0x5) 16:15:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x500}}, 0xa) 16:15:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x89a0, 0x0) 16:15:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) lookup_dcookie(0x70, &(0x7f0000000540)=""/27, 0x1b) open_by_handle_at(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="d600000008000000bd7eeaf1aac60672baf9be6ee5f5a94dde666a3cf697be3403b5290f65787b2562f6ae27d7d73a83832e20f2efbb1a2a6ec533aa0187dcdeda40766dff638f0f15c43ad6fe5211f1ccbf1e3c52d96097e7bf853fd5e6b1e33098494c306b23f98a032448dfa80d77099b0d7cd33ffb1e138f30d52f151665e140c5cc9e1c9da3513677ec1d6ce8033df548604a503734090ea4e3c51327bc4f824a76ce5ac910282ef1ec5f376f874af7e1083bd83cee0b0c8c89d6a26e0a467fb28664f72aba1491ca72ae2e4f1cc5335069ff393413edb39ee11dfe3a0b"], 0x14000) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffffffffffffb}}}, &(0x7f0000000300)=0x84) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000080)={0x5, 0x8, 0x148, {}, 0x8001, 0x800}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x210000, 0x0) write$nbd(r3, &(0x7f0000000440)={0x67446698, 0x1, 0x1, 0x3, 0x2, "e8c4f5490d483fd9b407039b3a0e7e1b357f20e52adc8a3c6fdb0b3c447ed308bad5f2ae18b366340958c38f7cf351de3cabf317c47548ba7a8639a8420824c30145d0b9cf5171edd61e6d86a7b4bece8cb4b18996cc6b9c52a7b10692a31c643b03f52080f6c99989bf2f967ccd8464a535ea130719594ba8a33bc12592cf923c7657b0bdf34936d094ce510a7dfd9d32b3d3a4f68041c4284ca0c3f3c1200667b9c7fd13d90468eb546a34ec372e5b5c75129b54bf9a63d09bb206d2a26dd8b9587cca76f2a3117f33c7eaa25841c72806615dccb2a99fbd94594f1938816a6055b6c7ab6a28e9d240a6d7bda54c"}, 0xff) lookup_dcookie(0x8e, &(0x7f0000000000)=""/25, 0x19) ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000040)={'rose0\x00', @ifru_hwaddr=@broadcast}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000700)={&(0x7f0000000680)=""/81, 0x100a000, 0x1800, 0x1}, 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r2, @in={{0x2, 0x4e23, @rand_addr=0x3}}, 0x6, 0x7fff, 0x6, 0x0, 0x1}, 0x98) 16:15:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0xfdfdffff, @remote}}) 16:15:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x100c}}, 0x20) syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x101000) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x4, @local, 0x5}, r2}}, 0x30) 16:15:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x4020940d, &(0x7f0000000040)={0x0, 0x0}) 16:15:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x89a1, 0x0) 16:15:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0xfffffdfd, @remote}}) 16:15:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x600}}, 0xa) 16:15:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x115400, 0x0) socket(0x10, 0x1, 0x9) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) readahead(r0, 0x4, 0x6) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0x8) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 16:15:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x0, 0x0}) 16:15:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0xfdfdffff00000000, @remote}}) 16:15:32 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x20000, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)={0x3ff, 0x3af46326, 0x1, 0xff, 0x6, [{0x7f, 0x5, 0x3, 0x0, 0x0, 0x200}, {0x7, 0x101, 0x1000}, {0x5, 0x1, 0x9, 0x0, 0x0, 0x80}, {0x1, 0x7, 0x7, 0x0, 0x0, 0x8}, {0x4, 0x9, 0x7, 0x0, 0x0, 0xa01}, {0x2fcaef06, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x100}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) ioctl$CAPI_CLR_FLAGS(r2, 0x80044325, &(0x7f00000000c0)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0x2, 0x1ff}, 0x1000000000002}, 0xa) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x200, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000100)={0x4, 0x0, [], {0x1, @bt={0x10000, 0x4, 0x1, 0x1, 0x80000000, 0xb00f, 0x2, 0x1f, 0x6, 0x1, 0x8, 0x1, 0x9, 0x401, 0x8, 0x20}}}) pwritev(r2, &(0x7f0000000580)=[{&(0x7f0000000440)="3f2395d7e12ee81f54b04eba1cdb7361cf9bce928c", 0x15}, {&(0x7f0000000480)="0c1d97f214b69b14a97d932868f59b06c556de9b87a69f7eb863dc3145824df1ebd49e7b85a67247954f8f85665d594928034b5a518cd9535ea2628ca892110f4b79c7c296488a8348359015894dc9ec66b9059724c69ea1e7b4cb155e61dadf2f2be0fad5eacbcd0f08455d55c3070bbca7eba71dc29f8e8f77b7855c6b832867456a2d52f2446e3ad79e36c11abc57b597a0748e739f9d8ba5c97ae4d9584f8800236e95f00bdc45f2d9fb4b6b0af1d8fa08e96cb248f40f1367f20e723799a58b3aaebd8397689ab9981d9753880a60536d2ab8e2dc0f01c00d258e4a29b0f2b2793825f1", 0xe6}], 0x2, 0x0) 16:15:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x700}}, 0xa) 16:15:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0x81) 16:15:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, 0x0) 16:15:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000040)={0x0, 0x0}) 16:15:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x4800}}, 0xa) 16:15:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448f0, &(0x7f0000000040)={0x0, 0x0}) 16:15:32 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x1, 0x8000) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x521400) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000200)={r3, 0xfaa3}, &(0x7f0000000240)=0x8) signalfd4(r1, &(0x7f0000000000)={0x2837}, 0x8, 0x80000) 16:15:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x9}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448ca, 0x0) 16:15:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x4c00}}, 0xa) 16:15:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0xc0045878, &(0x7f0000000040)={0x0, 0x0}) 16:15:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) 16:15:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cc, 0x0) 16:15:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 16:15:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x6800}}, 0xa) 16:15:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x6, 0x40) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000000c0)={{0xffffffffffffffff, 0x3, 0x0, 0x3, 0x9}, 0x6, 0x66, 0x503}) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0xc0045878, &(0x7f0000000040)={0x0, 0x0}) 16:15:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448dd, 0x0) 16:15:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x80000003, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket$inet(0x2, 0x804, 0x3) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x81, 0x7495, 0x9, 0x2, 0x8}, &(0x7f00000000c0)=0x98) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0xaa72568, 0xff, 0x5, 0x0, 0x0, 0x3ff, 0x2000, 0x8, 0x200, 0x7ff, 0x100000001, 0x8, 0x80000000, 0x3b2, 0x8, 0x20, 0x7, 0x3, 0x1, 0x6, 0x53d, 0x9, 0x6, 0x23, 0x6, 0x3, 0xffffffffffffeecb, 0x10001, 0x4, 0x1, 0x7, 0x956, 0xec, 0x0, 0x2, 0x1, 0x0, 0x200, 0x0, @perf_config_ext={0x7, 0x4}, 0x6f62, 0x5, 0x40, 0x2, 0x8, 0xb8d1, 0x1ff}, 0xffffffffffffffff, 0xf, r3, 0x2) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r2, 0x100000000, 0x5, 0xffffffffffffff00, 0xfffffffffffffffb, 0xc8c}, 0x14) 16:15:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x6c00}}, 0xa) 16:15:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0}) 16:15:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) sendmsg(r0, &(0x7f0000000880)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x4, 0x4, 0x2, {0xa, 0x4e21, 0x1, @local, 0x5}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="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", 0xfa}, {&(0x7f0000000100)="cab12264c9ec260d27c53bf92785d3f830f9ac58571928f6f766c2d6e70164d3df09b15646b7d2", 0x27}, {&(0x7f0000000140)="02534ae1c4a82c65da79c733f5a107", 0xf}, {&(0x7f0000000180)="bff9fea2115c9ae958e523f7498890ffe011d7865423e0049006f087e332c502d44bc9bfbc", 0x25}, {&(0x7f0000000380)="f280a66d7e9b2af911af3b5d302830f6af26e87a83d007f8b39c7ef881b47c96c71a804750781e9430dd87ede56427dd18eed2f1e3dcc485c00fe5e0dd3c1d19349d6df920b20c60da3c0ac839e2b9d94b0fc8882996ac8eb9945bcde61288c036042b3d625b80273f9e7136ae685bf5cdcd13006a854965c7dbe72256e020d98e2493c748be0a08b18a", 0x8a}], 0x5, &(0x7f00000004c0)=[{0xa8, 0x10e, 0x8001, "40983d1d3d335d88f98e7eedf4233109dbe7be395af5d8e02bdb1e165d8fba0adbd8d61e17b77e60bac690dca5516646f1eb6e38de750ec8004db857df5508275d654319df815271c4db8869be5110bac8601d3e7de0d6f78afeaf8fe91bacc97888b5f7df4fd8989fde6b443a6ea0ffa411e248eeca43ce47ca5cec836b2c052596140296c13a98d6f2cc2d9f786420fc80c30fc55b03"}, {0xb0, 0x113, 0x80000000, "6f0c3f5a7d75474366818d7d6ba5212ed8d3192d58008ae1014dcc632d1b27a9f8935ca4ec1547e1b840409948259e1b25046d36e8c94532ea996a1e9055c5c0d08d697c6de2d6b03db92b4bba1e9be9348cd8d55b2529f0f0bdca4845d9e9c1e1b0c83b144cb4a476246dbb590bbbe78c2347123149caf2622c09ca40eb39b5c44d6fa35f2235cace7eeecd4c5e2878a503dd970e9ee3aec2"}, {0x110, 0x13e, 0x9, "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"}, {0x108, 0x109, 0x1ff, "446a0e0c1e651cf10d5f292b44dc0169fd88f06921457f6b1d8831642f28825cd662bccd20e2ddc880707a01c869660f2ff1ac266a989e6fed61f542a479b5114336736f41c337616821d73e710adb03ad1ddb2b021ec2bae2ffdd533551255d5f668336399fb44257cf5ab00e4b0637250a1a0c92ff1308b8ffebe87c06b755522451d334dc5f4a90ff15dd1dd2eb15fc83d4df669debf525728e085cfab475688d7c842cd802bc05281a86c745cdc3ce755aa25aed116f05a1c9372a2f9e0194f2aa0754e33e22f67972c4e4b5749df1d1c90e86e7bf7f975c4114bd6d38043fe92dc51c22a91d9a179a37909be318deb8"}, {0x18, 0x112, 0x0, "f684"}], 0x388}, 0x40004) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000008c0)={0xbb3d, 0x101, 0x1, 0x4, 0x3f}, 0x14) 16:15:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448e4, 0x0) 16:15:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0xc020660b, &(0x7f0000000040)={0x0, 0x0}) 16:15:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x7400}}, 0xa) 16:15:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x40049409, 0x0) 16:15:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x3df, &(0x7f00000001c0)=[{}]}) 16:15:33 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x50) connect$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) 16:15:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x2, 0x0}) 16:15:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x7a00}}, 0xa) 16:15:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10042000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) 16:15:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x4020940d, 0x0) 16:15:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x220000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x1, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x1010, 0x4, 0x2, 0x5, 0xfff, 0x9, 0xe9, 0x6, 0x1000, 0x4, 0x5, 0x8, 0x3, 0x4, 0x6, 0xa1, 0xffffffffffffffff, 0xffffffff, 0xffff0000000000, 0xde06, 0x0, 0x8, 0x100000000, 0x400, 0x5, 0x8, 0xda8c, 0x2, 0x3, 0x44, 0x0, 0x401, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x5110, 0xaece, 0x9, 0xc, 0x5}, r2, 0xa, r1, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x3, 0x0}) 16:15:33 executing program 5: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x181, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x7) 16:15:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x34000}}, 0xa) 16:15:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x300, 0x0}) 16:15:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:33 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x0, @broadcast}}) 16:15:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, 0x0) 16:15:33 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80101, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000280)=ANY=[@ANYBLOB="045900000000000000000000000000000000000000ff0000000000000000170000000000000000000000000008000000000000000045fef3e740c1675b000000000000000063c7360e00000000000000000000000000000000f1ffffff0000000000000002f30000000000000000000000000000aa4146610000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000"]) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f023c123f3188a070") r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x1, @mcast2, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0xa, &(0x7f0000000200), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000040000000900000000000000000000000000000008000000000000000300000000000000ff0000000000000000100000200000000300000000000000090052feaa4f000000000100000000005aa2b61e000000000e43c2af42b5c39537a7b93a816f53c1ec8c506ecb6003f126a534d8d7da6ddc0f56046834ac338f3cfcbbcb56931eba141dbbb4ffa5a71412e7bc25a3ab2c01dd9761fa4010809c4bcda9419c9e7ef074fae950568fa85294964ca7fae57fe7365b9ddb6523e84b2d27d10cf9c8ce844829d2f97aa20b58df45d6282e9222c6f9f132a590b348fe485e77adf31121f49c"]) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x1, 0x0, 0x7, 0x1, 0x2, "16be04bc056f62085bd61d7aa0fcb9815cdb58e37f34a80c25d791e880cd0ca337fca2d072f4ba426cc6796b01db8d66158681d8d9cdab457c92dcaa66cb35", 0x27}, 0x60) 16:15:33 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e280000000b0a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) r4 = dup(r1) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x0, 0x0, 0xfffffffffffffffd}}, 0xa) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x220000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) fstat(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r5, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3001d8e503eee200001800180529bd7000fedbdf2580109401ff00ff04000e0000080010001f0000000800070000000007e4001600e0000e001000610076626f786e657430000000009bdbec4899dfd442b3396e473d31a09e822ef259e3f3078f490800fd0841463ac2160577204d6a39d6847ac6154d4b2605946d3b7d5018904fbc57ec094aca261cc9cead80a72fb95424bdaa2df90704276f55fd7439dc74a6a7bbff07a1e0f77709c409623d02492ce5b2f8ee6fd0eb67c8c357bcb8dac095424376bb6378deeb4a8580e532e7b967e6f9d692ae386b0627d6eb7d07becb98d93f183794943bbf0b23270734ca323829b67e9f32122870c9ee99f07b7b4c0fc3b9e0ecdb6d8bc2c4ba6a7b482f8c0bcbb90008000100ac14141b08000500e0000001080006008a0f00038128ea1224ead39e70ffcb5443110dd1dc48c1540fad5420c7ac106cd20bb1a4713f1c3e2b9b85a7ca5598e35d7acc8a89956ce0e11d516a4d491fdc12342c48bb9ebea333e2b2cf81fd62b9ebb7e0f642b990e7aac03198007ed66ba29b0ff9fdf2a4d49932f59df4133bdabe2b63255793a4b772ad2b3eee726789607b58d2510287d390b2a73877e848749cbca4e2318b03f6c7cfb333ca290fc4212e727cfbb60b77e6d9212f9587bd26a67415d2dd3b721b07e1a92e8bd7a24bd6803eb41c8050", @ANYRES32=r6], 0x130}}, 0x80) write$smack_current(r4, &(0x7f0000000180)='vboxnet0\x00', 0x9) 16:15:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x3f00, 0x0}) 16:15:33 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x18000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000600)={0x0, 0x80, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x7e34, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x3, @local, 0x81}, @in6={0xa, 0x4e21, 0x3, @ipv4={[], [], @loopback}, 0x4}, @in6={0xa, 0x4e20, 0x1, @mcast2, 0x8208}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000680)={r1, @in={{0x2, 0x4e23, @broadcast}}, 0x40, 0x3, 0x2, 0x200}, 0x98) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000480)={0x8021, 0x10003}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x9}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x40, &(0x7f0000000240)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x1, 0x7, 0x7, 0x80000000, 0x2}, &(0x7f00000003c0)=0x98) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="ca962c0f044a34be25d5aa48c5a19b7f11f68d86363d89e82a01129e2a9c9921481dc5de010add899dedeac0f2f3d2fcfa247cd1f818afe42a00000000000000000000001b5e929fddf1b8b44d63b0da09d973bce3a00026090f562d6d91b889c4fe20f00bb747b926f5e8d66fd90d61006180bf5e22de13945d93662644770e843467f8f8c7afac5978c24de745635c864d6159ebf51909a5bb5232bd2187571179dc6831d35e4191ee67111521dd5500ca425e4f"], &(0x7f0000000440)=0x40) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={r3, 0x8001}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r4, 0x9}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r5, 0x6}, &(0x7f0000000400)=0x8) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000080)=0xf82) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000740)={r2, 0x4}, &(0x7f0000000780)=0x8) 16:15:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x400300}}, 0xa) 16:15:34 executing program 5 (fault-call:5 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, 0x0) 16:15:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x1000000, 0x0}) 16:15:34 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x12081, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:34 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="9c010000", @ANYRES16=r2, @ANYBLOB="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"], 0x19c}}, 0x10) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x10000, 0x400000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x7, 0x2}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000300)={0x6083, 0x4, 0x7, 0x7, r3}, &(0x7f0000000340)=0x10) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) [ 777.959148][ T9839] FAULT_INJECTION: forcing a failure. [ 777.959148][ T9839] name failslab, interval 1, probability 0, space 0, times 0 [ 778.019853][ T9839] CPU: 1 PID: 9839 Comm: syz-executor.5 Not tainted 5.1.0-rc2-next-20190327 #12 [ 778.029360][ T9839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.040099][ T9839] Call Trace: [ 778.043610][ T9839] dump_stack+0x172/0x1f0 [ 778.048321][ T9839] should_fail.cold+0xa/0x15 [ 778.052986][ T9839] ? lock_acquire+0x16f/0x3f0 [ 778.057945][ T9839] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 778.064326][ T9839] ? find_held_lock+0x35/0x130 [ 778.069457][ T9839] ? hci_mgmt_chan_find+0xa2/0xd0 [ 778.074942][ T9839] __should_failslab+0x121/0x190 [ 778.080479][ T9839] should_failslab+0x9/0x14 [ 778.085145][ T9839] kmem_cache_alloc_node+0x56/0x710 [ 778.090403][ T9839] ? mutex_trylock+0x1e0/0x1e0 [ 778.095617][ T9839] __alloc_skb+0xd5/0x5e0 [ 778.100112][ T9839] ? skb_trim+0x190/0x190 [ 778.104745][ T9839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 778.111320][ T9839] ? security_capable+0x9b/0xd0 [ 778.116248][ T9839] create_monitor_ctrl_close+0xcb/0x480 [ 778.121840][ T9839] hci_sock_bind+0xbeb/0x1120 [ 778.126653][ T9839] ? hci_sock_ioctl+0x830/0x830 [ 778.131550][ T9839] ? apparmor_socket_bind+0xb6/0x160 [ 778.137274][ T9839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 778.143728][ T9839] ? security_socket_bind+0x93/0xc0 [ 778.149256][ T9839] __sys_bind+0x23f/0x290 [ 778.153650][ T9839] ? __ia32_sys_socketpair+0xf0/0xf0 [ 778.159156][ T9839] ? fput+0x1b/0x20 [ 778.163449][ T9839] ? ksys_write+0x166/0x1f0 16:15:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, 0x0) 16:15:34 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000680)={0x1bacf914c1bb344, &(0x7f00000005c0)=[{}]}) accept4(r0, 0x0, &(0x7f0000000100), 0x800) getsockopt(r0, 0x4, 0x1f, &(0x7f0000000080)=""/63, &(0x7f00000000c0)=0x3f) syz_init_net_socket$x25(0x9, 0x5, 0x0) 16:15:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x2000000, 0x0}) 16:15:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x1000000}}, 0xa) [ 778.168403][ T9839] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 778.174128][ T9839] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 778.179821][ T9839] ? do_syscall_64+0x26/0x610 [ 778.184879][ T9839] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 778.191412][ T9839] ? do_syscall_64+0x26/0x610 [ 778.191435][ T9839] __x64_sys_bind+0x73/0xb0 [ 778.191451][ T9839] do_syscall_64+0x103/0x610 [ 778.191471][ T9839] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 778.191483][ T9839] RIP: 0033:0x458209 16:15:34 executing program 5 (fault-call:5 fault-nth:1): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) [ 778.191498][ T9839] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 778.191515][ T9839] RSP: 002b:00007f0919d66c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 778.201352][ T9839] RAX: ffffffffffffffda RBX: 00007f0919d66c90 RCX: 0000000000458209 [ 778.201361][ T9839] RDX: 000000000000000a RSI: 0000000020000000 RDI: 0000000000000005 [ 778.201369][ T9839] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 778.201376][ T9839] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0919d676d4 [ 778.201383][ T9839] R13: 00000000004be1b0 R14: 00000000004ce6c0 R15: 0000000000000006 16:15:34 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x2000, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f00000000c0)={0x3}) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x3000000, 0x0}) 16:15:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x2000000}}, 0xa) [ 778.359827][ T9871] FAULT_INJECTION: forcing a failure. [ 778.359827][ T9871] name failslab, interval 1, probability 0, space 0, times 0 16:15:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448f0, 0x0) [ 778.412033][ T9871] CPU: 0 PID: 9871 Comm: syz-executor.5 Not tainted 5.1.0-rc2-next-20190327 #12 [ 778.421833][ T9871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.432137][ T9871] Call Trace: [ 778.435699][ T9871] dump_stack+0x172/0x1f0 [ 778.440435][ T9871] should_fail.cold+0xa/0x15 [ 778.445337][ T9871] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 778.451449][ T9871] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 16:15:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e22, @loopback}, 0x81, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000000)='bridge_slave_0\x00', 0x400, 0x1, 0x3}) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x0, 0x200980) r2 = fcntl$dupfd(r0, 0x406, r0) write$vnet(r1, &(0x7f0000000300)={0x1, {&(0x7f0000000280)=""/10, 0xa, &(0x7f00000002c0)=""/5, 0x1, 0x1}}, 0x68) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0xad, 0x4, 0x4, "34843246b2c5934a51b9636ffbaec858", "67a7ff9356c9acb708c1eeb076b5bff7639793835ff34287e7408aeef1ddb93cc3bf6bf67eafafb9c2ae603e0bce4bff89d2bfca7fbc9da5721f93469a899d1c5a650e0e69b6383aa58626327a3bac578f4f6024703aaeaa04e5fdd2c53a9c6ba3b97d54349136aeba0443cff546512a9fc6ae3f1f47110322fda132cecea7999e0f848534a9a9d17176b10f5bf10b3e9896c76bb21753cf"}, 0xad, 0x3) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x9) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) [ 778.457979][ T9871] ? should_fail+0x1de/0x852 [ 778.462791][ T9871] __should_failslab+0x121/0x190 [ 778.468350][ T9871] should_failslab+0x9/0x14 [ 778.473308][ T9871] kmem_cache_alloc_node_trace+0x5a/0x720 [ 778.479175][ T9871] __kmalloc_node_track_caller+0x3d/0x70 [ 778.485379][ T9871] __kmalloc_reserve.isra.0+0x40/0xf0 [ 778.490883][ T9871] __alloc_skb+0x10b/0x5e0 [ 778.495604][ T9871] ? skb_trim+0x190/0x190 [ 778.499968][ T9871] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 778.499986][ T9871] ? security_capable+0x9b/0xd0 [ 778.500010][ T9871] create_monitor_ctrl_close+0xcb/0x480 [ 778.500029][ T9871] hci_sock_bind+0xbeb/0x1120 [ 778.500047][ T9871] ? hci_sock_ioctl+0x830/0x830 [ 778.500110][ T9871] ? apparmor_socket_bind+0xb6/0x160 [ 778.500125][ T9871] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 778.500138][ T9871] ? security_socket_bind+0x93/0xc0 [ 778.500158][ T9871] __sys_bind+0x23f/0x290 [ 778.500173][ T9871] ? __ia32_sys_socketpair+0xf0/0xf0 [ 778.500190][ T9871] ? fput+0x1b/0x20 [ 778.500205][ T9871] ? ksys_write+0x166/0x1f0 [ 778.500224][ T9871] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 778.500238][ T9871] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 778.500263][ T9871] ? do_syscall_64+0x26/0x610 [ 778.517831][ T9871] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 778.517847][ T9871] ? do_syscall_64+0x26/0x610 [ 778.517869][ T9871] __x64_sys_bind+0x73/0xb0 [ 778.517888][ T9871] do_syscall_64+0x103/0x610 [ 778.517908][ T9871] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 778.517920][ T9871] RIP: 0033:0x458209 [ 778.517935][ T9871] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 778.517942][ T9871] RSP: 002b:00007f0919d66c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 778.517956][ T9871] RAX: ffffffffffffffda RBX: 00007f0919d66c90 RCX: 0000000000458209 [ 778.517963][ T9871] RDX: 000000000000000a RSI: 0000000020000000 RDI: 0000000000000005 16:15:34 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000080)={0x3, 0x62, "0184444dd5578f2aa14cdfb4cd36f5fd87f580cde853acffd6ac4ef7d86ea22e3f800458dd0fe1228fbf2550537a6a91856ec291f7d1bdd55a6f2ef6c602aa3c8d758cbe8a6643a54bb4a14e8460d491c0e2a148480033e0946892b22c7902f48877"}) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) 16:15:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x3000000}}, 0xa) 16:15:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x3f000000, 0x0}) 16:15:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0xc0045878, 0x0) [ 778.517971][ T9871] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 778.517979][ T9871] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0919d676d4 [ 778.517986][ T9871] R13: 00000000004be1b0 R14: 00000000004ce6c0 R15: 0000000000000006 16:15:34 executing program 5 (fault-call:5 fault-nth:2): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0xc0045878, 0x0) 16:15:34 executing program 1: r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) getpeername(r0, &(0x7f0000000080)=@rc, &(0x7f0000000100)=0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x100000000000000, 0x0}) 16:15:35 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x4000000}}, 0xa) 16:15:35 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x11b) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f00000003c0)) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x81) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000100)={0xed85}) [ 778.849559][ T9906] FAULT_INJECTION: forcing a failure. [ 778.849559][ T9906] name failslab, interval 1, probability 0, space 0, times 0 16:15:35 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0xc0189436, 0x0) 16:15:35 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x200000000000000, 0x0}) [ 778.968173][ T9906] CPU: 1 PID: 9906 Comm: syz-executor.5 Not tainted 5.1.0-rc2-next-20190327 #12 [ 778.977436][ T9906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.987810][ T9906] Call Trace: [ 778.991604][ T9906] dump_stack+0x172/0x1f0 [ 778.995986][ T9906] should_fail.cold+0xa/0x15 [ 779.001425][ T9906] ? kmem_cache_free+0x86/0x260 [ 779.006655][ T9906] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 779.012765][ T9906] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 779.019411][ T9906] ? debug_check_no_obj_freed+0x211/0x444 [ 779.025670][ T9906] __should_failslab+0x121/0x190 [ 779.031147][ T9906] should_failslab+0x9/0x14 [ 779.035970][ T9906] kmem_cache_alloc_node+0x56/0x710 [ 779.041449][ T9906] ? lock_downgrade+0x880/0x880 [ 779.046590][ T9906] __alloc_skb+0xd5/0x5e0 [ 779.050976][ T9906] ? skb_trim+0x190/0x190 [ 779.055695][ T9906] create_monitor_ctrl_open+0x183/0x810 [ 779.061586][ T9906] ? rcu_read_lock_sched_held+0x110/0x130 [ 779.067756][ T9906] ? send_monitor_note+0x460/0x460 [ 779.073148][ T9906] ? kfree_skbmem+0xca/0x150 [ 779.078095][ T9906] ? kfree_skb+0xf5/0x390 [ 779.082799][ T9906] hci_sock_bind+0xc1e/0x1120 [ 779.087807][ T9906] ? hci_sock_ioctl+0x830/0x830 [ 779.092869][ T9906] ? apparmor_socket_bind+0xb6/0x160 [ 779.098392][ T9906] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 779.105218][ T9906] ? security_socket_bind+0x93/0xc0 [ 779.110896][ T9906] __sys_bind+0x23f/0x290 [ 779.115418][ T9906] ? __ia32_sys_socketpair+0xf0/0xf0 [ 779.121207][ T9906] ? fput+0x1b/0x20 [ 779.125240][ T9906] ? ksys_write+0x166/0x1f0 [ 779.129802][ T9906] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 779.135664][ T9906] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 779.141179][ T9906] ? do_syscall_64+0x26/0x610 [ 779.145988][ T9906] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 779.152137][ T9906] ? do_syscall_64+0x26/0x610 [ 779.156985][ T9906] __x64_sys_bind+0x73/0xb0 [ 779.161536][ T9906] do_syscall_64+0x103/0x610 [ 779.166186][ T9906] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 779.172522][ T9906] RIP: 0033:0x458209 [ 779.176898][ T9906] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 779.197521][ T9906] RSP: 002b:00007f0919d66c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 779.206376][ T9906] RAX: ffffffffffffffda RBX: 00007f0919d66c90 RCX: 0000000000458209 16:15:35 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x300000000000000, 0x0}) 16:15:35 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x7fff, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000140)=0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x5, 0x19, 0x1}, &(0x7f00000001c0)=0x10) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x2) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r2, 0x8, 0x1, 0x6}, &(0x7f0000000240)=0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000280)="80091580433845e1163cbd3ca8072c3d94c85dde5fbf4a0c6bac2dd6", &(0x7f00000002c0)=""/40}, 0x18) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) bind(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @multicast2}, 0x2, 0x1, 0x0, 0x1}}, 0x80) 16:15:35 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0x4, 0x0, 0x7, 0x8, 0x3d4, 0x71}, 0x38000000}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) setxattr$security_smack_entry(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.SMACK64IPIN\x00', &(0x7f0000000140)='ppp1\\vboxnet1*md5sumuserGPL\x00', 0x1c, 0x3) [ 779.215223][ T9906] RDX: 000000000000000a RSI: 0000000020000000 RDI: 0000000000000005 [ 779.223776][ T9906] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 779.231803][ T9906] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0919d676d4 [ 779.240193][ T9906] R13: 00000000004be1b0 R14: 00000000004ce6c0 R15: 0000000000000006 16:15:35 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x3f00000000000000, 0x0}) 16:15:35 executing program 5 (fault-call:5 fault-nth:3): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:35 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x200, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001540)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000001640)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001680)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@empty}}, &(0x7f0000001780)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000017c0)={'rose0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001800)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000001840)={@local, 0x0}, &(0x7f0000001880)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000001a40)={'vcan0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000001a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001ac0)=0x14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001d40)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000001e40)=0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000004340)={@rand_addr, 0x0}, &(0x7f0000004380)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000043c0)={'vcan0\x00', 0x0}) accept4$packet(0xffffffffffffff9c, &(0x7f0000004400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004440)=0x14, 0x800) accept$packet(0xffffffffffffff9c, &(0x7f0000004840)={0x11, 0x0, 0x0}, &(0x7f0000004880)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000004f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004f40)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000004f80)={@mcast2, 0x0}, &(0x7f0000004fc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000005100)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000005200)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000005340)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000005440)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000005480)={0x0, @empty, @initdev}, &(0x7f00000054c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005500)={{{@in6=@loopback, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000005600)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000006980)={@ipv4={[], [], @dev}, 0x0}, &(0x7f00000069c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000006a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006ac0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000006b00)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000006c00)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000006c40)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000006d40)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000006d80)={@remote, 0x0}, &(0x7f0000006dc0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000006e00)={'bridge0\x00', 0x0}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000006e40)={0x11, 0x0, 0x0}, &(0x7f0000006e80)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000007280)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000007380)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000007580)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@initdev}}, &(0x7f0000007680)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f00000076c0)={@dev, @broadcast, 0x0}, &(0x7f0000007700)=0xc) accept4$packet(0xffffffffffffff9c, &(0x7f0000007740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000007780)=0x14, 0x80800) getpeername(r0, &(0x7f0000007800)=@can={0x1d, 0x0}, &(0x7f0000007880)=0x80) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000007d80)={0x0, @local, @local}, &(0x7f0000007dc0)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f00000085c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000008600)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000008700)={'yam0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000008740)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000008840)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000008880)={@loopback, @multicast1, 0x0}, &(0x7f00000088c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000009280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000009240)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\t\x00\x00', @ANYRES16=r2, @ANYBLOB="0001ff7f0000fddbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="240102003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r4, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000389be1b137755b5937055438ea52af0ed000000080004000000000008000600", @ANYRES32=r5, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r6, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400380a000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000600000008000100", @ANYRES32=r7, @ANYBLOB="f400020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040008000000080007000000000040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400060000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="4400020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040009000000080007000000000008000100", @ANYRES32=r10, @ANYBLOB="8000020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000180000008000600", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="3c01020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e0000000800040001ef000008000600", @ANYRES32=r14, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400a000000008000600", @ANYRES32=r16, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004003800000008000600", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="3800020034000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000400040008000100", @ANYRES32=r20, @ANYBLOB="3c0002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r22, @ANYBLOB="e80102003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r23, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400a700000008000600", @ANYRES32=r24, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400ff7f000008000600", @ANYRES32=r25, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400c53a00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r26, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=r27, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000008000008000600", @ANYRES32=r28, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000000008008000100", @ANYRES32=r29, @ANYBLOB="300102003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r30, @ANYBLOB="3c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c0004000100036c0900000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400a40f000008000600", @ANYRES32=r31, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400636f000008000600", @ANYRES32=r32, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400ffff000008000100", @ANYRES32=r33, @ANYBLOB="3001020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r34, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000200000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400d706000008000600", @ANYRES32=r35, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r36, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r37], 0x938}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r38 = dup(r0) bind$bt_rfcomm(r38, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r38, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x105100, 0x0) write$P9_RATTACH(r1, &(0x7f0000000100)={0x14, 0x69, 0x2, {0x1, 0x0, 0x1}}, 0x14) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x101, 0x101100) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) 16:15:35 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0xc020660b, 0x0) 16:15:35 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x5000000}}, 0xa) 16:15:35 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) [ 779.561117][ T9969] FAULT_INJECTION: forcing a failure. [ 779.561117][ T9969] name failslab, interval 1, probability 0, space 0, times 0 [ 779.611144][ T9969] CPU: 1 PID: 9969 Comm: syz-executor.5 Not tainted 5.1.0-rc2-next-20190327 #12 [ 779.620695][ T9969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 779.631705][ T9969] Call Trace: [ 779.631734][ T9969] dump_stack+0x172/0x1f0 [ 779.631759][ T9969] should_fail.cold+0xa/0x15 [ 779.631788][ T9969] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 779.639851][ T9969] ? save_stack+0xa9/0xd0 [ 779.639870][ T9969] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 779.639883][ T9969] ? should_fail+0x1de/0x852 [ 779.639899][ T9969] __should_failslab+0x121/0x190 [ 779.639916][ T9969] should_failslab+0x9/0x14 [ 779.639940][ T9969] kmem_cache_alloc_node_trace+0x5a/0x720 [ 779.685228][ T9969] __kmalloc_node_track_caller+0x3d/0x70 [ 779.691661][ T9969] __kmalloc_reserve.isra.0+0x40/0xf0 [ 779.697712][ T9969] __alloc_skb+0x10b/0x5e0 [ 779.702319][ T9969] ? skb_trim+0x190/0x190 [ 779.706815][ T9969] create_monitor_ctrl_open+0x183/0x810 [ 779.713510][ T9969] ? rcu_read_lock_sched_held+0x110/0x130 [ 779.719820][ T9969] ? send_monitor_note+0x460/0x460 [ 779.725229][ T9969] ? kfree_skbmem+0xca/0x150 [ 779.730103][ T9969] ? kfree_skb+0xf5/0x390 [ 779.734651][ T9969] hci_sock_bind+0xc1e/0x1120 [ 779.739961][ T9969] ? hci_sock_ioctl+0x830/0x830 [ 779.745337][ T9969] ? apparmor_socket_bind+0xb6/0x160 [ 779.750663][ T9969] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 779.757657][ T9969] ? security_socket_bind+0x93/0xc0 [ 779.763584][ T9969] __sys_bind+0x23f/0x290 [ 779.768170][ T9969] ? __ia32_sys_socketpair+0xf0/0xf0 [ 779.768190][ T9969] ? fput+0x1b/0x20 [ 779.768213][ T9969] ? ksys_write+0x166/0x1f0 [ 779.777550][ T9969] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 779.788756][ T9969] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 779.794539][ T9969] ? do_syscall_64+0x26/0x610 [ 779.799457][ T9969] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 779.806310][ T9969] ? do_syscall_64+0x26/0x610 [ 779.811493][ T9969] __x64_sys_bind+0x73/0xb0 [ 779.816743][ T9969] do_syscall_64+0x103/0x610 [ 779.821551][ T9969] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 779.827694][ T9969] RIP: 0033:0x458209 [ 779.831918][ T9969] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 779.853456][ T9969] RSP: 002b:00007f0919d66c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 16:15:35 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) getsockname(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000080)=0x4f) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000580)={0xe, 0x5, {0x57, 0x6, 0x8, {0x5, 0x800}, {0x3b, 0x3ff}, @const={0x38aa, {0x3, 0x4, 0xd53d, 0x1}}}, {0x55, 0x1427, 0x80000001, {0x4, 0x80000000}, {0xd2a, 0x7}, @ramp={0x2, 0x9, {0x2, 0x4, 0x3, 0x70}}}}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000680)={0xd, 0x6, {0x57, 0x80000001, 0x5, {0x6, 0xffffffffe48f7c0f}, {0x20, 0x722a6cce}, @ramp={0x4, 0x8, {0x1000, 0x5, 0x7, 0x200}}}, {0x57, 0xffffffffffffffae, 0x8001, {0x1, 0xd2ea}, {0x2, 0x20}, @ramp={0x100000000, 0x34, {0x7, 0x101, 0x3c}}}}) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc4b497d67692ba65}, 0xc, &(0x7f00000001c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="60000000e67c16a14582714555", @ANYRES16=r3, @ANYBLOB="000328bd7000ffdbdf250f000000440002000800050005000000080008000300000008000900040000000800050002000000080005000800000008000b000a0000000800040008000000080002004e2300000800050051000000956dede445a8916247629ba08ddc15f5c8b7e74924178d3a7865db135ec62545acf5f2eddfc7e6f29feef667a328c94b6ff8282345375b"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x11) r4 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000700)="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", 0x1000, 0x0) r5 = request_key(&(0x7f0000001740)='cifs.spnego\x00', &(0x7f0000001780)={'syz', 0x2}, &(0x7f00000017c0)='IPVS\x00', 0xfffffffffffffffd) keyctl$instantiate(0xc, r4, &(0x7f0000001700)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'IPVS\x00', 0x20, 0x3}, 0x2c, r5) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r3, 0x820, 0x7, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x4000040) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000180)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000380)=0x204e) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000480)=""/247) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @loopback, 0xd712}}, 0x24) 16:15:35 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:35 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x181400, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000000c0)={{0x7f, @local, 0x4e20, 0x0, 'lc\x00', 0x21, 0x10001, 0x7e}, {@loopback, 0x4e21, 0x2000, 0x4, 0x81, 0x9}}, 0x44) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) getsockname$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x1e7ce10b83b02505) 16:15:35 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:36 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000000)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) 16:15:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x10000, 0x2000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x160, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9fb3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa97}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000001}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x475}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x40}, 0x8040) [ 779.862751][ T9969] RAX: ffffffffffffffda RBX: 00007f0919d66c90 RCX: 0000000000458209 [ 779.873290][ T9969] RDX: 000000000000000a RSI: 0000000020000000 RDI: 0000000000000005 [ 779.882817][ T9969] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 779.892152][ T9969] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0919d676d4 [ 779.901948][ T9969] R13: 00000000004be1b0 R14: 00000000004ce6c0 R15: 0000000000000006 16:15:36 executing program 5 (fault-call:5 fault-nth:4): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:36 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000180)="5a7736f43ffadfbead252ea707be") r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8a009000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0xe4, r2, 0x920, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x44823802}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5bb2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000051}, 0x4000) 16:15:36 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x6000000}}, 0xa) 16:15:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:36 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8100, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'lapb0\x00', {0x2, 0x4e24, @local}}) 16:15:36 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x7000000}}, 0xa) 16:15:36 executing program 3: r0 = accept4$ax25(0xffffffffffffff9c, &(0x7f0000000280)={{0x3, @netrom}, [@null, @remote, @null, @rose, @remote, @bcast, @netrom, @bcast]}, &(0x7f0000000300)=0x48, 0x800) recvfrom(r0, &(0x7f0000000a00)=""/220, 0xdc, 0x0, &(0x7f0000000b00)=@nl=@unspec, 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000180)={0x8, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}]}) bind$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, {0x4, 0x7, 0x9, 0x8, 0x4180, 0xffff}, 0x2}, 0xa) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB="ec000000006b240df1a2c0364b37eec42703a5b5b1b2078dc544af1b88b32ba12e049244784735390c4e7588e1ce7228f29f6d1d266b2d8c524d8eb9fcf010e6a55d4cb083857d868a6867794f87d09dd302e0f648be1eed05af93136e90d8da06e478c271135423d915d118554cfa4e7ecaf97c8588934b490ea4ffc3b58471ed64fe847de98a33ab7b73cabc7bf68afa000a2ca1ee1991bed29f7d9d29552fee1d74bc850ddf04cc11a13d65111297cc275affe03317e5fb2582735a722db8c1f5781f3a94839e66c4a5b18a182c4100d950ed4c2433d8e7476b4bf1669ecefd8448ec00000000000000000000000000000000"], &(0x7f0000000140)=0xf4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000380)={r3, @in={{0x2, 0x4e24, @broadcast}}, 0x8, 0x10000, 0x3, 0x48, 0x20}, 0x98) getsockopt$rose(r2, 0x104, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 16:15:36 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x4, @remote}}) 16:15:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) [ 780.190756][T10019] QAT: Invalid ioctl [ 780.220458][T10019] QAT: Invalid ioctl 16:15:36 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0xffffffffffffffff, 0x1ff, 0x0, 0x0, 0x800000000000004}}, 0xb8c3c2eb0db427b) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:36 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x48000000}}, 0xa) 16:15:36 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x440000, 0x0) ioctl$CAPI_INSTALLED(r1, 0x80024322) r2 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) 16:15:36 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x2, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:36 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x6, 0x80) getsockopt$ax25_int(r2, 0x101, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0xfffffffffffffd3d) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) r3 = accept(r0, 0x0, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x6, 0x404000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000180)={r4, 0x9}, 0x8) 16:15:36 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x202}}, 0xa) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x10880, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0xfe, 0x3, 0x2af, "735dd2e000439102138a8fa27f07e9e5", "7a34ef70869e22e4a1695e254c945a2c620af83c00ec7dca812bed86341f5ad05b20e792e321297a00e9f652ed42fa9e2f5ac26c78ba09bd67ae115047c7c74ce92625876aa62cb163b375f473480ad6de3284574061c66f83960b1eb1ae3cb4dad0c6a9ec6613638b15b2b28584993cd4dcc21472043fd903f116811fb4b8512ee2442e239c0f345a93e8efbdefa11c207287c3d019e093b46e99abeec8eb1f1ad4f4b90831fb262990229cb39f22b62ea59988992cf7cb8ee54182c8d9e2713c14d3dc0e89e01c347af0df38fed3cd49d1e7f87ce7c12816334a4c736b0834cc0bab7595f4486133"}, 0xfe, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7ff, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000200)={'nat\x00'}, &(0x7f0000000440)=0x78) ioctl$KDENABIO(r2, 0x4b36) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{}]}) 16:15:36 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x4c000000}}, 0xa) 16:15:36 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3c3, 0x101000) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x1efb, 0x4) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x2000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0xfffffffffffffffc}], 0x1) r3 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448cb, 0x0) 16:15:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:36 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0xa, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:36 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x8000000000001, @remote}}) 16:15:36 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{0x7e, 0x2, 0x4, 0x6}, {0x4, 0x39c, 0x7, 0x2}, {0xdb87, 0x20, 0x200, 0x9}, {0x8001, 0x1, 0xffffffffffff5407, 0x3}, {0x0, 0x3, 0x3, 0x627}, {0x1ff, 0x8, 0x840000000000, 0xff}, {0x20, 0x5, 0x400, 0x1000000}, {0x3, 0x80, 0x80000001, 0xe769}, {0x0, 0x10000, 0x401, 0x4}, {0x1, 0x9, 0x6, 0x400}]}) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) 16:15:36 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x68000000}}, 0xa) 16:15:37 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) poll(&(0x7f00000000c0)=[{r1, 0x40}, {r0, 0x4003}, {r1, 0x8008}, {r0, 0x41}, {r0, 0x150}, {r0, 0xfffffffffffffffc}], 0x330, 0x4000000000004) 16:15:37 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) 16:15:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:37 executing program 1: ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7068, 0x4000) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'bond_slave_1\x00', {0x2, 0x4e20, @broadcast}}) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000080)) r1 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="a3239b27dc3d5fa3f2f214f1faa22e9bb6cfa32a1056d98b8fdd30183452d3ff69651016493dac101b4b7e5c85d372861d2c44d4961c92a28f3077cf9a1b126af17542929387722630c4ecfc3a1cfd3496a4b72394a85ac70ae3188884eb9bf14d85b8b497ae9769e6685b27c071213f3bbb0b061cd28ebf046a6f752b05466b01cedd883054513fb23aff068c", 0x8d, 0xfffffffffffffffd) keyctl$get_security(0x11, r1, &(0x7f0000000240)=""/24, 0x18) 16:15:37 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x6c000000}}, 0xa) 16:15:37 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3d68aa13e34b0e599bcc45679c45e8f54c62548db52992a7ec263ecdfcef798f47ad9bed9ad8828e8d62cea033999d1ec09d7f5ba78e78a6aba760669d32c7968d497a0cd4d2bafa06ad459c27f2abdaa3cba6a1396f66d285dafdd3118d0859702e1fddc7cd514689ab354cda725801ac05b30c3887b9be15abeb37e6a87de0aa3607a3a2e14c7d9b81c446c39596", 0x8f, 0x0) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) add_key(&(0x7f0000000300)='blacklist\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380), 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = request_key(&(0x7f0000000580)='id_le\xaf\x1b\tjEuB\xa8\xaf}\xfb\xd6\xbeyh\xd5t\x87\xd3\x86\x00\xbe\x1e\xd6\xb1)\xf7\xec\x7f&\xba\x01\x8b\xc4\x00\x00\x00\x00\x00\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f00000004c0)='\x00', r3) keyctl$search(0xa, r2, &(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, r4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) 16:15:37 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x4}}, 0xa) 16:15:37 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f00000000c0)={0x0, 0x1ff, 0x301e}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'bridge0\x00', {0x2, 0xfffffffffffffffd, @multicast1}}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_team\x00', 0x1}, 0x18) ioctl$KDDELIO(r1, 0x4b35, 0x7) 16:15:37 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x74000000}}, 0xa) 16:15:37 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) getpeername(r1, &(0x7f00000000c0)=@ethernet={0x0, @link_local}, &(0x7f0000000140)=0x80) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)="df3d7ea0d111cc7bc7354419bb2fa50f82ee55b10df262fe83e195b7e74ff42c8b408798ccacfb73a22a49eb0897", {0x1f, 0x6, 0x38717b73, 0x7, 0x9, 0x2, 0xb, 0x1000}}) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x0) 16:15:37 executing program 3: r0 = dup(0xffffffffffffffff) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:37 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3, 0x1000000}}, 0xa) 16:15:37 executing program 1: ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) getpid() 16:15:37 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x7a000000}}, 0xa) 16:15:37 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x301100, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x0, @empty, 'b\bnd_sla\x00'}}, 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xb) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfb}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x44}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7ff, 0x400000) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000180)={0x0, 0x4, 0xffffffffffffffff}) r4 = dup(r2) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) eventfd2(0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = gettid() perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) tkill(r5, 0x1000000000016) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x400448cb, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) 16:15:37 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x2480, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') accept$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={0x0, 0x400}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000480)={r3, 0x7}, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000680)=0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000600)={@remote, 0x0}, &(0x7f0000000640)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000980)=0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000003e00)={@mcast1, 0x0}, &(0x7f0000003e40)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000005100)={0x11, 0x0, 0x0}, &(0x7f0000005140)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000005180)={'bridge0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000051c0)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f00000052c0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000005300)={'hwsim0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000005340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000005380)=0x14, 0x80000) getpeername$packet(0xffffffffffffff9c, &(0x7f00000053c0)={0x11, 0x0, 0x0}, &(0x7f0000005400)=0x14) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000005440)={0x0, @local, @empty}, &(0x7f0000005480)=0xc) r19 = accept4$packet(0xffffffffffffff9c, &(0x7f00000054c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000005500)=0x14, 0x80000) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000005b00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005ac0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="64050000", @ANYRES16=r1, @ANYBLOB="000025bd7000fbdbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="b00102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400c0000000080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000400000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ff07000008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="e400020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400a900000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004007400000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000180000008000100", @ANYRES32=r10, @ANYBLOB="8c0002003c00010024000100757365725f6c696e6b75700000000000000000000000000000000000000400040008000600de51f1b52d284d6e3f98fdcecba87bf15db6576ba59b743692437c0000000000000000000000", @ANYRES32=r11, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r12, @ANYBLOB="b800020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000300000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000100000008000100", @ANYRES32=r14, @ANYBLOB="040102003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r18, @ANYBLOB="4400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000900000008000600", @ANYRES32=r20], 0x564}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r21 = socket$inet_tcp(0x2, 0x1, 0x0) r22 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r21, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20440000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r22, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x40844) ioctl$sock_inet_SIOCSIFDSTADDR(r19, 0x8918, &(0x7f0000000040)={'bond_slave_0\x00', {0x2, 0x0, @remote}}) 16:15:37 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3, 0x100000000000000}}, 0xa) 16:15:37 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0x6aa}, 0xb) write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x2}, 0xb) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000100)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:37 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0xffffff7f}}, 0xa) 16:15:37 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x101, 0x2}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000400), &(0x7f0000000440)=0xb) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'irlan0\x00', 0x0}) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e22, @empty}, {0x307}, 0x62, {0x2, 0x4e23, @local}, 'vlan0\x00'}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @local}, 0x10) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x100, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f00000000c0)={0x5, "6facfb96a7b979ed02316e5d62b50b5ffa348ca5d4b4148c8258b5e020232971", 0x0, 0x1}) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x40030000000000}}, 0xa) 16:15:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3, 0x0, 0x1000000}}, 0xa) 16:15:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) sched_setparam(r2, &(0x7f00000000c0)=0x6d58) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x4, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xc83}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x40000) 16:15:38 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x420000, 0x0) connect$rds(r1, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x100000001}, 0x10) r2 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) 16:15:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000000c0)={r2, 0x3}) 16:15:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x100000000000000}}, 0xa) 16:15:38 executing program 3: ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000080)={0x1, 0xffffffffffffffff}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x800, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) readahead(r0, 0x8, 0x1) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000100)=0x8) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000140)={0x3ff, 0x0, 0x10001, 0x800}) 16:15:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3, 0x0, 0x100000000000000}}, 0xa) 16:15:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ftruncate(r0, 0x8000) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0xffffffffffffff3a, 0x0}) 16:15:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3, 0x0, 0x0, 0x1000000}}, 0xa) 16:15:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='bond_slave_1\x00') ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) 16:15:38 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x0, 0x4000) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x8, 0x4, 0x2, "99523582bbef097ed3a7bf1840d8e167631d3c26036d5aa690150ce462ac6b58", 0x3131354f}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) r3 = add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="829773dad969ce80892e48bf6dd2e4302b7ae958cacb23e277b1134414ec3e6e52824517b5d4f8eebb08d7eadc4fda4d937c8caacc54a50a773d1aa24783d1861a890d3767bfaf992016aaa81c8a69472fefa52d0107428650bfbd07fbc27b67aa3ecbf4905213085ad1a1357600a17c7e0119a96852b8500277d7a0781b2341a6d177239e4c4ee4a1602a60e0d07dfc44fc93fa35a4de678c30690e1775f4188f", 0xa1, 0xfffffffffffffff8) keyctl$setperm(0x5, r3, 0x2) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x100, 0x400000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) 16:15:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000080)={0xfffffffffffff001, {{0x2, 0x4e24, @multicast2}}}, 0x88) 16:15:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x200000000000000}}, 0xa) 16:15:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xe423, 0x101402) faccessat(r1, &(0x7f0000000080)='./file0\x00', 0x1, 0x700) 16:15:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3, 0x0, 0x0, 0x100000000000000}}, 0xa) 16:15:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0xf, 0x0, 0x4}, 0xe6e}}, 0x18) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x100000001) accept4$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x300000000000000}}, 0xa) 16:15:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:39 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x10000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x1f}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@seclabel='seclabel'}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xa2'}}, {@smackfsroot={'smackfsroot'}}, {@smackfsroot={'smackfsroot', 0x3d, 'em1##'}}, {@appraise='appraise'}]}}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) 16:15:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x400000000000000}}, 0xa) 16:15:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0x1, 0x1, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}, 0x1000000}, 0xa) 16:15:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200, 0x0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'batadv0\x00', {0x2, 0x4e24, @loopback}}) 16:15:39 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0xa7, "7c44294ec5744db2b766bc2438dabcf89c3b91849ee8046754b4394f8d07186308e80fd3ee6d7138a66f03df8537841622c8eb9c9cbbad468dd628aa00d9e914a308f5bb57aadc2e1b529f7afc7d7a01ec02ebe27a6b14694e89058d55d79e8cff9d9fbf70618f68f67137aa511846d4f04d8d02e5003c9c45e411e1b582da6903391d8c375560255b053176c5d9a7f46f245aa76be4e4a0154c3d2842f66a3fd091ff059b5609"}, &(0x7f0000000180)=0xaf) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r1, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:39 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000080)=0x80) bind$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, 0x24) r2 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) 16:15:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000000)={0x31c, 0x0}) 16:15:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x500000000000000}}, 0xa) 16:15:39 executing program 0: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) r2 = geteuid() setresuid(r0, r1, r2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x400448cb, 0x0) 16:15:39 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e24, 0x100, @empty, 0x3f}}, 0x0, 0x9, 0x0, "369d5526bf2cd59ce7d229610f81c8e54f3d42879f65fdc4596da3826753464c69c253dd2f01824840030291da5587ea0af312f01259e90d5a7dbdc0e320999e59e1c14250aca46ea16ed74c283a7ab8"}, 0xd8) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000280)={{0xa, 0x4e22, 0xdb7, @loopback, 0x2}, {0xa, 0x4e24, 0x400, @local, 0x1}, 0x2, [0x7ff, 0x4, 0x7fffffff, 0x7, 0x9, 0x8001, 0x2, 0x1]}, 0x5c) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080)) r2 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0x100000001, 0x1ff, 0x0, 0x100000000000000, 0x5}, 0x800000000}, 0x377d6b23) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x280, 0x0) write$binfmt_misc(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a30feb045de81b1a8004d555a5cd066aa7c921bdd6085af7aac062eac4b693c27c3d8"], 0x25) 16:15:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) getpeername(r0, &(0x7f0000000100)=@llc, &(0x7f0000000180)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={@mcast2, 0x31, r2}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x1, 0x40200) 16:15:39 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) 16:15:39 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x2, 0x80) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$void(r0, 0x5451) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f00000000c0)) r3 = dup(r0) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) fdatasync(r3) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) fcntl$getown(r3, 0x9) 16:15:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xfffffffffffffffc, 0xffff, 0x7, 0xd2}, &(0x7f0000000080)=0x103) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={r2, 0x40}, &(0x7f0000000100)=0x8) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}, 0x100000000000000}, 0xa) 16:15:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:39 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000040)={0x3f, 0x0, [], {0x0, @bt={0x80, 0x2, 0x0, 0x2, 0x1, 0x1, 0x3ff, 0x1, 0x8000, 0x95, 0xffffffffffff613b, 0xac, 0x80000000, 0x7, 0x0, 0x2}}}) r2 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) 16:15:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x600000000000000}}, 0xa) 16:15:39 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x710, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @loopback, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x48000}, 0x20008041) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) open_by_handle_at(r0, &(0x7f00000002c0)={0x100, 0x8001, "57e09f5637cd60d30954ea2209288171545aebe0090676c7af17c6073cf0e013223d1b71d72b0b58eb939bc28872365e910ca05fcbb20b2a81e17f11374c9c4a6c4c9ef8827f798988a8e15f407da6aa512b0efa1c8ede953e158201fd78a6266735fd5621b8f244673430d53bc8135de6df861f9281b89b6a8416b09ef3f9292e5e39288608fd18ba8aa461a3271cffa7457f967bd4d34ed3cd11e7edbdcd3ab3a1da394eacf93be28518ad107d7642b21814a3971e51e5b860a001d8d17c4de73bb1cfe30c1545c5bc39bca1ebd9e4b89fc552b24cd20d604e9c22c2db8ab850b624fa9c1713ef3c754b623db0b8e6ab01e7be9ff7e53d"}, 0x2c02) 16:15:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) recvmsg(r1, &(0x7f0000000280)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/178, 0xb2}], 0x1, &(0x7f00000001c0)=""/157, 0x9d}, 0x2000) ioctl$int_out(r1, 0x5460, &(0x7f00000002c0)) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) 16:15:39 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x111080, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) r2 = dup(r1) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000100)={0x5, 0x1}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) 16:15:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}, 0x0}, 0xa) 16:15:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x3, 0x4e0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000000), &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x558) r1 = syz_open_dev$audion(&(0x7f0000000600)='/dev/audio#\x00', 0x1, 0x4000) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000780)=0x400) openat$cgroup_type(r1, &(0x7f0000000640)='cgroup.type\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) connect$llc(r1, &(0x7f0000000740)={0x1a, 0x306, 0xffffffffffffff01, 0x5, 0x9, 0x1, @random="d8463283975c"}, 0x10) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000006c0)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x82, 0x0, 0x0, 0x0, 0x1c9, &(0x7f0000000680)='veth1_to_bond\x00', 0x3, 0x7fffffff, 0x100000001}) 16:15:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x700000000000000}}, 0xa) 16:15:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000080)={0x0, @aes256}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) close(r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000000)) [ 783.955894][T10382] xt_helper: cannot load conntrack support for proto=7 16:15:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000080)={0xa, 0x1, 0x4, 0x7fffffff, 'syz1\x00'}) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x4800000000000000}}, 0xa) 16:15:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}, 0x0}, 0xa) 16:15:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)=0x7) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) 16:15:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0x2000000a) [ 784.294466][T10382] xt_helper: cannot load conntrack support for proto=7 16:15:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r2, 0x7}}, 0x18) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'pids'}, {0x2b, 'io'}, {0x2f, 'memory'}, {0x2f, 'memory'}, {0x2d, 'io'}, {0x2f, 'pids'}, {0x2f, 'memory'}]}, 0x2c) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r3) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f00000002c0)={0xffffffffffffff08, 0x0}) 16:15:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x4c00000000000000}}, 0xa) 16:15:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x2, 0x20000) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000340)={0x5, &(0x7f0000000180)=[{}, {}, {}, {}, {}]}) r2 = dup(r0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)) fstatfs(r0, &(0x7f00000003c0)=""/227) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)={r2, r2, 0x1, 0x5c, &(0x7f00000000c0)="7c8ea0879588e274b3eed7bdcda724819ec924ab7444bd83ac378b7aa77a25cfa8f5bdbc5c17985ee0ad74d24f5f16b3277515e2260c6799245e70600c8e1420c44337fd5a6756fb4978001a935528edb431eb343362c1e75e1e2389", 0x1, 0x7fff, 0xffffffffffffff8b, 0x2, 0xfffffffffffffffd, 0x1, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) syz_open_dev$media(&(0x7f0000000380)='/dev/media#\x00', 0xfffffffffffffe00, 0x200) 16:15:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x2) 16:15:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0x1, {0x1000, 0x401, 0x7fff, 0x1, 0x7, 0x80000001}}) 16:15:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) ppoll(&(0x7f0000000100)=[{r0, 0x8080}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 16:15:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) bind$x25(r1, &(0x7f0000000040)={0x9, @remote={[], 0x3}}, 0x12) r2 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) 16:15:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x4000000000000, @remote}}) 16:15:40 executing program 3: r0 = socket$inet(0x2, 0x80000, 0x6) setsockopt$inet_buf(r0, 0x0, 0x2d, &(0x7f00000000c0)="68c16143a63395d021e8f4f68b3898b2d310a91b32b9095c0667b2ecc6469f98c80807dd3d6094f7de3495573b48a506148b8866fa9f1d0eb685ff65b86b6a7e2ff2bba9a5ff407827de7ae1f73339ac617f7179b4371ce1f0d99517bc012384b4a304b8810943948f", 0x69) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x4, 0x1, 0xffffffffffffffff, 0x1, 0x7}, 0xc) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000140)={0xd08, 0x4, 0x1}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:40 executing program 5: stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f0000000140)=[r0]) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = dup(r1) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x6800000000000000}}, 0xa) 16:15:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1fe, 0x101000) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @null, @bcast]}) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000080)) r2 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:41 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x3fc, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000000)={0x2, 0x5}) r2 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) 16:15:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'nr0\x00', {0x2, 0x4e24, @empty}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x10000, @local}}) 16:15:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}}, 0x40) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)="659a25b9bade3afd4b54657f8100adec6bbb8604eb256c4224bc3c3874490fa7570af30f43b00117510a3fb144b80289ac273137b46b532eadf1d5d13800b6748faa310daf77badb5d1220ea1851ee3e7141c0138674a609a51615e689320e2ca1a1", {0x6, 0x7, 0x777f7f7f, 0x2, 0x6, 0x3, 0xf, 0x10000}}) 16:15:41 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000080)=@ethtool_flash={0x33, 0x7ff, "1f24801348a4e548a49804148c1e6e60e738f7dd1ac88993b18775fd04d62d4cd730b9b35f5d49d4b65c6eaecf6828df9d982adfa26868c2da89a6773ebfc8f8f0322e5a25b83bbec15df37c2c4d31010d38e5a0357d6495d0b6ce8bde41a674fd77556ed62e5c91e58ea242c67419740f1cc870e6674fab28d8d102f5ae306f"}}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) 16:15:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x6c00000000000000}}, 0xa) 16:15:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sync_file_range(r0, 0x8, 0x8e, 0x2) socketpair(0x0, 0x80000, 0xcf6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000740), &(0x7f0000000280)=0x4) r2 = dup(r0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x41040}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040090}, 0x4) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x8, 0x5, 0x4, &(0x7f0000ffa000/0x1000)=nil, 0x80000000}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) write$binfmt_aout(r2, &(0x7f00000002c0)={{0x108, 0x101, 0x100, 0x62, 0x2ea, 0xfffffffffffffffe, 0x316, 0x245687f7}, "88ef07ae4668d322efd5", [[], [], []]}, 0x32a) 16:15:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:41 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x0, 0x70bd2a, 0xfffffffffffffff8, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) 16:15:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}, 0x10) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:41 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) 16:15:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000200)=0x10000) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0xde2, 0x101, 0x0, 0x89c, 0x0, 0x3, 0x10000, 0xe, 0x8001, 0xfffffffffffffff8, 0x4, 0x7, 0x3, 0x8001, 0x34, 0x9, 0x10001, 0x100000001, 0x7fff, 0x6, 0x7, 0x8, 0x7, 0x7, 0x5, 0x6, 0x20, 0x1000, 0x9, 0x6, 0x1efb3912, 0x0, 0x5, 0x200, 0x4, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x32b, 0x10000}, 0x507e, 0x401, 0x2, 0xb, 0x10001, 0x401, 0x1000}) r2 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000100)=0x1d0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'hsr0\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8080, 0x0) 16:15:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc100) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)=r2) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r2, 0x8000}, 0x8) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:41 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x202200, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x1f, 0xba, 0xde01, 0x10001}, 'syz0\x00', 0x45}) getpeername$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='syz0\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) 16:15:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) shmget$private(0x0, 0x3000, 0x78001880, &(0x7f0000ffb000/0x3000)=nil) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000000c0)) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x7400000000000000}}, 0xa) 16:15:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) bind$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, {0x8, 0x6, 0x8000, 0x0, 0x800, 0x81}, 0x4}, 0xa) 16:15:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000780)={r1, &(0x7f00000005c0)="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", &(0x7f00000006c0)=""/171}, 0x18) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000480)=0x1, 0x4) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000540)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x307}, 0x2, {0x2, 0x4e23, @multicast1}, 'ip6erspan0\x00'}) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000004c0)) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={r2, r4, r5}, 0xc) sendto$rxrpc(r1, &(0x7f0000000140)="d955cf338503ea88f21e1b0770de3225e490407d668af688d233c9345ff946f95d227cc4db148120967ef21d1017b6d9be9a055f18", 0x35, 0x8000, &(0x7f0000000180)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0xc9b8, @remote, 0xfffffffffffffffe}}, 0x24) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000007c0)={@rand_addr="524ac222e189b4542c0c8f7ef3aa79ce", 0x30, r3}) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.nlink\x00', &(0x7f0000000080)='eth1eth1.-em1^$#keyring\x00', 0x18, 0x2) accept4(r1, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, &(0x7f00000001c0)=0x465, 0x807fe) 16:15:41 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x135403, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000340)={0x3, 0x70, 0x3, 0xe5d, 0x4, 0xe4e, 0x0, 0x0, 0x10000, 0x1, 0x1, 0x81, 0x4, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x96, 0x100000001, 0x33f9, 0x6, 0x3, 0x8, 0x2, 0x0, 0x6, 0x0, 0x20, 0x8001, 0x0, 0x0, 0x6a, 0x7, 0x0, 0x100000001, 0x3, 0x520, 0x6, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000300), 0x3}, 0x4000, 0x200, 0xfff, 0x0, 0x6, 0x1000, 0x8}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xba58bffc7012df4b}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x194, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xec, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbb}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x58e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9d14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1c00000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 16:15:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x20}) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000000c0)={0x0, 0x1, {0x2c, 0x1, 0xa, 0x1c, 0x8, 0xffffffffffffff00, 0x4, 0x64, 0xffffffffffffffff}}) fcntl$setsig(r1, 0xa, 0xa) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0) 16:15:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) r2 = fcntl$getown(r1, 0x9) getpgid(r2) 16:15:42 executing program 3: r0 = dup(0xffffffffffffffff) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x1}, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'gre0\x00', {0x2, 0x0, @broadcast}}) 16:15:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x200000) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4) getpeername$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) setsockopt$sock_int(r1, 0x1, 0xc65db3fa14a40196, &(0x7f0000000040)=0x3f, 0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x100000000, 0x0, 0x8, 0x80000001}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r2, 0x3109}, &(0x7f0000000140)=0x8) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x1, 0x0, 0x1f, 0x200, 0x5}) 16:15:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0x2000000002, 0x1fb, 0x9, 0xffffffffffffffff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1bacf914c1bad75, &(0x7f00000001c0)=[{}]}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x5, 0x0, 0x1, 0x5}, 0x10) 16:15:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x7a00000000000000}}, 0xa) 16:15:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = add_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="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", 0x1000, 0xffffffffffffffff) keyctl$assume_authority(0x10, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0a0500000000000000b070") clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) r5 = syz_open_dev$mice(&(0x7f0000001300)='/dev/input/mice\x00', 0x0, 0x80) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001340)={0x0, 0x101}, &(0x7f0000001380)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000013c0)={r6, 0x4}, &(0x7f0000001400)=0x8) r7 = dup(r2) ioctl$CAPI_GET_MANUFACTURER(r7, 0xc0044306, &(0x7f00000012c0)=0x1) pselect6(0x40, &(0x7f0000001100)={0x10001, 0x100000000, 0x8, 0x3, 0x3, 0x3ff, 0x3a2f}, &(0x7f0000001140)={0x2, 0xe24, 0x8, 0x1000, 0x8000, 0x3ff, 0x7fff, 0x1ff}, &(0x7f0000001180)={0x3, 0x2, 0x8, 0x9, 0xff, 0x8, 0xfffffffffffffff7, 0x2}, &(0x7f0000001200)={r3, r4+30000000}, &(0x7f0000001280)={&(0x7f0000001240)={0x1924}, 0x8}) r8 = dup(r0) bind$bt_rfcomm(r8, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:42 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x3ff, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x0, 0x0, 0x1b}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f00000000c0)={0x8, 0x1, 0x6, 0x0, 0x5}) 16:15:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) setresuid(r2, r3, r4) 16:15:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0xffffff7f00000000}}, 0xa) 16:15:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0xffffffffffffffff, 0x7fff}]}, 0xc, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r1) write$FUSE_STATFS(r2, &(0x7f00000000c0)={0x60, 0x0, 0x1, {{0x0, 0x6, 0x105, 0x8, 0x4, 0xe18, 0x1, 0x2}}}, 0x60) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000080)={0x0, 0x5, 0x5, &(0x7f0000000000)=0x8}) 16:15:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x100, 0x400) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0xffffffffffffffc1, 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000380)={0x0, @local, @remote}, &(0x7f0000000100)=0xc) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, r1, 0x3}, 0xc) r2 = dup(r0) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000080)=0x100) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000280)={0x100000001, 0x3, 'client0\x00', 0xffffffff80000006, "335afcf214fb5717", "8c69474cd8054edfa64e3663ad378fb66a650228238232a621ef01f5f69f4dcf", 0x1, 0x4}) 16:15:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8f47, 0x2000) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x6b9, {{0x2, 0x4e22, @remote}}}, 0x88) ioctl$TCXONC(r1, 0x540a, 0x4) r2 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) 16:15:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x2}}, 0xa) 16:15:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000240)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000480)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) getgroups(0x4, &(0x7f0000000740)=[0xee01, 0xee00, 0x0, 0xffffffffffffffff]) getresgid(&(0x7f0000000780), &(0x7f00000007c0)=0x0, &(0x7f0000000800)) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000840)={{}, {0x1, 0x1}, [{0x2, 0x1, r3}, {0x2, 0x0, r4}, {0x2, 0x6, r5}, {0x2, 0x4, r6}, {0x2, 0x1, r7}, {0x2, 0x2, r8}], {0x4, 0x1}, [{0x8, 0x2, r9}, {0x8, 0x5, r10}, {0x8, 0x2, r11}, {0x8, 0x7, r12}, {0x8, 0x2, r13}, {0x8, 0x94dab1260e52d863, r14}], {0x10, 0x6}, {0x20, 0x4}}, 0x84, 0x2) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6(0xa, 0x40000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x7, 0x4) r2 = open(0x0, 0x0, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0xe004, 0x0, &(0x7f0000000140), 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = creat(0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x9, 0x9, 0x8fd, 0x0, 0x35, 0x7fffffff, 0x0, 0x0, 0x0, 0x7e3, 0x0, 0x8, 0x5, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8000, 0x0, 0x80000001, 0x7}, 0x0, 0x9, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000440)=ANY=[@ANYBLOB="60000000dbc6d6b2c1f571823d8f3e486603c036843bddd18ffacc49efcfd21ad92d225509bf2a83427b208b273dc1ba2a80e25adfd53606bc37ed1d6e2016b7ebb3922bf7e99fe08afb49aca48c0b4d1eeafbcd"], 0x0) listen(r1, 0x0) syz_emit_ethernet(0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0088000000000800450000280000000000069078ac14ffaae000000100004e20", @ANYRES32=0x42424242, @ANYRES32=0x42424242, @ANYBLOB="00000000c615b42e4cba7a2e637f148c00000000"], 0x0) syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x200000000000000, 0x2) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key(&(0x7f00000001c0)='\x01\xfa\xa0\xe7\x02W(U\x17\xa3^\xa4C\x99\xb1\xb1Q\'Trxrpc\xe0\xeer\xa7D\x83\x03\x83\xeb\xf1\x9d\xb7\x82\xbe\xe2\xc4\xcd\x80N33\x84\xbe\xe0\xe3\x0f\x00/Q\xddP\x82\xf6\xcai\x03\xe1v\xcf\xc4\xeb\x18\x01\xb1-\x00\x9bK!\r\xbf\xf6g\xc3\x8c\xbc\xdd\x0fn[3\x14K\x1c\x81\x01W\xf5-Q', &(0x7f0000000100)={'syz'}, 0x0, 0x0, r4) r5 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) setsockopt$llc_int(r5, 0x10c, 0xd, &(0x7f0000000000)=0x7, 0x4) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000140)) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000000080)=""/104) 16:15:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000)=""/220) 16:15:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000280)=0x0) r2 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x800, 0x1f, 0x2, 0x2, 0x0, 0x1, 0x96802, 0x2, 0x81, 0x8, 0x8, 0x5, 0x56, 0x0, 0xbe3, 0x7, 0x2, 0x7, 0x6d, 0x8, 0x8, 0x1, 0x6, 0x8, 0x25f3, 0x1f, 0x0, 0x8, 0x1f, 0x5, 0x1000, 0x5, 0x4, 0x8, 0x1ff, 0x100, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000100), 0xf}, 0x40, 0x8001, 0x8, 0xd, 0x7, 0x5, 0x9}, r1, 0xd, r2, 0x2) r3 = dup(r0) sendmsg$nl_route_sched(r3, 0xfffffffffffffffd, 0x800) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000080)={0x4, 0x1, 0x18f24425}) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000000c0)={0xf, 0x6, 0x80000000}) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40000, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev, @local}, &(0x7f0000000140)=0xc) recvfrom$packet(r1, &(0x7f0000000080)=""/107, 0x6b, 0x1, &(0x7f0000000180)={0x11, 0x7, r2, 0x1, 0x100000000, 0x6, @local}, 0x14) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:43 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x3}}, 0xa) 16:15:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008910, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000000c0)={{0xa, 0x0, 0x0, 0x56, 'syz0\x00', 0x3}, 0x1, [0xc5, 0x9, 0x1, 0xfffffffffffff801, 0x5, 0x7, 0x84a4, 0x2, 0x9, 0x5, 0x7, 0xffffffffffffff80, 0x14000, 0x9, 0x8, 0x2, 0xf2, 0x7fffffff, 0x25dfad7e, 0x4, 0x3375, 0x1, 0xf9e0, 0xdd, 0x8001, 0x48, 0xffffffff, 0xffffffffffffffff, 0x2, 0x94aa, 0x9, 0x401, 0x7, 0x2, 0x2, 0x1, 0x7, 0x4, 0x100000001, 0x1, 0x401, 0x5, 0x8, 0x2, 0x2, 0x1, 0x237d, 0xf93, 0x1, 0x84, 0xa02, 0x7, 0x1, 0x1, 0x3, 0xffffffffffff0000, 0x3, 0x77e, 0x5, 0x100, 0xcf54, 0x1, 0x2, 0x3, 0xf8e4, 0x7, 0x1f, 0x1f, 0x7fffffff, 0x20, 0x1, 0x4, 0x8000, 0x8, 0x5, 0x7, 0x9, 0x92, 0x5, 0x8, 0xc965, 0x40, 0xac, 0x1ff, 0x3, 0xf2f1, 0xf8, 0x81, 0x6, 0x1f, 0x20, 0x4, 0x7, 0x9e, 0x7, 0x0, 0x1007, 0xfffffffffffffff7, 0x10000, 0x80000001, 0xffff, 0x0, 0x6, 0x100000000, 0x7a, 0x5, 0x5, 0x3864, 0xd29, 0x5, 0x7ff, 0x0, 0x401, 0x1, 0x9, 0x9, 0xd7, 0xffffffffffffffff, 0x932, 0x9, 0x8ececfd, 0x100000000, 0x1000, 0x8, 0x7, 0x3, 0x20, 0x3]}) r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3, 0x7f}}, 0xa) 16:15:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x440102, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x254, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc4, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1486}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ca}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_MEDIA={0x130, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d62}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffd61}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8f1}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x41}, 0x4) r3 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448cb, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000000)={{0x7e, @multicast2, 0x4e22, 0x0, 'sed\x00', 0x8, 0x5, 0x1a}, {@empty, 0x4e22, 0x0, 0x1, 0x518, 0xfffffffffffff119}}, 0x44) 16:15:43 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x4}}, 0xa) 16:15:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, r1}) bind$rose(r1, &(0x7f0000000280)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @bcast}, 0x1c) connect$bt_rfcomm(r1, &(0x7f0000000180)={0x1f, {0x2, 0x2286, 0x5, 0x1c, 0x6e}, 0x67cd321b}, 0xa) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0x1}) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140)={0x0, 0x285a29f, 0x9, 0x4}, 0x8) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) getpeername$ax25(r1, &(0x7f00000002c0)={{0x3, @null}, [@bcast, @netrom, @rose, @netrom, @remote, @remote, @remote, @default]}, &(0x7f0000000400)=0x48) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000003c0)={@empty, @multicast1, r4}, 0xc) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)={r2, r3}) 16:15:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x9, 0x10}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000200)={r2, 0x1, 0x30, 0x1, 0x3}, &(0x7f0000000240)=0x18) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d66645daf4143af38091c6b59b093f90a7ae67a58565b354659ce097ecb410603f67fd90fdbfcd31abd8c228b9100000000000000", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368657461673d2c70726976706f72742c6c6f6f73652c7569643e1c2031cf2098a076baf1434a3a3587d1d3e2ea16e00fc24cb80a5e1888368fd3e552a70b7de30aa231c801a23e370000000000000000", @ANYRESDEC=r3, @ANYBLOB=',\x00']) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0x5, 0x8}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@broute={'broute\x00', 0x20, 0x3, 0x360, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000040), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x0, 0xe8e7, 'team_slave_1\x00', 'bcsh0\x00', 'bond0\x00', 'ip6_vti0\x00', @local, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0xc0, 0xc0, 0xf8, [@nfacct={'nfacct\x00', 0x28, {{'syz1\x00', 0x5}}}]}}, @common=@dnat={'dnat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x5, 0x4, 0xaaf5, 'gretap0\x00', 'syz_tun\x00', 'dummy0\x00', 'team_slave_0\x00', @remote, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0x70cee4861e59d006, 0x0, 0xff], 0x70, 0xb8, 0x100}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x6d5, 0x7, 0x5f9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0xc00}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0xd, 0x4, 0xe897, 'rose0\x00', 'ipddp0\x00', 'veth0_to_bond\x00', 'ipddp0\x00', @dev={[], 0xb}, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @random="38579d6860ed", [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x70, 0xa0, 0xd8}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@random="06d8ae1f67ef", 0xfffffffffffffffd}}}}]}]}, 0x3d8) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', r1}) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x3ff, 0x4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x400448cb, 0x0) 16:15:43 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x5}}, 0xa) 16:15:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x2a, 0x109180) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x90, r2, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x26e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffe}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}]}, 0x90}}, 0x810) r3 = dup(r0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000080)={0xd34, 0x8}) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) [ 787.356123][T10809] xt_nfacct: accounting object `syz1' does not exists 16:15:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1d, 0x8, 0x0, 0xffffffffffffff01, 0xffffffffffffffff}, &(0x7f0000000080)=0x14) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240)='/dev/udmabuf\x00', 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0x5, 0x8}, &(0x7f0000000100)=0x8) 16:15:43 executing program 1: r0 = socket(0x0, 0x800, 0x6d7) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0xfff}, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r4 = fcntl$getown(r2, 0x9) timer_create(0x1, &(0x7f0000000240)={0x0, 0x22, 0x1, @tid=r4}, &(0x7f0000000280)) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x100, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x18, 0x13, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xffffffffffffffaf) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) recvfrom$ax25(r1, &(0x7f0000000000)=""/209, 0xd1, 0x10002, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x400448cb, 0x0) [ 787.407855][T10818] xt_nfacct: accounting object `syz1' does not exists 16:15:43 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x6}}, 0xa) 16:15:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f00000000c0)=""/4096) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@remote={[], 0x2}, 0x4, 'ip6_vti0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) read$eventfd(r1, &(0x7f0000000100), 0x31f) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f00000000c0)={0x3, 0x7fff}) 16:15:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'erspan0\xd9\xff\x00', {0x2, 0x0, @remote}}) 16:15:43 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x7}}, 0xa) 16:15:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x33, @empty, 0x4e20, 0x3, 'fo\x00', 0x38, 0x5, 0x5e}, {@remote, 0x4e22, 0x3, 0xbc4b, 0x200, 0x9}}, 0x44) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', r2}) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x8, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x8, 0x0}) 16:15:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x48}}, 0xa) [ 787.860229][T10980] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20000 [ 787.875484][T10980] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20000 16:15:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x111000, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) 16:15:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080), 0x2) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r2) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x500, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000000c0)={0x0, 0x0, [0x800, 0x8, 0x8, 0x0, 0x80000001, 0x0, 0x6, 0x3]}) 16:15:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) getsockname$inet(r1, &(0x7f0000000140)={0x2, 0x0, @dev}, &(0x7f0000000180)=0x10) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xfff7ffffffffffff, 0x801ff, 0x3, 0x0, 0xffffffffffffffff}, 0x2}, 0xa) 16:15:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x4c}}, 0xa) 16:15:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}]}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:44 executing program 3: r0 = dup(0xffffffffffffffff) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000080)=""/12) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 16:15:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000200)='vxcan1\x00'}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f00000000c0)=""/246, 0x104000, 0x800, 0x4}, 0x18) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x5) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000280)) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 16:15:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x68}}, 0xa) 16:15:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="ed000000b3c88ae6b09044fe5c51a86e1584e390a0732ad5ce05d3ad66ebfc9cd0179ff849a395d7ec399157ec842af1f77bcbb24c101489ec825d0abf9ba0499946e2363fe4e0f5c89cb0b698df358fa75bbd49217539fb7f21968b662491040063011b900a0198585d1106bc4bd36de2d707e3e7b1ba99f88c2d134743b04939691a05d7fc58370b207aee7a9cebaedcd07a43d0c6df04bec0313d110bd4cde7174112c46c877f7aac956ab6d300154e165ab016b312cb40a61f00e739dead369b8fa18f3424d76e34c58aed331f434ff4c5d76ccf3f731f5daa113e4e15fa00663e569eef3cc0243e8b20f2042926c555d027d6129f1491a60a241c4616fdadeac50f0acd2972d66f0dc922f9a73ca0b71964658a336d15f5e90ddf3a07a17fd941ecf9f3440195c92baf9e8e0ad738bb1f6f6b060c8bf38032b6bb04df210f9106cff91d1271e653d41c1476bed0aae4b6e232a45c663d12e154249d0b4499a3344541b7cef5a1044ed96a58d1d3aeecab8af89313c4126e98e94ee2b20d9650a44f5dfc5299c6351bbcd1e3157a990a2b86377181e5d33af583d4575eb733765e96fe34a365e52d1fc67fcbdb4504e039b2f14c5a22af87cee8f399adc37ebc4b"], &(0x7f0000000140)=0xf5) rt_sigpending(&(0x7f0000000040), 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r2, 0x8, 0x0, 0x6, 0x9, 0xffff}, 0x14) 16:15:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0a0723000000000000b070") ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000000c0)) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000500)={0xffffffff, 0x0, 0x1, 0x4}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x0, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000000), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, 0x0, 0xffffffff, @mac=@local, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}, @mac=@remote, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x100, 0x2, 0xd67, 0x200, 0x0, 0x0, 'ifb0\x00', 'vcan0\x00', {}, {0xff}, 0x0, 0x80}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}}}, {{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) 16:15:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000140)=0xe) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r2, 0xa8b1}, 0x8) r3 = dup(r0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x4e24, 0x7fffffff, @ipv4={[], [], @multicast2}}}, {{0xa, 0x4e21, 0x400, @ipv4={[], [], @empty}, 0x7}}}, 0x108) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000340)={{0xa, 0x4e23, 0x7fffffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x503}, {0xa, 0x4e20, 0x3, @ipv4={[], [], @loopback}, 0x86}, 0x64, [0x1800000, 0x1, 0x1f, 0x0, 0xffffffffffffff80, 0x200, 0xbc, 0x9]}, 0x5c) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d4, &(0x7f0000000180)={0xa2f8, 0x0}) pipe2(&(0x7f0000000040), 0x4000) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)=""/32, &(0x7f0000000080)=0x20) 16:15:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x6c}}, 0xa) 16:15:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xda, 0x0) fchdir(r1) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:45 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x9a3, 0x40000) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000180)={0x2370db1f, 0x8}) r1 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x60000000, 0xffffffffffffffff) r2 = dup(r1) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{}]}) 16:15:45 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) r3 = shmget(0x0, 0x1000, 0x81c, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) 16:15:45 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x74}}, 0xa) 16:15:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000080)=""/228, &(0x7f0000000000)=0xe4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:45 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x44102, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x19) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448cb, 0x0) 16:15:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001700)={0x0, 0x0, 0x0}, &(0x7f0000001740)=0xc) sendmsg$unix(r1, &(0x7f00000017c0)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000080)="5576fd0327243174af9111efca394d6ec7245948119846be584c6cca", 0x1c}, {&(0x7f0000000180)="3a4095f489e90456788962e334a2fc4381ff27e398cfc75216666c9911ce6db6e8ef9c6e2ed192a031af2fcbe103f3c05b8d9d1047f2c0220f8307a28cdeee798cdd565270ce6de1545a26bf6bfcf0dfc616e4bcd058f7a5f7413b2bcb27de1683bd30a3ebd0ffd733bfb3595ef7f62fda25e2406f9b467d4037dd258a04fd53fe626ffebf68e4a47ea393830e545735bce2fed7be8362548687eae235e895ec1de78dc4c421c4f54bb732b2679b4b94109192f154d468d01a1acf8e1d94f6dbb2a79df2a1b410b704a385e0832989553e1c3042eeb0d9a601de96d3055881629642", 0xe2}, {&(0x7f0000000280)="adf901db64f5966615872a6c3f10e1b052c48952700f67d1aabeb12801d7e953ff087773803bf783f41f2fbcc43e8c8239489c3d1308a742d87dbc80c4ff3ab58119cb2efab9b0b2fe6819eb763e9843692d18bfb7a1aa1e7632f9810bcd08853f7195f10eb812184cbc7b69993865653a691e44802253367e4dd61b50b2c81aa3acb2f3281f62c45deae717c39ae80133f4b20c39b4763f727f0f2e053b0d17ff7c17d6e0a6a4d71352a0", 0xab}, {&(0x7f0000000340)="4dbcd19b77081a13e21f435a3b40e058d0366ccd687adf1edd0d69b032bc55cfed0d5c6790c1d05ac68d96d5e11133326519a88ed06bfb6e6022fbfa759a3fd1ab6bbb075fa9d2e71ed8da98eb85bd3bf6e13eaff5faeb9cc6382c17c6c2950731aeeb83a737d306b6efbea85191458a4c012404699f165472e609e7fd0cee79ea4c1a70d9de85a47400969e615e3764f0795915f0a73ddf97d40cdab3d71f222ccdcbd3f994f736800dd2bf856e617441bf689ba2c850c8907558c4a0c0a664151a1d852fee3d7b8206162ff7bbff8dc24e6991e2a7a76357f532c2cfd643334a", 0xe1}, {&(0x7f0000000440)="c2185fc130303213d2d6b431c8ba93d326623b0595793232da9dcc158300d7218b9bdd833282c58dde7e0811511b2ab2efd22fda7ede10222051249c29292e11c5a9b50bea04eb8034efecf8bbbe0c339b507429b9be84c6af06f474a1006025ce074920f965204ef8d7093d91134f5f86023c55f673301054ce8394f97a4492367de5cdd2afcd1834ad4f59cc5272e0ce5e69856d523b52b8e22336df216af41f846fa57107dde59aa4a9e11a9f5cd2757c6465279d8aebdd7d8f7a52a0530017ce3e10e4f0556e70f5d27bcdd9c6ccaf5d898d9c9595fd2bc57f42249384f1ee12d7b79a3b330aeca29890b8152295f9af2a34fe76", 0xf6}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="764955d1225e386fa626c565fcd130b5682f2381d14f9ec2415ca0bb6fddde889a300ec60ad2739ba14d23bde3dfff6ac56c4a21b5d426c74c77b2b9dcf71be38749d40d005d02db7b01de25f9995cbbd14c93af49ed0743fa075affe18b6ac1e23bf7210da473ef9c92106bf031b74b83222da8868e954a8a2b6fe8ed046663a1bcf6d9bf039be9fbda68aa8fc289732a993e2d6a450f538a394742080ab0d1c2d6d5624d796ee48341f73d6a4c2a1bf583a076", 0xb4}, {&(0x7f0000001600)="3d609cbd840a037ce49c5036f149352742b8e88e14717779902f67952d90cf6727f10ea1e86a2ac0b9de831014c9d14552103d7946cb78e7cda56fee100f7ec9980c73f7c5f5433a30a000bf815b48e094879ee27f", 0x55}], 0x8, &(0x7f0000001780)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x440d0}, 0x4004800) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000000c0)=""/62) 16:15:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:45 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@ethernet={0x0, @dev}, &(0x7f0000000140)=0x80) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x44002}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x22c, r3, 0x212, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xb4, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcafe}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdd1a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b28fee8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffffd}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x39}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4a0}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7e0000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc313}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x22c}}, 0x880) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") set_mempolicy(0xc000, &(0x7f0000000040)=0x7ff, 0x5) r4 = dup(r0) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:45 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x7a}}, 0xa) 16:15:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000080)={0x0, 0x0}) 16:15:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x600001, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000080)=""/100) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)=0x101, 0x4) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000100)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) fcntl$addseals(r0, 0x409, 0x8) 16:15:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x6000, 0x0) bind$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0x3) 16:15:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4068c0, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:45 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x300}}, 0xa) 16:15:45 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfff, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000300)=""/157) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x8000, 0x0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x800, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) sendto$inet(r0, &(0x7f00000000c0)="da11f12c775d4b8fe0d6c27ef191e51d30d4c9a7ba35f4f7bef190acc11ba6a2711f8ceb04728f23956a7a8424c5aed8557e77dcc761eb78a9df9fa32e0ee5488a706ac0b0f489ad399a22700a5e99331ed0facbf009c8fe329d729c7f0899dfbdc4016ca622fae15faf3a78c0309a958135a271b7b29d05ee6c76a8e1e230c04f4a8dd0bbbc73127ecb88bef329c47a2beb93511d98aaa81207a14eb6b724a02ca96872c94bbcd776b6b1c113bca26118", 0xb1, 0x0, 0x0, 0x0) 16:15:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x4, 0x1, 0x0, {0xa, 0x4e21, 0x3f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1000}}}, 0x32) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) open(&(0x7f0000000080)='./file0\x00', 0x402100, 0x40) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x100000000000000, 0x0, 0x0, 0x2}, 0x3}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @rand_addr=0x3}, 0x10) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448cb, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)={0x8, [0x4, 0x398, 0xffff, 0x9, 0x700, 0x7, 0x4, 0x3]}, &(0x7f00000001c0)=0x14) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000100)={{r4, r5/1000+10000}, {0x77359400}}, &(0x7f0000000140)) 16:15:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) sendto(r0, &(0x7f0000000000)="33cabca1e1ca95ec0dc1b3397baf8087eef7aa710a159c154ecb6be07464879e9c21bcd88a", 0x25, 0x0, &(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x100000000, 0x5, "a8d0e5393f57f4ff243b3007bc2f89d227c0f213cf3e5ab74dec4a8fd48e2ec99ce6cb0cdd503470f01f62a79b5c21a20bd8c8f837909a4134a744c12a301d", 0xd}, 0x80) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x2c) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000140)=0x6) 16:15:45 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto(r0, &(0x7f0000000000)="3cde5f8521557e64b040c97b0bfb7050aaa5a09a2853006467b2bbf915eb2771bfa3de8a829e5ac969e04bd5f1ac57e843c4e9a5c6", 0x35, 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") dup(r0) 16:15:45 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x500}}, 0xa) 16:15:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x18) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}, [@RTA_GATEWAY={0x8, 0x5, @dev}]}, 0x24}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 16:15:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x100) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)="3ea74e573a0ec8e774265c5d50a77474a8f1c1ff8582f4238f45ce2eedf49b7f1438b6022939ad66e8986f926723b139e45c4bb973a5373ac4857409a1519363236d81ca7154773d6f3775cd0153a8dc9b8fa2cadd89ac2ff387108f2b62bf07b3acffcf4681a91ac9852735d94ff63830ebbf75a6cfa8c64b0ed89aae25310e87bbe138430e078a1bd38976b04f72fcf2f41231436a70b52f8defe8021fc4acbe8d6035cdf5dc55da69a3003b824810b9a7d122aef8268a8ac8e9003987ef4d7007412b018e4514f074eeecbe2f271a05fb75dc58f83d3896", 0xd9, r1}, 0x68) 16:15:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x6, {0x20, 0x7, 0x6, 0x80000001, 0x73, 0x3}, 0x10001, 0x1ff}, 0xe) socket$bt_bnep(0x1f, 0x3, 0x4) 16:15:45 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x2) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:46 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x600}}, 0xa) 16:15:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x7f, 0xc, 0x2, "51534bfb90e83abe6c4ece433baed2e7fb4fd8945dc30f6a2f507d467b48b446", 0x3b77566f}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) bind$bt_sco(r1, &(0x7f0000000100)={0x1f, {0xff, 0x9, 0x9, 0x7f, 0x5, 0xb4}}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=0x0, &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)={r2, 0xbb, "3fecf195827a33ba9113c6ce3cbedc4fa8d2875887d3938b1b46039be39a03064cb790139c0a1200d33534322bf9ee1620a52c4ec7f5bfc241d744bcd6b05cc35827b09eb8b37fc07275cf13ad3a00fdfd5698d3e7d432d93741f821faea3de1a5ad80d30cda0e7eb144d97a318aa24b973678e1467f0a6f9ace0db839cb385ba9c660305d69f5e0fcb49a6b7f747ef6c41f748c2d8c6ad1ea15bf8aaf743077a1d9c14a78a4443b5b6162eec9768305271a026f96189d5e0cf998"}, &(0x7f00000001c0)=0xc3) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x10001, @ipv4={[], [], @broadcast}, 0x8}}, 0x3574ca32, 0xffff}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)) 16:15:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000000)={0x7fffffff, 0x4, 0x4, 0x20, 0x0, 0x797}) 16:15:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) faccessat(r1, &(0x7f0000000040)='./file0\x00', 0x10, 0x1000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000080)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:46 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x181200, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000040)={0xfff, 0x3f}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x533800, 0x0) 16:15:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0xa7, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000380)={[{@shortname_lower='shortname=lower'}, {@fat=@check_normal='check=normal'}, {@shortname_mixed='shortname=mixed'}, {@fat=@uid={'uid', 0x3d, r6}}, {@fat=@check_relaxed='check=relaxed'}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@utf8no='utf8=0'}, {@nonumtail='nnonumtail=1'}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_winnt='shortname=winnt'}], [{@euid_eq={'euid', 0x3d, r7}}, {@hash='hash'}]}) write$evdev(r1, &(0x7f00000000c0)=[{{0x0, 0x2710}, 0x3, 0x5, 0x800}, {{0x77359400}, 0x4, 0xde, 0x80}, {{r2, r3/1000+30000}, 0x13, 0x6, 0x3}, {{0x77359400}, 0x13, 0x7, 0x8}, {{0x77359400}, 0x17, 0x100000000, 0x3}, {{r4, r5/1000+10000}, 0x17, 0x5, 0xa516}, {{0x0, 0x2710}, 0x12, 0xffffffffdd07f9d8, 0x80}], 0xa8) 16:15:46 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000480)='/dev/admmidi#\x00', 0x1, 0x7fffc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000004c0)={0x0, 0x9, 0x20}, &(0x7f0000000500)=0xc) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000680)=0x6, 0x100) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000540)={r1, 0xe9, "fd9d4f9cf69b26b54ca44de99a0448c42330758d6ca48292971dac8d432854cffa4d4709edc697ce592cd5df77aa99c24cd412103e03f16da5b25ef32155f13476d9fb74eb578cf306a74d11a489cdca88f8f74794d69251b9ffbcd5d220edd48e19ee089c711a63fc796d5815c314c7955ad6cd1bb3b964b17dbfbf90739aba642fef6a8f096ef2e972654fdf9fec12c6e805c77ee6156397a5ae15d6001e93c4bf7a8d7d3169a1bdb5b626505fc59637567159fede4d2c102268666e3db95091ef96cee770bd0da8ae1b278c757e5563fe1395807c2691ae51347fa0675c7e65ed2659810b018df4"}, &(0x7f0000000640)=0xf1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000080)=""/91) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) r4 = request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000280)={r4, 0x0, 0x100000000}, &(0x7f00000002c0)={'enc=', 'pkcs1', ' hash=', {'sha3-384\x00'}}, &(0x7f0000000340)="cdeb067fd21d1685d52f6c4c0a0b85740485510fa8a37415d77bc06ed4703aa201483e96f5c66e50c221", &(0x7f0000000380)=""/231) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000040)={0x243, &(0x7f00000001c0)=[{}]}) 16:15:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x68) 16:15:46 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:46 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x700}}, 0xa) 16:15:46 executing program 0: pipe(&(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RMKNOD(r0, &(0x7f0000002080)={0x14, 0x13, 0x2, {0x22, 0x1, 0x3}}, 0x14) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) setsockopt$inet6_dccp_buf(r2, 0x21, 0x2, &(0x7f0000001000)="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", 0x1000) read$FUSE(r2, &(0x7f0000000000), 0x1000) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000002000)=0x3ff) setsockopt$inet6_int(r2, 0x29, 0x5f, &(0x7f00000020c0), 0x4) 16:15:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000000)={0xf, 0x7, 0x1, {{0x2, '/*'}, 0x40}}, 0xf) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/253, 0xfd) 16:15:46 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0xc00, 0x0) timerfd_gettime(r0, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1, @tick=0x1f, 0xfc9, {0x6, 0x5}, 0x4, 0x1, 0x1000}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) write$P9_RVERSION(r0, &(0x7f00000001c0)={0x13, 0x65, 0xffff, 0x1, 0x6, '9P2000'}, 0x13) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r1) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0)=0x3, 0x4) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80000, 0x0) 16:15:46 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x4800}}, 0xa) 16:15:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000000)='{vmnet1[\x00', 0x9) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:46 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d4, &(0x7f0000000140)={0x3ad, 0x0}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000040)={0xfffffffffffffc00, 0xc, [0x3, 0x0, 0x7]}) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ee, &(0x7f0000000180)="265fbfe879bf53b262c9599ad358e4eb9e0476be81ee74ceb6bd71b72b2d237ed684a4428e3270b1ffbb9556cce44c288fa6e83da444c351a04a7f443009dbf693e8") pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 16:15:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = semget(0x2, 0x7, 0x240) semctl$GETZCNT(r1, 0x1, 0xf, &(0x7f0000000080)=""/237) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0x80, 0x1ff, 0x0, 0x0, 0x0, 0x1}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) truncate(&(0x7f0000000000)='./file0\x00', 0x8001) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) 16:15:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080), 0x4) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f00000000c0)={0x10001, 0x9}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000080)={0x57, 0x5, 0x81}) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0xfffffffffffffffc) fchmod(r0, 0x100) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) 16:15:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x4c00}}, 0xa) 16:15:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xbd2a, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) r3 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d4, &(0x7f0000000080)={0x0, 0x0}) 16:15:47 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8, 0x50000) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:47 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x1000, 0x800) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140)=0xce1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'rose0\x00', {0x2, 0x0, @remote}}) 16:15:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) tee(r1, r1, 0x8, 0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x400448cb, 0x0) 16:15:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x6800}}, 0xa) 16:15:47 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040)=0x1, 0x4) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000140)={0x2b, @empty, 0x4e21, 0x0, 'sed\x00', 0x11, 0xc76, 0x1e}, 0x2c) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000180)=0xfffffffffffffff8) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x4, 0x0, 0x10000, 0xfffffffffffffffb}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000100)={0x8, r3}) 16:15:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x6c00}}, 0xa) 16:15:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d4, &(0x7f0000000080)={0x10000029b, 0x0}) ioctl$int_in(r0, 0x5473, &(0x7f0000000040)=0x80) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x40082) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x1, @empty, 'veth0\x00'}}, 0x1e) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000000)={0x1, 0x105000, 0x8, 0xffffffffffffffff, 0x8001}) 16:15:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x3, 0xcd}) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e20, @multicast2}, 0x1a, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0xfffff00000000000, 0x5, 0x40}) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000080)={0x4, 0x0, [{}, {}, {}, {}]}) ioctl$TCSBRK(r1, 0x5409, 0x5e) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x4, 0x0, 0x80000000, 0x0, 0x17}) 16:15:47 executing program 1: r0 = socket(0x0, 0x80000, 0x1eb2) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001100)={'nat\x00', 0x0, 0x4, 0x1000, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/4096}, &(0x7f0000000000)=0x78) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f00000011c0)={0x3, &(0x7f0000001180)=[{0x7, 0x3, 0x27, 0x1}, {0x40, 0x80000000, 0x20000000000000, 0x1ff}, {0x0, 0x81, 0x1, 0x1}]}) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000001280)={'vcan0\x00', {0x2, 0x3, @remote}}) [ 791.602458][T11623] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20001 16:15:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x7400}}, 0xa) [ 791.656218][T11623] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20001 16:15:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x1ff, 0x2a, 0x8, 0x7fff, 0xff, 0xdd}) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:47 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) connect$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000080)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x1c0) 16:15:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$rxrpc(r2, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0xfffffffffffffffd, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, 0x24) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:48 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x40000, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x1, @local}}, 0x1e) r2 = dup(r1) poll(&(0x7f0000000080)=[{r1, 0x8000}], 0x1, 0x12) bind$bt_rfcomm(r0, &(0x7f0000000780)={0x1f, {0xffffffffffffffff, 0x4}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000000c0)={r2, 0x0, 0xfffff000}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x1ff, @ipv4={[], [], @local}, 0x4}}, 0x6, 0x140000, 0x81, 0x473f, 0x100000000}, &(0x7f0000000440)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000006c0)={r4, @in={{0x2, 0x4e23, @remote}}, 0x7ff, 0x30000000000, 0x2, 0x7, 0x88}, 0x98) open(&(0x7f0000000140)='./file0\x00', 0x8000, 0x11) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x860020}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="6800004ab19a77754e93e5d54095af74aa07d200e793e3b0cef6cee9ce1284d1357eb772f90656aeff0aeb7393dea3630cce2cd4984d0a23408fa0206cc938aaf122996887a2e8d7b14f2fbffd3f29078002b69829624ce7cb4d0b1c927c50487f249e47985293253a880c50581b16e72c12069267a631b6f56a684b753608bc0fbdc981b34fbc4b1030005867102737f08606aa7cee5f3df803073f2a76335859e69d4dc62fc31109c08555996eaae962edb52c1f2855246661304d0bda8695c0436d899f8efc6ec08cda8b5e69c45bb70dde601e7253ba7d5e71ebbc0c38db4d1203f5f9176d622e201e", @ANYRES16=r3, @ANYBLOB="100026bd7000fbdbdf250200000008000300fffffeff080003007f000000080005000200000014000100fe8000000000000000000000000000aa100015a4ebf200000000000001000000"], 0x50}}, 0x20000000) sendfile(r2, r2, 0x0, 0x1) 16:15:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) dup(r0) 16:15:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x1f, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) 16:15:48 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x400000, 0x0) getpeername(r0, &(0x7f0000000280)=@ethernet={0x0, @remote}, &(0x7f0000000180)=0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r2) r3 = dup(r1) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) sendto(r1, &(0x7f0000000080)="c162b478a963b4178638ffd13382ccda8a477d9b3fd3fda32c421012f4e0be37680f99ed5e4a229553", 0x29, 0x40000, &(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000000}, 0x80) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) 16:15:48 executing program 4: socketpair(0x10, 0xa, 0x48f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$alg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="6636f08fb00b140810fa09cbf9b19b478c0316e79556c4a57aa45cf3e5a1aa4d26182df6d56677e26ce84c74f59af93d2d155b83dd0558d3878c13933ce84d910ff2602af0378fb30ed2", 0x4a}, {&(0x7f0000000100)="a28b10f54c6d47cecc3e5b1a32dc21a7c17a93aceb836446de151e79255087d2299eecc2c83118bce3820fb8163f01dec89941259574a82ed4dc12387b670b7829f6fce1291720ef4e36f14d48f3de304712f8023f826ffa8aef00171ae2fca2346b8736162739c2c821c5dc4b62dd5ed153c69c85cfbaa108b1738268014a9102189b54763f93cab5653e896c197bf823c7eb0bebc4712c02ca6ecf767b6dd0150c3f99db375b47da75d279b600ea0e943b623b1f3f90d27275fa1cc445", 0xbe}, {&(0x7f00000001c0)="42385af036fa9862c3a829cbc6556d0e89951fb74080165d0fc53f1661fb894a109628d4678f7710e92aa8897e5190836819c4f78f8f4d922122207ab91282bea708eb8949d4b5c37f66fd578b9e244d54d56c9abb634c8acd22655bb5b4735b143bdcb722e56569c90ff71f632d0f582a8625c7cfb2cc4edbdbb299536bb8190ba75527f6054fa43e6a4bc899bf1744ee3a8d3264fb96f418f4fecda7a2bcd1c61808858e370f6bf0181205ca7c7312be48d27c87d09001c68791eab63b2ef38649a79f47018c597ddcec5d2b09ddcae09c3ca4d54ee9341c1c4ac3914b886cb43cf21aa64f53e324fb6f933af56680", 0xf0}, {&(0x7f00000002c0)="0012d6c32609fdc96438a6144e93425eb3245713801159dc9331de4c4c555bf5e5b22babfeae71e24157561c888a891690c16c0e4569d80ca6131a44d25c96647ad1fc4e6753ffdd29ba2748c6c12b9e799a92610272cf820f61ee5ebd080e3fdb19fadfcacb90600622844fc095e0d9838250ba113047c6c24e9a551ea83a530aadf74cdc4b36f8449359c80995589c814aacb725216267c62d905306ab1b99b551e63ddf584d3d47aa5861a354e387fa7a32c8d44f3327dbef4f64376472048cead416258a6a3e628c9da611ff8110039444b312117e9dd0ec9404c734acdf1b4876d5686cb6585468a432d4c6c1c653c5c59d20256964", 0xf8}], 0x4, &(0x7f0000000400)=[@iv={0x78, 0x117, 0x2, 0x64, "b67b7589a0d942e43b155190dc29d208e1e52039d49ee5ebe5482b419678681530c82e6ec660c5f493c1dedec2e165e8aad135787ce1103c37ddfbbc4f7ae3739574da02ed6ed8b4384e8813e42f5012f5719cd619d6c43acdb5de14c8bb8429fd4bde09"}, @iv={0xf0, 0x117, 0x2, 0xd7, "fc8f94c75b18dea1f562fe75d6b25da372f55b275c9092d856b597190398aec9d76f5d27bdd8e566b4d10ebb9925073607f3bf769524dc31225a4f2b11973fd84842dc21d8af4efb0f97a5e38a06aabc4555a4c8e5cfa6b579c17e425ec6bd95f7b58fdc9063aa7872412926724f3edf348189a2909cf5d1972448dfb660928feec318f13ca5ae0f6e89d3d620981a14d3b77ff21480e8200f54f32a4f5bb9b61424360ce15d9258b36d3c0aad990cca5bf640e0ce03efe81ada5d6cf0c9d6656c7cd0fe676f89ffb1bcd0102ffb1fdda2e1f1ede7bb8d"}, @assoc={0x18, 0x117, 0x4, 0x200}, @iv={0x48, 0x117, 0x2, 0x2d, "87fa6f4645bc2f1f66b01a2955d193d424cc887d7a64db1f0af584729a3fdfc10331ed8528174fc787b06f361d"}], 0x1c8, 0x4000000}, 0x20000801) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) getsockopt$rose(r0, 0x104, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) 16:15:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000040)={0x8, 0x1a, 0x12, 0x1e, 0xa, 0x0, 0x2, 0x5b, 0x1}) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x7a00}}, 0xa) 16:15:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0x989) 16:15:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'rose0\x00', {0x2, 0x4e21, @broadcast}}) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x3, 0xab3, 0x0, 0x1, 0xa0}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x4, 0x7, 0x7, 0x8, r2}, &(0x7f0000000180)=0x10) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x1) setsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000380)="3be27e8e7f6c03b71d1ee703f3391f80ab6f159264968037f72c1d918badbfa07410ce43c660ca6e4fe36afbbab39c1bc56f6492fc7fe34b8b23919cabb46fe33ee9aee92d270f85702b73be55286da446c9e19ec7c5b3e4ece8ec4b3c8d1385229aa46bbd1b8b44b314b3bc4f4f9c14626ca5bb9aaba2c4145c0f8de3a6dfffe2a608d13988fba807ce82f7fdd826efb7101fd7ae0edb0f4eeb75b9590e6361efa14c28a1f8b59e65718a304a86af1f9c14072a2f48140d59836c4d4184baedd6953e5d404a9363d104bd7669bc251a2769a14b260e887fb45b78dcfa908c9e63b3981f54aa4f905211b021e9df116cf6", 0x127) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x276, 0x0}) 16:15:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x100, 0x84) mkdirat(r2, &(0x7f0000000140)='.\x00', 0x41) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x200001, 0x0) write$P9_RCREATE(r3, &(0x7f0000000240)={0x18, 0x73, 0x1, {{0x40, 0x1, 0x6}, 0x2}}, 0x18) r4 = dup(r0) fcntl$getown(r0, 0x9) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000180)={{0x1, @local, 0x4e24, 0x2, 'ovf\x00', 0x8, 0x5, 0x65}, {@empty, 0x4e22, 0x10000, 0x2, 0x1, 0x6}}, 0x44) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000040)=0xfff, &(0x7f00000000c0)=0x4) 16:15:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x34000}}, 0xa) 16:15:48 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0xc0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1cc, r1, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x8c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100000001}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x69}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3a}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5e1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffffff47}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @loopback, 0x101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x618b}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x80}, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448cb, 0x0) 16:15:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2080, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x10000, 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) execveat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)='\\\x00'], &(0x7f0000000200)=[&(0x7f0000000100)='cpusetcpuset%\x00', &(0x7f0000000140)='\\ppp0em1!ppp1trusted/*+security\x00', &(0x7f0000000180)='(&#[/#[\x00', &(0x7f00000001c0)='^+posix_acl_access.ppp1trusted\x00'], 0x1000) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000240)={[0x4000, 0xf001, 0x3000, 0x3000], 0x81, 0xc, 0x6}) 16:15:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getgroups(0x4, &(0x7f0000000080)=[0xffffffffffffffff, 0x0, 0x0, 0x0]) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() fstat(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f0000000180)=[r2, r3, r4, r5, r6]) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xfe, 0x4f, 0x4, 0xffffffffffffb1ca, 0x3, 0x3e, 0x7, 0x1a7, 0x40, 0x83, 0xa6c6, 0xe68e, 0x38, 0x1, 0x3, 0x5, 0x3}, [{0x3, 0x0, 0x450, 0xa6, 0x7, 0x4, 0x0, 0x9a2}], "365605ed5d0629ffb5a14d3b25494ee3f232e1fe33639f7b830f8e7d45ecaa419ec55c4944a860108f484272ea78eead0ca1f898d49ec1eb348d0d0b1bf5a2fa59d8df8ada52632b02cd1a97bbfd88adad1bedf193e05e5a37b5db61437a8e1f8ca360", [[], [], [], [], [], [], [], []]}, 0x8db) 16:15:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x400300}}, 0xa) 16:15:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000200)={0x2, &(0x7f00000000c0)=[{}, {}]}) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000080)=0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) 16:15:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x1000000}}, 0xa) 16:15:49 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001300)='/dev/vfio/vfio\x00', 0x20001, 0x0) write$P9_RLINK(r1, &(0x7f0000001340)={0x7, 0x47, 0x1}, 0x7) r2 = dup(r0) recvfrom$inet6(r2, &(0x7f00000002c0)=""/4096, 0x1000, 0x40, &(0x7f00000012c0)={0xa, 0x4e24, 0x10000, @ipv4={[], [], @broadcast}, 0x7}, 0x1c) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r3, 0x2, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x100000000, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000014) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:49 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x40) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x8001, 0x1, 0x4, 0x20, 0x5}, 0x14) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r1) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f00000000c0)=0x8) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x19, 0x4) 16:15:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:49 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000014) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) 16:15:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000080)=0x40000) 16:15:49 executing program 4: getpid() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0xffff, 0x4003) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000000c0)) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000040)={{0x80, 0x1, 0x6, 0x7, 0x0, 0x6}, 0x8, 0x386, 0x800}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x2) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r1}, 0x10) r2 = dup(r0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x10000}, 0x2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d4, &(0x7f0000000100)={0x6a734f37b577d30e, 0x0}) 16:15:49 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x2000000}}, 0xa) 16:15:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0xffffffffffffffe1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e24, @broadcast}}}, 0x84) 16:15:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x0}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000100)={r2, 0x2}) r3 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448cb, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000000)={0x1, 0x2000000000000000}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x422, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 16:15:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'vlan0\x00', {0x2, 0x4e20, @multicast1}}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:49 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x8a) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000100)={[{0xffff, 0x2, 0x1, 0x3821, 0x6, 0xfffffffffffff0b7, 0x2, 0x20d7, 0x40, 0x8000, 0x1, 0x7, 0x4}, {0x800, 0x9, 0x7, 0x7, 0x81, 0x9, 0x7, 0x400, 0xe0db, 0x3, 0x7, 0x7, 0x8000}, {0x45bd, 0x0, 0x8, 0x4, 0x6, 0x49, 0x7e, 0xfffffffffffffffb, 0x4, 0x0, 0x800, 0x9cb, 0xfffffffffffffffe}], 0x9}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x282800, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r4 = dup(r1) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x8, 0x200) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) accept4$alg(r1, 0x0, 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0xa, 0x0, 0x93e, 0x8, 'syz0\x00'}, 0x0, [0x8, 0x8, 0x10000, 0x3, 0x5, 0xff, 0x2, 0x1, 0x0, 0xfff, 0x7, 0xd7, 0x3ff, 0x8, 0x8, 0x3, 0x6, 0x3, 0x0, 0x5, 0x80000000, 0x2, 0x80, 0xffffffffffff0000, 0x4, 0x0, 0x7f, 0x7fff, 0x2, 0xb9cf, 0x6, 0x6, 0x1, 0x8, 0x3f, 0x5, 0x3f, 0x1, 0x20, 0xff, 0x2a, 0x93, 0x3, 0x2, 0x8, 0x8000, 0x10000, 0x80000000, 0x1, 0x5, 0x1, 0x2, 0x9, 0x7ff, 0x2, 0x9, 0x7f, 0x7, 0x8, 0x5, 0x6, 0x1c9, 0x200, 0x3f, 0x5, 0x7, 0xba, 0x3, 0x7, 0x7e, 0x7, 0x400000008, 0x7, 0x1, 0x8, 0x6, 0xfffffffffffffff8, 0x1f, 0x800, 0x3, 0x2, 0x3, 0x2c, 0x100, 0x2, 0x5, 0x4, 0xe7bf, 0x7, 0x5, 0x8, 0x1786, 0x2, 0x2, 0x7, 0x3f8, 0x0, 0x7, 0x9, 0x4, 0x1000000000, 0x8, 0x9, 0x2, 0x400, 0x6, 0x1, 0x2, 0x20, 0x23d5, 0x8, 0x20, 0x9, 0x5, 0x10000000000, 0x921, 0x2, 0x44, 0x6, 0x6, 0x4, 0x401, 0x81, 0x0, 0x6, 0x3, 0x0, 0x56e]}) connect$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{}, 0x3}}, 0x10) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={[], [], @broadcast}, 0x6, 0x1, 0x0, 0x9, 0x200, 0x8}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000980)=0xe8) lstat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000c40)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000c80)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000000d80)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000dc0)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000ec0)=0xe8) lstat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001080)={0x0, 0x0}, &(0x7f00000010c0)=0xc) r13 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001100)={0x0, 0x0, 0x0}, &(0x7f0000001140)=0xc) fsetxattr$system_posix_acl(r1, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="02000000010007000000000002000200", @ANYRES32=r3, @ANYBLOB="02000700", @ANYRES32=r4, @ANYBLOB="02000300", @ANYRES32=r5, @ANYBLOB="02000100", @ANYRES32=r6, @ANYBLOB="02000400", @ANYRES32=r7, @ANYBLOB="02000700", @ANYRES32=r8, @ANYBLOB="02000700", @ANYRES32=r9, @ANYBLOB="02000400", @ANYRES32=r10, @ANYBLOB="06401375", @ANYRES32=r11, @ANYBLOB="02000000", @ANYRES32=r12, @ANYBLOB="040001000000000008000200", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="10000100000000002000070000000000"], 0x84, 0x3) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:49 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x3000000}}, 0xa) 16:15:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3f) 16:15:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = msgget$private(0x0, 0x300) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/84) r2 = dup(r0) getresuid(&(0x7f0000000000), &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) r6 = getgid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000280)={{0x4, r3, r4, r5, r6, 0x0, 0xb045}, 0x2, 0xff, 0x8, 0x0, 0xffffffffffff963f, 0x6, r7, r8}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:49 executing program 0: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c, 0x800) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x660, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) ioprio_get$uid(0x3, r3) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) 16:15:49 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x40000, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x101000, 0xc0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9) r3 = dup(r1) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) write(r0, &(0x7f00000000c0)="882093d7cde70deb6bbe207bb22a73cf880521629f8ca6bf3d0793a0f6fd1611d1bbe3b0327c9841af9dbea835611991cc06df2e431b652cb0da19f7b4ad9b6132009cad06adf5156ea90ab6b69b160f1caac49773b00ce44b014adc482738995dbbbba246f62524ed1224da66965128515b9ec0beb02b830a3a04ccb74f444800cf8a4643bac51413b512ee3ebbbd3a9900bf495281e847590d954d51fdbbc33d88b616b3e8395c210a60e6d09ddcb96e41e0cb269acf61ea0da1a709702bd8a52a37bdd5f7fe969402d722858b36b40e81268ead83c30d705a31c647d7d3e368e7e78dcd70f21d03fc48", 0xeb) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000080)) getdents64(r1, &(0x7f00000002c0)=""/244, 0xf4) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000280)={0x9, @remote}) socket$bt_cmtp(0x1f, 0x3, 0x5) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000003c0)={0x1, &(0x7f00000001c0)=[{}]}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000440), &(0x7f00000004c0)=0xffffffffffffffc1) 16:15:49 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x4000000}}, 0xa) 16:15:49 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e22, @local}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'caif0\x00', {0x2, 0x4e22, @remote}}) 16:15:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5, 0x101000) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="09000000ff0600db95"], 0x16) r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 16:15:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000080)={'ip_vti0\x00', 0xfffffffffffffffb, 0x7f}) r2 = fcntl$getown(r1, 0x9) prlimit64(r2, 0x5, &(0x7f0000000000)={0x1, 0x3f}, &(0x7f0000000040)) 16:15:49 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x5000000}}, 0xa) 16:15:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0xfffffffffffffffe}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) readahead(r1, 0xfffffffffffffffb, 0x59b6108e) clock_getres(0x7, &(0x7f0000000080)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x80800, 0x0) 16:15:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) recvfrom$rxrpc(r1, &(0x7f0000000080)=""/252, 0xfc, 0x2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @loopback, 0x2c6}}, 0x24) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x9) 16:15:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x1, 0x0) faccessat(r1, &(0x7f00000000c0)='./file0\x00', 0x141, 0x0) r2 = dup(r0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000000)={0x7c0, 0x3, 0x4}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) 16:15:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'yam0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@rand_addr="14e65491e9b8ee73626c77e07e3da269", 0x3c, r2}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) accept$ax25(r1, &(0x7f0000000080)={{0x3, @null}, [@netrom, @null, @default, @rose, @default, @null, @null, @netrom]}, &(0x7f0000000040)=0x2a) getcwd(&(0x7f0000000280)=""/226, 0xe2) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000140)={0x3c4, &(0x7f00000001c0)=[{}]}) 16:15:50 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) fallocate(r0, 0x20, 0x40, 0x2) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x6000000}}, 0xa) 16:15:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x2}) 16:15:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_1\x00', 0x1}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000140)=""/46) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000080)) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000001c0)={0x0, 0x1, 0x6, @local}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000026c0)={0xa, 0x0, [{0x5000, 0x32, &(0x7f00000000c0)=""/50}, {0x5000, 0x1000, &(0x7f0000000200)=""/4096}, {0x0, 0x1000, &(0x7f0000001200)=""/4096}, {0x7000, 0x9e, &(0x7f0000002200)=""/158}, {0xd000, 0xbc, &(0x7f00000022c0)=""/188}, {0x3, 0x5, &(0x7f0000000100)=""/5}, {0x5001, 0xa9, &(0x7f0000002380)=""/169}, {0x0, 0x91, &(0x7f0000002440)=""/145}, {0x5000, 0x95, &(0x7f0000002500)=""/149}, {0x1000, 0xdb, &(0x7f00000025c0)=""/219}]}) 16:15:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x7000000}}, 0xa) 16:15:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x8001, 0x9, 0x3e8, 0x80000000}, 0x10) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x82002) 16:15:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'\x00\x00\x00\x00\x00\x00\x00]\x00\xdb\xc1\xaf[\xff\xff\xff', {0x2, 0x0, @remote}}) 16:15:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x24, 0xfffffffffffffffa, {"1be76e03c3c7ebeb40bb"}}, {0x0, "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"}}, &(0x7f0000000780)=""/232, 0x121, 0xe8, 0x1}, 0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}, 0x0, 0x7251, 0x7fffffff, 0x1, 0x44}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={r3, 0x9}, &(0x7f0000000340)=0x8) r4 = syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDIO(r4, 0x40345622, &(0x7f0000000900)={0x2, "33c8f3676b29415af189b927af2c99ea7fa33a1ed530d579c280c7c79a92aedb", 0x1, 0x1}) ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f0000000540)={@null, @bcast, 0x2, 0x44}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x802, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c6c6f6f73652c6163636573733d83a0636f316594a05f58d6a09e086ac40eb2e77edd7449622b739eeb81612c0de3d7e2768d9f69c59adc4bb5e38548433e7237658ebb10042ea3534282639203e04f0e568ed2c23e8b069b0cec9fee8128b7fe1c8891", @ANYRESDEC=r5, @ANYBLOB=',loose,version=9p2000.L,audit,rootcontext=root,smackfsdef=TIPCv2\x00,obj_role=#proc%,obj_type=-lo]\nbdev,\x00']) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="b9150a7d95a71062997ecef7440baa72019c0199891fd6220a000000000006000000000000000000", @ANYRES16=r2, @ANYBLOB="220b2bbd7000ffdbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000180)={{0x2, 0x7}, 0x1, 0x8000, 0x5, {0x9, 0x7}, 0x1, 0x1000010efd}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:50 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x998c, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") fstat(r2, &(0x7f00000001c0)) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x141100, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, r4, {0xfff2}, {0xffff, 0x5}, {0x7, 0x1f}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20000081) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f00000000c0)) r5 = dup(r0) bind$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:50 executing program 1: rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000140)='mime_type{\x00', 0xfffffffffffffff9) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000180)='\'\x00') ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={'bcsh0\x00', {0x2, 0x0, @remote}}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x40, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000200)=0x3) 16:15:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x48000000}}, 0xa) 16:15:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r1, &(0x7f0000000080)="4cddf4f597e187623f2a52e6f758b3e03169ddf64c2472c6f8011473ce22edf8674d46255aca2d59dc733bf1d5436092a4149258cce82ee259be5e067a907a9ef2a9853da53c1dc52718b20be02e00ee42edb3ba9b4451b61f9542093f189c2c1df72c6bac74bfb922f4330e4bf001ac522c", &(0x7f0000000100)=""/81}, 0x18) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x80040, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x400, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)={0x2, 0x9, 0x4, 0x100008, {0x0, 0x2710}, {0x7, 0xf, 0x5, 0x2f7, 0x400, 0x1, "e1ba183b"}, 0x5, 0x7, @userptr=0xfffffffffffff800, 0x4}) r2 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) syz_open_pts(r2, 0x0) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000040)="e442d70dc850bd53bd83ba024b4814e516a2da9b86e4eafa146c690919e48eb60d92ed8dcef627926b21c7b39301c49046ce14e4e9fac00662027e1b1d9731bb7e2929b3ec9ca1dfe04c0a86bbd214401fd02bc778010d30ac04d09b019bfce0995ef13daf8e778f42246f3731850d3705845e3059f927d1b54e71780bf62494ee8a8f1668931399c26963c0aaab2ef20ebe69ca21e19e4a832d38a18154862f3657d798e002674d32daee7cb80a0365b477b088e224ef9bd0afe0e187a4074a264e2a29c02502206fcc09199089a5abf2285a67e5d71a6ba35990ab6bf73abffbc1541792f3bac02b82e1e66f", 0xed) 16:15:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x4c000000}}, 0xa) 16:15:51 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @bcast}, [@bcast, @null, @bcast, @netrom, @null, @null, @null, @rose]}, &(0x7f00000000c0)=0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000001200)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001240)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000001340)=0xe8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000001840)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001380)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000001480)=0xe8) r7 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001a40)={0x0, 0x0}, &(0x7f0000001a00)=0x34d) r9 = getgid() sendmsg$netlink(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000001c0)={0x1020, 0x2e, 0x400, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0x5b, @uid=r3}, @typed={0x8, 0x22, @ipv4=@empty}, @generic="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"]}, 0x1020}, {&(0x7f00000014c0)={0x31c, 0x23, 0x100, 0x70bd29, 0x25dfdbfe, "", [@typed={0x8, 0x67, @ipv4=@broadcast}, @nested={0x250, 0x7a, [@typed={0x10, 0x8f, @str='/dev/hwrng\x00'}, @typed={0x8, 0x18, @pid=r4}, @generic="303a73c1bbe4b985d88ace471526bdb45f8a6bc755b8b2b9c82386fbb0f4a3d0cb06eadb291c50a2950e8ab506445d32a3a7b0d6250697dc37f9c0eeca94a321332f08dca15b0099a66b13b64df95a961d5fcd0e188fe229", @typed={0x8, 0x36, @uid=r5}, @typed={0x8, 0x67, @u32=0x9}, @generic="9922e7b7743a74844973fbf52fc4b0cd87dd8891bc73cceb5c9da63cc6722f6af2aaf851ade3bfda5e84169b112302854a0e904a9c07e68501694e04b3721b76e29d1c5985d6536de9d527f18984ff711444ed79776fc146564676f950787b04392a9a2c9612909d33248036b750a3aa5cd198de6eb99a9d7701094a28fd5ace0c7a695d633514a769fb19e161c4cfcface2d64b467ca189266209becefa596bcd6377f95a992ca152d352f01535825fcdcf5576883388d928dc04d9329e877b3f048b", @generic="982746b90228e79351062571e38a6ae5b1a5896e9c13016581c3737b5c1e183b8fb8f2ef3b48a38f3fcbe3e9debdc2cdcb60b4cad91ae76f586cb9d957c70c0280ddb3a7c960f98c57dc4f2a85ba2da6cd0ac9151fecece1efb895a7a60fe220cb417de6aaac993541e344ebb8818f99a6053e48d7cdf7615728d577af67aecd73d982a0e9af4abd0728193c25a088a8a725eb50cf2ea77c66e933b5e2dc2f2d0c10905fbef029e3f8bb4d278c38ee78c1a8c509", @typed={0x8, 0x95, @fd=r1}, @generic="5241b9dc0ffabfabc75a87748eb355fccd3cafe1dee337a33ff6883c768a4e13fb3d4e963f3850bda490a82441b6984a856ae042f3146e4edeed962b8c2880e97307372cc0", @typed={0x8, 0x3, @uid=r6}]}, @nested={0xa4, 0x2d, [@generic="a2cd18589846254e5598f0231af47173118aefe0b1c3a6522ca8a3eb6a2d36b0e58f4825609232c3f005777e15c4c42cd7d72eafce16e8c56ec4979503cd9f478566d68e26d99fe8463b60c600b33d99c37191889054e40fce26fb36fb70287a91fa95eb1cda81a14b01f499dafd2cf099e745fff3584aedc6bb479e50fc1869ae379c8463584eea6546793a1cae53202cdca51101ef", @typed={0x8, 0xe, @u32}]}, @typed={0x8, 0x47, @ipv4=@loopback}, @generic="c2e5a264a06a"]}, 0x31c}], 0x2, &(0x7f00000018c0)=[@rights={0x28, 0x1, 0x1, [r1, r1, r1, r0, r1]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x28, 0x1, 0x1, [r1, r0, r2, r2, r1, r1]}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x20, 0x1, 0x1, [r1, r2, r2]}], 0xa8}, 0x800) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) 16:15:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000080)={0x6, 0x7f, 0x5, 'queue0\x00', 0x6}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) 16:15:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000100)={'broute\x00', 0x0, 0x4, 0x18, [], 0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}], &(0x7f0000000000)=""/24}, &(0x7f0000000180)=0x78) 16:15:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup3(r0, r0, 0x80000) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000040)=0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0x127) 16:15:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) read$rfkill(r0, &(0x7f0000000080), 0x8) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x40000, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000200)={0x6, 0xff, 0x1}) r3 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448cb, 0x0) ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f00000000c0)={0x6b, "c2b3916804a99c72591891d5659e6345088f9fe8a640084d893e4fca8a1769a30d2bae36729247e7caccdc6d67c031e1f25d25c800a471cbb070a21d5b63c23215effc87a9c80330565ebf168c1343318b15601a51207d146845b6e0c557cacfa7a55afdb093cd0e4ff032a0fa21431c99e5e7ba355a48e30cc4b8a32c031f20"}) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000240)={0x1, 0x605, 0x1}) socket$alg(0x26, 0x5, 0x0) mq_open(&(0x7f0000000000)='.\xe3\x00', 0x40, 0x1, &(0x7f0000000040)={0x9, 0x1, 0x7fff, 0x7, 0x5, 0x75ef, 0x1, 0x1ff}) read$rfkill(r3, &(0x7f0000000180), 0x8) 16:15:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0xfffffffffffffe13, 0x0}) 16:15:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x68000000}}, 0xa) 16:15:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4442000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x70, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x17}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x2000, 0x0) 16:15:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x800, 0x20002) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="70872ba755fe4bdc628b48e31a77354440b7bf45ba15c0322464ab5e34cb42", 0x1e6) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f0000000040)={0x3, 0x100000000}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0xc) 16:15:51 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8080, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x9, 0x30, 0x1b, 0xffffffffffff2a5f}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYBLOB="01008c00e78ceefe6270b892b39526e1411831d1a2b613c4b6deff04fd6c4940241d69d05c5de116685f63bcce6008118d658dd01c134213bb075455ed2e41829378ab56d12c6889fe0fba072fbe87f8ce7805d05305bbc4107936305b6e09cb31fc0069b49ef7ddd29cc1c89d147c4f18e76590e5c683ef3868135818a1b9262535ac13f3cc814565b511ed085eb3c6"], 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000080)=0x4) 16:15:51 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="23000000140081ae00060c00000f000002000000fe0000018701546fabca1b4e7d06a4", 0x23}], 0x1}, 0x0) 16:15:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x6c000000}}, 0xa) 16:15:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000080)=""/231) 16:15:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x42) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000040)=0x200) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xfffffffffffffffc, 0x1ff, 0x0, 0xfffffffffffffffd, 0x0, 0x9}}, 0xa) 16:15:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x20002) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() write$FUSE_CREATE_OPEN(r1, &(0x7f0000000140)={0xa0, 0x0, 0x7, {{0x5, 0x1, 0x400, 0x5, 0x8, 0x81, {0x3, 0xff, 0x2, 0x80, 0x101, 0x8, 0xa50, 0x200, 0x6c7d, 0x3ff, 0x7fff, r2, r3, 0x100000001, 0x401}}, {0x0, 0x7}}}, 0xa0) r4 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) [ 795.586565][T12302] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.3'. [ 795.639532][T12308] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.3'. 16:15:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) accept$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) r2 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) 16:15:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x74000000}}, 0xa) 16:15:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x8000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x3) 16:15:52 executing program 3: 16:15:52 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000000)={0xfffffffffffffffe, 0xa638, 0x8}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x20, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) bind$alg(r5, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000340)=""/249, 0xf9}], 0x3}}], 0x600, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d4, &(0x7f00000001c0)={0xfedb, 0x0}) 16:15:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) 16:15:52 executing program 3: 16:15:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") dup(r0) 16:15:52 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x204100) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000080)=0xe, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'bcsf0\x00', {0x2, 0x4e21, @remote}}) 16:15:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x7a000000}}, 0xa) 16:15:52 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x1ff, 0x200000) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000040)) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) 16:15:52 executing program 3: 16:15:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x2c9, 0x0}) 16:15:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0xffffff7f}}, 0xa) 16:15:52 executing program 3: 16:15:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x648001, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000040)={0x0, {0x60, 0x2}}) r2 = dup(r1) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') accept$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'nr0\x00', 0x0}) accept4$packet(r1, &(0x7f0000004300)={0x11, 0x0, 0x0}, &(0x7f0000004340)=0x14, 0x80000) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x7f, 0x31363553, 0x3, @discrete={0x9, 0x40}}) getpeername$packet(r2, &(0x7f0000004440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004480)=0x14) accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x1c, 0x0) accept$packet(r2, &(0x7f00000044c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004500)=0x14) getpeername$packet(r2, &(0x7f0000004a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004a80)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000004dc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004d80)={&(0x7f0000004ac0)=ANY=[@ANYBLOB="b0020000", @ANYRES16=r3, @ANYBLOB="010028ccffffffdb1dec2f411f758bae495e", @ANYRES32=r4, @ANYBLOB="4400020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400a4000000080007000000000008000100", @ANYRES32=r5, @ANYBLOB="c4010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400cf00000008000600", @ANYRES32=r7, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400d10e000008000600", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="7c00020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040001000000080007000000000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040005000000"], 0x2b0}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800040a0}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r10, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r1}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8801}, 0x20000004) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) 16:15:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000000080)="90a80b976ebecf5e9adb47deb06c50cd3dfec9685125e041945145a49725f1e083f53d6928b446102856c656390705f289561878670b6e76e3757e0084e81bc281a68b65b3d6c95b9e348fca9c3f0fe377415a92f2d52d97fbe080da00d4d0be923dec634015bb3b66998efb3e3e2e20a7ba683d0e3e2d831d3200b685e1a843aee87c2072a3e869a12c6bbcb5261c6f5d7e794d1a3fe986a0") r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0xc000) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x4, 0x7}, 0x4}, 0x10) 16:15:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x3, 0x9, 0x101, 0x720e}, {0x52, 0x743, 0x12000000, 0x101}, {0x9, 0x400, 0x800, 0x401}, {0xeb3e, 0x100000001, 0xfffffffffffffe01, 0x100000001}]}, 0x10) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @broadcast}, {0x0, @broadcast}, 0x4a, {0x2, 0x0, @remote}, 'ip_vti0\x00'}) 16:15:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r2, &(0x7f0000002000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000007ff0)={0x1d, r3}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}}, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r4 = dup(r0) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x40030000000000}}, 0xa) 16:15:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_nanosleep(0x7, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000080)) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x2) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) r1 = dup(r0) write$FUSE_ATTR(r1, 0x0, 0x0) 16:15:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) fcntl$setpipe(r1, 0x407, 0x2) fcntl$setflags(r1, 0x2, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) [ 796.858492][T12534] sg_write: process 3574 (syz-executor.3) changed security contexts after opening file descriptor, this is not allowed. 16:15:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x100000000000000}}, 0xa) 16:15:53 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="240000001e0081aee4050c00000f10fe070101000000000063da9a9a1cae18c1eebd11da", 0x24}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) 16:15:53 executing program 4: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, {0xffffffff, 0x610e, 0x81, 0x6, 0x4, 0xfffffffffffffff9}, 0x5}, 0xe) r1 = dup(0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'lapb0\x00', 0x3}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fdatasync(r0) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) 16:15:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000040)) 16:15:53 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000c40)='cpu&5\n\n\n\x00\x00\x01\x00\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05') r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000040)=r0, 0x52d) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) close(r0) mkdir(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, 0x0}, 0x0) 16:15:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) setsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000080)="a5ba1896fab4da4e5b6f6173ef3c7dd72f22b81ce970ad5d2714aa362d12097432fb479ffd02faa52e505c8fd58363647edd0c2794ec6bfcfe291eb6e5a6878a1bbbfb6558c5d9f7628015", 0x4b) 16:15:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x200000000000000}}, 0xa) 16:15:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0) r2 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448cb, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x0, 0x4000, 0x3ff, 0x486, 0x3}) sendto$inet(r1, &(0x7f0000000080)="4fc557cc1b592d4f485070f2f85223cf90569f4c2d65613fc1d1819480991bd6658715adb3c7f3484a62f6cbb8e1fb3054c6ecf42fdb615de797925a475f80e158f6e5be4745e31cf0daa1884affdc4ce03696eb5438ded24be04b", 0x5b, 0x44040, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) 16:15:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) 16:15:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x300000000000000}}, 0xa) 16:15:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18, 0xffffffffffffffff, 0x7, {0x9}}, 0x18) 16:15:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000100)={0x0, 0x0}) 16:15:53 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x1fc, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 16:15:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x40000040) 16:15:53 executing program 1: rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'nr0\x00', {0x2, 0x4e24, @empty}}) 16:15:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) flistxattr(r0, &(0x7f00000000c0)=""/125, 0x7d) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000001c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = creat(&(0x7f0000000000)='./file0\x00', 0x42) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x80000, 0x0) renameat2(r2, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00', 0x0) dup(r0) 16:15:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) 16:15:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x400000000000000}}, 0xa) 16:15:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20000001) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x68}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000003600000049007000fcdbdf250b000000a982c008c31767816591926957fc570000000000803ab1decf8669df177bd1287d6468b0ff152fa8e1c799301eff0bc3adb50867ebf3a9f7ac97c825fa2c02a23f935f772b686f4887"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r4 = dup(r0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d4, &(0x7f0000000040)={0x0, 0x0}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000540)={0x3, &(0x7f0000000380)=[{}, {}, {}]}) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f00000000c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000002c0)=0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000600)="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") 16:15:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x6, 0x40000) dup3(r0, r0, 0x80000) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x2, 0x800) r2 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x9, 0xec5146b1286a180) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 16:15:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x500000000000000}}, 0xa) 16:15:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x42080, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xb59, 0x9, 0x100, 0x7fff, 0x20}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0xaaa, 0x30}, 0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2480, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 16:15:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, 0x0) 16:15:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(r0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2, 0x0, 0x0, 0x600000000000000}}, 0xa) [ 797.907744][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 797.913572][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 797.919565][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 797.925365][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 798.227940][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 798.233729][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 798.468795][T12793] ================================================================== [ 798.484079][T12793] BUG: KASAN: use-after-free in skb_release_data+0x11d/0x7a0 [ 798.491454][T12793] Write of size 4 at addr ffff88809b3f8760 by task syz-executor.3/12793 [ 798.499770][T12793] [ 798.502265][T12793] CPU: 0 PID: 12793 Comm: syz-executor.3 Not tainted 5.1.0-rc2-next-20190327 #12 [ 798.511488][T12793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.522000][T12793] Call Trace: [ 798.525299][T12793] dump_stack+0x172/0x1f0 [ 798.529624][T12793] ? skb_release_data+0x11d/0x7a0 [ 798.534644][T12793] ? skb_queue_purge+0x19/0x40 [ 798.539410][T12793] print_address_description.cold+0x7c/0x20d [ 798.545403][T12793] ? skb_release_data+0x11d/0x7a0 [ 798.550442][T12793] ? skb_release_data+0x11d/0x7a0 [ 798.555461][T12793] ? skb_queue_purge+0x19/0x40 [ 798.560310][T12793] kasan_report.cold+0x1b/0x40 [ 798.565064][T12793] ? skb_dequeue+0x71/0x180 [ 798.569555][T12793] ? skb_release_data+0x11d/0x7a0 [ 798.574572][T12793] check_memory_region+0x123/0x190 [ 798.579681][T12793] kasan_check_write+0x14/0x20 [ 798.584625][T12793] skb_release_data+0x11d/0x7a0 [ 798.589488][T12793] ? sock_rfree+0x121/0x180 [ 798.594015][T12793] ? skb_queue_purge+0x19/0x40 [ 798.598801][T12793] skb_release_all+0x4d/0x60 [ 798.603415][T12793] kfree_skb+0xe8/0x390 [ 798.607583][T12793] skb_queue_purge+0x19/0x40 [ 798.612234][T12793] packet_release+0x8eb/0xbf0 [ 798.616920][T12793] ? packet_set_ring+0x1b50/0x1b50 [ 798.622030][T12793] ? lock_acquire+0x16f/0x3f0 [ 798.626721][T12793] ? __sock_release+0x89/0x2b0 [ 798.631486][T12793] __sock_release+0xd3/0x2b0 [ 798.636075][T12793] ? __sock_release+0x2b0/0x2b0 [ 798.641138][T12793] sock_close+0x1b/0x30 [ 798.645288][T12793] __fput+0x2e5/0x8d0 [ 798.649260][T12793] ____fput+0x16/0x20 [ 798.653241][T12793] task_work_run+0x14a/0x1c0 [ 798.657843][T12793] do_exit+0x90a/0x2fa0 [ 798.662000][T12793] ? __pv_queued_spin_lock_slowpath+0xd30/0xd30 [ 798.668233][T12793] ? get_signal+0x331/0x1d50 [ 798.672819][T12793] ? mm_update_next_owner+0x640/0x640 [ 798.678189][T12793] ? _raw_spin_unlock_irq+0x28/0x90 [ 798.683378][T12793] ? get_signal+0x331/0x1d50 [ 798.689406][T12793] ? _raw_spin_unlock_irq+0x28/0x90 [ 798.694782][T12793] do_group_exit+0x135/0x370 [ 798.699774][T12793] get_signal+0x399/0x1d50 [ 798.704214][T12793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 798.710561][T12793] ? fsnotify+0x811/0xbc0 [ 798.714955][T12793] do_signal+0x87/0x1940 [ 798.719196][T12793] ? __vfs_write+0x95/0x110 [ 798.723723][T12793] ? setup_sigcontext+0x7d0/0x7d0 [ 798.728746][T12793] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 798.734994][T12793] ? fput_many+0x12c/0x1a0 [ 798.739415][T12793] ? ksys_write+0x166/0x1f0 [ 798.745524][T12793] ? exit_to_usermode_loop+0x43/0x2c0 [ 798.750925][T12793] ? do_syscall_64+0x52d/0x610 [ 798.755693][T12793] ? exit_to_usermode_loop+0x43/0x2c0 [ 798.761066][T12793] ? lockdep_hardirqs_on+0x418/0x5d0 [ 798.766382][T12793] ? trace_hardirqs_on+0x67/0x230 [ 798.772723][T12793] exit_to_usermode_loop+0x244/0x2c0 [ 798.778042][T12793] do_syscall_64+0x52d/0x610 [ 798.782634][T12793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 798.788520][T12793] RIP: 0033:0x458209 [ 798.792436][T12793] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 798.812064][T12793] RSP: 002b:00007f9efc8d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 798.820485][T12793] RAX: 0000000000008da0 RBX: 0000000000000003 RCX: 0000000000458209 [ 798.828467][T12793] RDX: 00000001000001bd RSI: 0000000020002300 RDI: 000000000000000b [ 798.836454][T12793] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 798.844423][T12793] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9efc8da6d4 [ 798.852405][T12793] R13: 00000000004c75b4 R14: 00000000004dd180 R15: 00000000ffffffff [ 798.860464][T12793] [ 798.862780][T12793] Allocated by task 12785: [ 798.867189][T12793] save_stack+0x45/0xd0 [ 798.871341][T12793] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 798.877178][T12793] kasan_kmalloc+0x9/0x10 [ 798.881502][T12793] __kmalloc_node_track_caller+0x4e/0x70 [ 798.887158][T12793] __kmalloc_reserve.isra.0+0x40/0xf0 [ 798.892518][T12793] __alloc_skb+0x10b/0x5e0 [ 798.896955][T12793] sk_stream_alloc_skb+0x113/0xd10 [ 798.902321][T12793] tcp_connect+0xfd8/0x4280 [ 798.906814][T12793] tcp_v4_connect+0x1514/0x1c40 [ 798.911950][T12793] __inet_stream_connect+0x83f/0xea0 [ 798.917350][T12793] tcp_sendmsg_locked+0x2314/0x34d0 [ 798.922560][T12793] tcp_sendmsg+0x30/0x50 [ 798.926792][T12793] inet_sendmsg+0x147/0x5e0 [ 798.931287][T12793] sock_sendmsg+0xdd/0x130 [ 798.935806][T12793] __sys_sendto+0x262/0x380 [ 798.940323][T12793] __x64_sys_sendto+0xe1/0x1a0 [ 798.945090][T12793] do_syscall_64+0x103/0x610 [ 798.949680][T12793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 798.955707][T12793] [ 798.958019][T12793] Freed by task 12793: [ 798.962076][T12793] save_stack+0x45/0xd0 [ 798.966225][T12793] __kasan_slab_free+0x102/0x150 [ 798.971454][T12793] kasan_slab_free+0xe/0x10 [ 798.976123][T12793] kfree+0xcf/0x230 [ 798.979943][T12793] skb_free_head+0x93/0xb0 [ 798.984349][T12793] skb_release_data+0x576/0x7a0 [ 798.989219][T12793] skb_release_all+0x4d/0x60 [ 798.993817][T12793] kfree_skb+0xe8/0x390 [ 798.997976][T12793] skb_queue_purge+0x19/0x40 [ 799.002557][T12793] packet_release+0x8eb/0xbf0 [ 799.007225][T12793] __sock_release+0xd3/0x2b0 [ 799.011863][T12793] sock_close+0x1b/0x30 [ 799.016026][T12793] __fput+0x2e5/0x8d0 [ 799.020003][T12793] ____fput+0x16/0x20 [ 799.024016][T12793] task_work_run+0x14a/0x1c0 [ 799.028599][T12793] do_exit+0x90a/0x2fa0 [ 799.032747][T12793] do_group_exit+0x135/0x370 [ 799.037476][T12793] get_signal+0x399/0x1d50 [ 799.041913][T12793] do_signal+0x87/0x1940 [ 799.046159][T12793] exit_to_usermode_loop+0x244/0x2c0 [ 799.051429][T12793] do_syscall_64+0x52d/0x610 [ 799.056043][T12793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 799.061932][T12793] [ 799.064253][T12793] The buggy address belongs to the object at ffff88809b3f8480 [ 799.064253][T12793] which belongs to the cache kmalloc-1k of size 1024 [ 799.078295][T12793] The buggy address is located 736 bytes inside of [ 799.078295][T12793] 1024-byte region [ffff88809b3f8480, ffff88809b3f8880) [ 799.091637][T12793] The buggy address belongs to the page: [ 799.097284][T12793] page:ffffea00026cfe00 count:1 mapcount:0 mapping:ffff88812c3f0ac0 index:0xffff88809b3f8900 compound_mapcount: 0 [ 799.109378][T12793] flags: 0x1fffc0000010200(slab|head) [ 799.114777][T12793] raw: 01fffc0000010200 ffffea00026e8c08 ffffea0002836b88 ffff88812c3f0ac0 [ 799.123364][T12793] raw: ffff88809b3f8900 ffff88809b3f8000 0000000100000004 0000000000000000 [ 799.131931][T12793] page dumped because: kasan: bad access detected [ 799.139026][T12793] [ 799.141342][T12793] Memory state around the buggy address: [ 799.146990][T12793] ffff88809b3f8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 799.155080][T12793] ffff88809b3f8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 799.163210][T12793] >ffff88809b3f8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 799.171286][T12793] ^ [ 799.179027][T12793] ffff88809b3f8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 799.187448][T12793] ffff88809b3f8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 799.196005][T12793] ================================================================== [ 799.204214][T12793] Disabling lock debugging due to kernel taint [ 799.215143][T12793] Kernel panic - not syncing: panic_on_warn set ... [ 799.221776][T12793] CPU: 0 PID: 12793 Comm: syz-executor.3 Tainted: G B 5.1.0-rc2-next-20190327 #12 [ 799.232254][T12793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.242305][T12793] Call Trace: [ 799.245598][T12793] dump_stack+0x172/0x1f0 [ 799.249934][T12793] ? skb_queue_purge+0x19/0x40 [ 799.254742][T12793] panic+0x2cb/0x65c [ 799.258640][T12793] ? __warn_printk+0xf3/0xf3 [ 799.263269][T12793] ? skb_release_data+0x11d/0x7a0 [ 799.268319][T12793] ? skb_queue_purge+0x19/0x40 [ 799.273407][T12793] ? preempt_schedule+0x4b/0x60 [ 799.278495][T12793] ? ___preempt_schedule+0x16/0x18 [ 799.283602][T12793] ? trace_hardirqs_on+0x5e/0x230 [ 799.288630][T12793] ? skb_release_data+0x11d/0x7a0 [ 799.294581][T12793] ? skb_queue_purge+0x19/0x40 [ 799.299468][T12793] end_report+0x47/0x4f [ 799.304215][T12793] ? skb_release_data+0x11d/0x7a0 [ 799.309249][T12793] kasan_report.cold+0xe/0x40 [ 799.314056][T12793] ? skb_dequeue+0x71/0x180 [ 799.318601][T12793] ? skb_release_data+0x11d/0x7a0 [ 799.323645][T12793] check_memory_region+0x123/0x190 [ 799.328751][T12793] kasan_check_write+0x14/0x20 [ 799.333514][T12793] skb_release_data+0x11d/0x7a0 [ 799.338356][T12793] ? sock_rfree+0x121/0x180 [ 799.342847][T12793] ? skb_queue_purge+0x19/0x40 [ 799.347599][T12793] skb_release_all+0x4d/0x60 [ 799.352189][T12793] kfree_skb+0xe8/0x390 [ 799.356338][T12793] skb_queue_purge+0x19/0x40 [ 799.360917][T12793] packet_release+0x8eb/0xbf0 [ 799.365585][T12793] ? packet_set_ring+0x1b50/0x1b50 [ 799.370768][T12793] ? lock_acquire+0x16f/0x3f0 [ 799.375434][T12793] ? __sock_release+0x89/0x2b0 [ 799.380185][T12793] __sock_release+0xd3/0x2b0 [ 799.384783][T12793] ? __sock_release+0x2b0/0x2b0 [ 799.389623][T12793] sock_close+0x1b/0x30 [ 799.393773][T12793] __fput+0x2e5/0x8d0 [ 799.397746][T12793] ____fput+0x16/0x20 [ 799.402162][T12793] task_work_run+0x14a/0x1c0 [ 799.406749][T12793] do_exit+0x90a/0x2fa0 [ 799.410902][T12793] ? __pv_queued_spin_lock_slowpath+0xd30/0xd30 [ 799.417141][T12793] ? get_signal+0x331/0x1d50 [ 799.421721][T12793] ? mm_update_next_owner+0x640/0x640 [ 799.427099][T12793] ? _raw_spin_unlock_irq+0x28/0x90 [ 799.432314][T12793] ? get_signal+0x331/0x1d50 [ 799.436902][T12793] ? _raw_spin_unlock_irq+0x28/0x90 [ 799.442121][T12793] do_group_exit+0x135/0x370 [ 799.446708][T12793] get_signal+0x399/0x1d50 [ 799.451128][T12793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 799.457362][T12793] ? fsnotify+0x811/0xbc0 [ 799.461680][T12793] do_signal+0x87/0x1940 [ 799.465907][T12793] ? __vfs_write+0x95/0x110 [ 799.470408][T12793] ? setup_sigcontext+0x7d0/0x7d0 [ 799.475425][T12793] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 799.481656][T12793] ? fput_many+0x12c/0x1a0 [ 799.486081][T12793] ? ksys_write+0x166/0x1f0 [ 799.490586][T12793] ? exit_to_usermode_loop+0x43/0x2c0 [ 799.496146][T12793] ? do_syscall_64+0x52d/0x610 [ 799.500992][T12793] ? exit_to_usermode_loop+0x43/0x2c0 [ 799.506437][T12793] ? lockdep_hardirqs_on+0x418/0x5d0 [ 799.511709][T12793] ? trace_hardirqs_on+0x67/0x230 [ 799.516733][T12793] exit_to_usermode_loop+0x244/0x2c0 [ 799.522013][T12793] do_syscall_64+0x52d/0x610 [ 799.526621][T12793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 799.532513][T12793] RIP: 0033:0x458209 [ 799.536396][T12793] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 799.555993][T12793] RSP: 002b:00007f9efc8d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 799.564412][T12793] RAX: 0000000000008da0 RBX: 0000000000000003 RCX: 0000000000458209 [ 799.572388][T12793] RDX: 00000001000001bd RSI: 0000000020002300 RDI: 000000000000000b [ 799.580345][T12793] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 799.588304][T12793] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9efc8da6d4 [ 799.596262][T12793] R13: 00000000004c75b4 R14: 00000000004dd180 R15: 00000000ffffffff [ 799.605117][T12793] Kernel Offset: disabled [ 799.609450][T12793] Rebooting in 86400 seconds..