, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_NMI(r1, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:44:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000f00000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffff7, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0xc0000080, 0x0, 0x40000073], [0xc1]}) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, r5, 0x300, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbb3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x1) 18:44:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x6c00000000000000) [ 2539.888165] Bluetooth: hci0: command 0xfc11 tx timeout [ 2539.893615] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2539.974994] Bluetooth: hci0: Frame reassembly failed (-84) [ 2539.975139] Bluetooth: hci0: Frame reassembly failed (-84) [ 2539.981241] Bluetooth: hci0: Frame reassembly failed (-84) 18:44:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:29 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000400300000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) [ 2540.022734] Bluetooth: hci1: Frame reassembly failed (-84) 18:44:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0xc0000080, 0x0, 0x40000073], [0xc1]}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)={0x7, 0x5, 0x2, 0x0, 0x7, 0x1, 0x0, 0x36, 0x5, 0x5, 0x3, 0xffffffff, 0x0, 0x1, 0x4, 0xffffffffffff4f43, 0x3f, 0xfffffffffffff68a, 0xa8c}) 18:44:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000f0ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2542.048054] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2542.048061] Bluetooth: hci1: command 0xfc11 tx timeout [ 2542.048096] Bluetooth: hci0: command 0xfc11 tx timeout [ 2542.055963] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:44:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x40049409, &(0x7f0000000080)=0x2) 18:44:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000034000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:31 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r2, 0x201, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0xc0000080, 0x0, 0x40000073], [0xc1]}) 18:44:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x7400000000000000) [ 2542.183715] nla_parse: 26 callbacks suppressed [ 2542.183725] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2542.211490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2542.216730] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2542.261108] Bluetooth: hci0: Frame reassembly failed (-84) [ 2542.282192] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2542.295316] Bluetooth: hci1: Frame reassembly failed (-84) [ 2542.302102] Bluetooth: hci1: Frame reassembly failed (-84) 18:44:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r6, 0x3}}, 0x18) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0xc0000080, 0x0, 0x40000073], [0xc1]}) 18:44:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000300", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2542.311513] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2542.321322] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:44:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000fffff000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:31 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2542.433005] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2542.471265] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:44:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x40000, 0x185) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000200)={0x1, 0x2, @stop_pts=0x80}) r4 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x1dd, 0x610000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000180)=0x81, 0x8) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0xc0000080, 0x0, 0x40000073], [0xc1]}) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) faccessat(r6, &(0x7f0000000040)='./file0\x00', 0x20, 0x1400) recvmsg(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/239, 0xef}, {&(0x7f0000000380)=""/215, 0xd7}], 0x2}, 0x160) 18:44:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000001000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2542.487597] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2542.510718] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2544.288126] Bluetooth: hci0: command 0xfc11 tx timeout [ 2544.288135] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2544.317147] Bluetooth: hci0: Frame reassembly failed (-84) [ 2544.368133] Bluetooth: hci1: command 0xfc11 tx timeout [ 2544.373584] Bluetooth: hci1: Entering manufacturer mode failed (-110) 18:44:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x40086602, &(0x7f0000000080)=0x2) 18:44:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:35 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x4, 0x4100) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000180)=0xfffffffffffffffa, 0x4) signalfd4(r3, &(0x7f00000001c0)={0xffffffff7fffffff}, 0x8, 0x800) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0xc0000080, 0x0, 0x40000073], [0xc1]}) 18:44:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x7a00000000000000) [ 2546.368144] Bluetooth: hci0: command 0xfc11 tx timeout [ 2546.373589] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:44:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2546.497242] Bluetooth: hci0: sending frame failed (-49) [ 2546.505177] Bluetooth: hci0: Frame reassembly failed (-84) [ 2546.521985] Bluetooth: hci1: Frame reassembly failed (-84) 18:44:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000003000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:35 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0x7, 0x0, 0x40000075], [0xc1]}) 18:44:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000e00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000004000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2548.528079] Bluetooth: hci1: command 0xfc11 tx timeout [ 2548.533540] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2548.540275] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:44:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x40087602, &(0x7f0000000080)=0x2) 18:44:39 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000f00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000005000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0xfffffffffffffffe, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0xc0000080, 0x0, 0x40000073], [0xc1]}) 18:44:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xfdfdffff00000000) [ 2550.608142] Bluetooth: hci0: command 0xfc11 tx timeout [ 2550.613601] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2550.666667] nla_parse: 22 callbacks suppressed [ 2550.666678] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2550.674111] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2550.712458] Bluetooth: hci0: Frame reassembly failed (-84) [ 2550.712688] Bluetooth: hci0: Frame reassembly failed (-84) [ 2550.719113] Bluetooth: hci0: Frame reassembly failed (-84) [ 2550.740235] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:44:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0xe2f, 0x200) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x301101, 0x0) r4 = request_key(&(0x7f0000000180)='.dead\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='/dev/kvm\x00', 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)=@secondary='builtin_and_secondary_trusted\x00') ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0xc0000080, 0x0, 0x40000073], [0xc1]}) 18:44:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2550.785768] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2550.795493] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2550.812622] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:44:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000006000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2550.891575] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2550.901388] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2550.914999] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2550.924347] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:44:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000007000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000006000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2552.768183] Bluetooth: hci0: command 0xfc11 tx timeout [ 2552.773695] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2552.858293] Bluetooth: hci1: command 0xfc11 tx timeout [ 2552.863774] Bluetooth: hci1: Entering manufacturer mode failed (-110) 18:44:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000080)=0x2) 18:44:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x480402, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400205) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x200000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x20000000000001) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0xc0000080, 0x0, 0x40000073], [0xc1]}) 18:44:42 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000f000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000007fffef08000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffff7f00000000) 18:44:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000a001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2553.000203] Bluetooth: hci0: Frame reassembly failed (-84) [ 2553.010600] Bluetooth: hci0: Frame reassembly failed (-84) [ 2553.022402] Bluetooth: hci1: Frame reassembly failed (-84) 18:44:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0xc0000080, 0x0, 0x40000073, 0x1], [0xc1]}) 18:44:42 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000003", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000e000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2555.008070] Bluetooth: hci0: command 0xfc11 tx timeout [ 2555.013514] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2555.088252] Bluetooth: hci1: command 0xfc11 tx timeout [ 2555.093855] Bluetooth: hci1: Entering manufacturer mode failed (-110) 18:44:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x80045432, &(0x7f0000000080)=0x2) 18:44:46 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fchmod(r0, 0x80) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0xc0000080, 0x0, 0x40000073], [0xc1]}) 18:44:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000000a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000f000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xfffffffffffff000) [ 2557.168167] Bluetooth: hci0: command 0xfc11 tx timeout [ 2557.173586] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2557.249238] nla_parse: 26 callbacks suppressed [ 2557.249248] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2557.264837] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2557.281006] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2557.315139] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2557.338819] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2557.352272] Bluetooth: hci0: Frame reassembly failed (-84) 18:44:46 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x201, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0xc0000080, 0x0, 0x40000073], [0xc1]}) 18:44:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000014000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2557.406712] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:44:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000000e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:44:46 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2557.544228] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2557.570278] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2557.585746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:44:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000040)=0xf004) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0xc0000080, 0x0, 0x40000073], [0xc1]}) [ 2557.606563] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:44:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x80045440, &(0x7f0000000080)=0x2) 18:44:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000000f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000020000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:48 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x73b983, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/134) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0xc0000080, 0x0, 0x40000073], [0xc1]}) [ 2559.328074] Bluetooth: hci1: command 0xfc11 tx timeout [ 2559.333548] Bluetooth: hci1: Entering manufacturer mode failed (-110) 18:44:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xe96d) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2559.408122] Bluetooth: hci0: command 0xfc11 tx timeout [ 2559.413638] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:44:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000014", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:44:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000003f000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:48 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$binfmt_aout(r0, &(0x7f0000000180)={{0xcc, 0x2, 0xffffffffffff8001, 0x180, 0x58, 0x5, 0x3d5, 0x80000000}, "9527b8ad0c5ccd3072abe55a25eba81ab0469085b656b9c6fa6ae5e2dad15461cbd8d8d531819a90ca74e4baae5728b00b5a492ce6ea821bb58b8cb5b7d39589ff7d92821f1af278d74b2d79625fda7b6d3e9c0042a2eb65bddbe7401831dd2de0bf5b05232f1e7b546eee6ebb58ac0097d515a7158574f01a916ba3dcf096756037671e6d3dfe5590b309595b07c1c4b4de1768d55c2552", [[], [], [], [], [], [], [], [], [], []]}, 0xab8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0xc0000080, 0x0, 0x40000073], [0xc1]}) 18:44:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x80086601, &(0x7f0000000080)=0x2) 18:44:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000701f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000048000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:48 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x600, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x28) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x9) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000100)) 18:44:48 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2559.687755] Bluetooth: hci0: Frame reassembly failed (-84) 18:44:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x2, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x2000) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0xfffffffffffffffa) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0xc0000080, 0x0, 0x40000073], [0xc1]}) 18:44:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000004c000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2559.815312] Bluetooth: hci1: Frame reassembly failed (-84) [ 2559.821406] Bluetooth: hci1: Frame reassembly failed (-84) 18:44:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000003f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:44:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000060000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:49 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000200), 0x800) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0xc0000080, 0x0, 0x40000073], [0xc1]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x101400, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r4, r5}}, 0x18) 18:44:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000060", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) [ 2561.728075] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2561.728083] Bluetooth: hci0: command 0xfc11 tx timeout [ 2561.750553] Bluetooth: hci0: Frame reassembly failed (-84) [ 2561.888048] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2561.888278] Bluetooth: hci1: command 0xfc11 tx timeout 18:44:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x80087601, &(0x7f0000000080)=0x2) 18:44:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000001f70", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:52 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000068000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:52 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x82, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180)=0xfffffffffffffff8, 0x3e4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0xc0000080, 0x0, 0x40000073], [0xc1]}) 18:44:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10403, 0x0) mq_getsetattr(r1, &(0x7f0000000100)={0xa81, 0x8, 0xffffffff, 0x401, 0x7fff, 0x80, 0x7, 0x10000}, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2563.808096] Bluetooth: hci0: command 0xfc11 tx timeout [ 2563.808186] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2563.876385] nla_parse: 32 callbacks suppressed [ 2563.876481] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2563.918980] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2563.931178] Bluetooth: hci0: Frame reassembly failed (-84) [ 2563.933841] Bluetooth: hci0: Frame reassembly failed (-84) [ 2563.943557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2563.972659] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2563.988933] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2564.008799] Bluetooth: hci1: Frame reassembly failed (-84) 18:44:53 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) creat(&(0x7f00000004c0)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 18:44:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000006c000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) [ 2564.019823] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:44:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000000000000000f0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2564.123916] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:44:53 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000300)='encrypted\x00', &(0x7f0000000340)={'syz'}, 0x0) [ 2564.165845] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2564.178213] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2564.187443] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2565.968041] Bluetooth: hci0: command 0xfc11 tx timeout [ 2565.968049] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2566.048030] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2566.048350] Bluetooth: hci1: command 0xfc11 tx timeout 18:44:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000080)=0x2) 18:44:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000074000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000040", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:44:57 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000007a00)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x5016, 0x0) 18:44:57 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080)) [ 2568.128378] Bluetooth: hci0: command 0xfc11 tx timeout [ 2568.133842] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:44:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000003", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000007a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={'syz'}, 0x0, 0xfffffffffffffffc) keyctl$assume_authority(0x10, 0x0) [ 2568.292125] Bluetooth: hci0: Frame reassembly failed (-84) 18:44:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xd) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 18:44:57 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000ffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000080)=0x2) 18:44:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000f4eeff7f000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:59 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) connect$netlink(r1, &(0x7f0000000280)=@unspec, 0xc) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$unix(r1, 0x0, 0xffd0, 0x40080020003ffc, &(0x7f0000000000)=@abs={0x1}, 0x59) setsockopt$inet_tcp_buf(r1, 0x6, 0x0, &(0x7f00000002c0)="c071ef18", 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 18:44:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x1000}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x101, 0x8001, 0xffffffffffffffe1, 0x20, r1}, 0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x9) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000001c0)={0x8, 0x762, 0x9}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2570.368271] Bluetooth: hci0: command 0xfc11 tx timeout [ 2570.373821] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2570.452324] nla_parse: 16 callbacks suppressed [ 2570.452334] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2570.475150] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2570.486093] Bluetooth: hci0: Frame reassembly failed (-84) [ 2570.486400] Bluetooth: hci0: Frame reassembly failed (-84) [ 2570.497667] Bluetooth: hci0: Frame reassembly failed (-84) [ 2570.503799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2570.518307] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:44:59 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x4c000ffc, 0x10a000d04) 18:44:59 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2570.557600] Bluetooth: hci1: Frame reassembly failed (-84) [ 2570.581597] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 18:44:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000008efff7f000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2570.618548] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:44:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:44:59 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400080, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)) 18:44:59 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2570.750596] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2570.769501] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2570.781928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2570.786021] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2572.528098] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2572.528119] Bluetooth: hci0: command 0xfc11 tx timeout [ 2572.608027] Bluetooth: hci1: command 0xfc11 tx timeout [ 2572.613465] Bluetooth: hci1: Entering manufacturer mode failed (-110) 18:45:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0xc0189436, &(0x7f0000000080)=0x2) 18:45:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000193000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:01 executing program 0: clone(0x2102005ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa01ffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() exit_group(0x0) ptrace(0x4206, r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000100)) wait4(r0, &(0x7f0000000000), 0xc, &(0x7f0000000040)) wait4(0x0, 0x0, 0x0, 0x0) 18:45:01 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x2, 0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x400, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x3c, &(0x7f0000000340)=0x1c1c, 0x4) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000200)) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xe) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/status\x00', 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x9, 0x20000) 18:45:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000ffffff9e000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:45:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x2, 0x40) r2 = fcntl$dupfd(r0, 0x406, r0) perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x70, 0x1ff, 0xfffffffffffff119, 0xffffffffffffffc0, 0x3, 0x0, 0x6, 0x11200, 0xf, 0x101, 0x6, 0x3f, 0x80000001, 0xe2ab, 0x200, 0x0, 0x4, 0x2, 0x0, 0x101, 0x2, 0xfffffffffffffff8, 0x8000, 0x2, 0x4, 0xd3, 0x80, 0x1ffc0000, 0xffffffffffffffff, 0x22, 0x8, 0x5b8, 0x7fff, 0x5, 0x100000000, 0x4, 0x5, 0x0, 0x3, 0x7, @perf_config_ext={0x7, 0x7}, 0x26000, 0x7f, 0x6, 0x1, 0x101, 0x3016, 0x80000001}, r1, 0xffffffffffffffff, r2, 0xc) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0xfffffffffffffe37) unshare(0x0) 18:45:01 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000001a0000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000007fff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2574.848039] Bluetooth: hci1: command 0xfc11 tx timeout [ 2574.848069] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2574.860266] Bluetooth: hci0: command 0x1003 tx timeout [ 2574.867113] Bluetooth: hci0: sending frame failed (-49) [ 2574.885122] Bluetooth: hci1: Frame reassembly failed (-84) 18:45:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x400000002, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000180007041dfffd946f610529802000001f040005000008000800070002000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x1) 18:45:06 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0xc020660b, &(0x7f0000000080)=0x2) 18:45:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000fffffff0000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2576.928070] Bluetooth: hci0: command 0x1001 tx timeout [ 2576.928099] Bluetooth: hci1: command 0xfc11 tx timeout [ 2576.938854] Bluetooth: hci0: sending frame failed (-49) [ 2576.944311] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2577.023434] nla_parse: 20 callbacks suppressed [ 2577.023445] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2577.049949] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2577.050953] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2577.077022] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2577.100969] Bluetooth: hci1: sending frame failed (-49) [ 2577.110485] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2577.136583] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2579.008081] Bluetooth: hci0: command 0x1009 tx timeout [ 2579.168025] Bluetooth: hci1: command 0xfc11 tx timeout [ 2579.173529] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2579.187351] Bluetooth: hci1: Frame reassembly failed (-84) [ 2581.248161] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2581.255084] Bluetooth: hci1: command tx timeout 18:45:12 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x400000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x406, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffff9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x40) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x9) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000080)) 18:45:12 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000007fffeef4000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000440)='/dev/input/mouse#\x00', 0x5, 0x10000) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f000001c000/0x2000)=nil}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) r5 = semget$private(0x0, 0x1, 0x1) semctl$SEM_STAT(r5, 0x0, 0x12, &(0x7f0000000380)=""/47) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f00000003c0)={0x3}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000020000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000fb", @ANYBLOB="b0e8568a63140186e8f26e"], 0x2}}, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f00000001c0)={'security\x00'}, &(0x7f0000000280)=0x54) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:45:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000100)=0x1c18, 0x4) [ 2583.403661] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2583.416091] Bluetooth: hci0: Frame reassembly failed (-84) [ 2583.429997] Bluetooth: hci0: Frame reassembly failed (-84) [ 2583.436513] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2583.441206] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2583.460896] Bluetooth: hci1: Frame reassembly failed (-84) [ 2583.460986] Bluetooth: hci1: Frame reassembly failed (-84) [ 2583.487728] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:45:12 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x2, 0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x400, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x3c, &(0x7f0000000340)=0x1c1c, 0x4) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000200)) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xe) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/status\x00', 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x9, 0x20000) [ 2583.511321] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000f0ffff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2583.573457] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:12 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2583.665726] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2583.695361] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:45:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x2, 0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x400, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x3c, &(0x7f0000000340)=0x1c1c, 0x4) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000200)) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xe) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/status\x00', 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x9, 0x20000) [ 2583.723874] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2583.758865] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2585.488114] Bluetooth: hci1: command 0xfc11 tx timeout [ 2585.493525] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2585.500199] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2585.514135] Bluetooth: hci0: Frame reassembly failed (-84) 18:45:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000003c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r2, 0x2}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 18:45:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000007fffffff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:14 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x2, 0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x400, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x3c, &(0x7f0000000340)=0x1c1c, 0x4) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000200)) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xe) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/status\x00', 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x9, 0x20000) 18:45:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000000)={0xcb6, 0xffae, [0x101, 0x4, 0x3, 0x9, 0x9], 0x10000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000100)) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 18:45:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000009effffff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:16 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/138, 0x8a}, {&(0x7f0000000240)=""/222, 0xde}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/252, 0xfc}], 0x4, &(0x7f0000000180)=""/4, 0x4}}, {{&(0x7f0000000540)=@ethernet={0x0, @local}, 0x80, &(0x7f0000003740)=[{&(0x7f00000005c0)=""/127, 0x7f}, {&(0x7f00000001c0)}, {&(0x7f0000000640)=""/238, 0xee}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/4096, 0x1000}], 0x6, &(0x7f00000037c0)=""/32, 0x20}, 0x6}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000003800)=""/254, 0xfe}], 0x1, &(0x7f0000003940)=""/147, 0x93}, 0xb}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003a00)=""/21, 0x15}, {&(0x7f0000003a40)=""/79, 0x4f}, {&(0x7f0000003ac0)=""/156, 0x9c}, {&(0x7f0000003b80)=""/113, 0x71}], 0x4}, 0xa75}, {{&(0x7f0000003c40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003cc0)=""/13, 0xd}, {&(0x7f0000003d00)=""/251, 0xfb}, {&(0x7f0000003e00)=""/112, 0x70}, {&(0x7f0000003e80)=""/222, 0xde}], 0x4, &(0x7f0000003fc0)=""/90, 0x5a}, 0x1000}, {{&(0x7f0000004040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000004380)=[{&(0x7f00000040c0)=""/13, 0xd}, {&(0x7f0000004100)=""/132, 0x84}, {&(0x7f00000041c0)=""/232, 0xe8}, {&(0x7f00000042c0)=""/88, 0x58}, {&(0x7f0000004340)=""/25, 0x19}], 0x5}, 0x3}, {{&(0x7f0000004400)=@l2, 0x80, &(0x7f0000004880)=[{&(0x7f0000004480)=""/188, 0xbc}, {&(0x7f0000004540)=""/150, 0x96}, {&(0x7f0000004600)=""/41, 0x29}, {&(0x7f0000004640)=""/20, 0x14}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/35, 0x23}, {&(0x7f0000004700)=""/231, 0xe7}, {&(0x7f0000004800)=""/128, 0x80}], 0x8}, 0x2ee1ca46}], 0x7, 0x10000, &(0x7f0000004ac0)={0x77359400}) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000004b00), &(0x7f0000004b40)=0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) 18:45:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101081, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2587.578034] Bluetooth: hci0: command 0xfc11 tx timeout [ 2587.578053] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:45:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:45:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000f0ffffff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2587.691207] Bluetooth: hci0: Frame reassembly failed (-84) [ 2587.697755] Bluetooth: hci0: Frame reassembly failed (-84) 18:45:16 executing program 0: syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x6, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) r1 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f00000001c0)=""/153) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) quotactl(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0) ptrace$getregs(0xc, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x7, 0x3}}}}}, 0x0) [ 2587.767517] Bluetooth: hci1: Frame reassembly failed (-84) [ 2587.776094] Bluetooth: hci1: Frame reassembly failed (-84) 18:45:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000ffffffffa00100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2589.728073] Bluetooth: hci0: command 0xfc11 tx timeout [ 2589.728122] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2589.808083] Bluetooth: hci1: command 0xfc11 tx timeout [ 2589.814251] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2589.829758] Bluetooth: hci0: Frame reassembly failed (-84) 18:45:21 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:21 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000600)={0xffffffffffffffff, 0x4, 0x0, [{0x7, 0xd99, 0x10001, 0x2, 0x82b8, 0x80000000, 0x200}, {0x2, 0x7, 0xc95b, 0x100000000, 0x4477, 0x2, 0x6}, {0x30c6, 0x1, 0x1, 0x1, 0x7, 0x5}, {0x3, 0x487, 0x8, 0xfffffffffffffff9, 0x3, 0x3, 0x3}]}) sendmsg$sock(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@sco={0x1f, {0x6525, 0xd6, 0x1, 0x95, 0x101, 0x9}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="6ac460a5c89886b3363dd52eed52e0ba2a213c7d03de7e108b4ee09bc49cf6d4919ea4ec7c55a5b87e507c3bbe992051e15bd47bab574e0df63be5f67f92", 0x3e}, {&(0x7f0000000100)="4424ef9f531968e598811ef19d063df4ef3fdbbfbc576152e87d48da0b0e092627973cb744fd614936a870ad99822a7fb510ddf646217f60193bdf93ed446dbb90568f4dd6bad273f8456049697b4bba23f73c1e188bbc8a0d5660e4c1e1f71a6b31dcb5bf204a795d7d12ed689fad128861cac53c851451ab44692fada29fcbd292a4594f7f210d2c39b307092e49853aceb1985d33e06642c73f0108c2285e4f79d1a04f875a3f794a61a9acac67d4d5a35b0e4be9a9f73a4270991894ef1dc05387873f673a60373960898a21a73a9f7e1b26a3838af15f6c5f0d6a7d95995dc5eddbdb122a0d488d4529ec5c0f", 0xef}, {&(0x7f0000000200)="8cc2ddc50a13e144ed43af719bf89659c5060fc02d", 0x15}, {&(0x7f0000000240)="d7547b748f", 0x5}, {&(0x7f0000000280)="63d435fb9004190b5b2a87f9853719b96f68aed5bdd0d097b4c002baf1b4414886827eb897d14c03596f76a071bd31885bf4f9935b8975c3c0f533c393dad22c937abffd3bd868007c3ea11978a8209b9ed7e70a98c3ee08d86b545c2cd692212c36573657f9ee4e95a3d7909f2662876edc02c1b6543ab95bc17c86bbdf072e9fbf39d7eb59baaba66fcf79c5a72164a12cacff4ee198fdeb540df03900df378c7b37be3fac972638b88ea4a15299cef1c73b9e20fae5527fad404f9450e22e2571e82d2ece2e", 0xc7}, {&(0x7f0000000380)="98b86596d35d86bbaeab961a07cf0f97a01a", 0x12}, {&(0x7f00000003c0)="5090fae46a7ed575d6d9f3dfea742a89a72034f2a60a4e", 0x17}, {&(0x7f0000000440)="44b63003e4a3e097bd79af900d54c37fc9b1bade537a9990fb5ae831cdd948f8ae0a4223a77397bc4de7be600bb06c5c51b7d74b90592ec4db273637e74e87c1f38fc782cd92ad34b3420689976f6b43529edeb3d7ffc2cbe79327e2d35987f21945df0e68e7fc5b5a2f495d814036e3e47a5e82536dced97033b97f8da15efb2e25010f5536407db5fd8222d090194d4805e9414b36977b767a0c4be39f1af410eb1a33e89e5e82bab7", 0xaa}], 0x8, &(0x7f0000000580)=[@mark={{0x14, 0x1, 0x24, 0x7}}], 0x18}, 0x40080d1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000400)={0x4}) 18:45:21 executing program 2: r0 = perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x70, 0x8000, 0xea, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x6, 0x2, 0x309, 0x2, 0x2, 0x3, 0xbf2, 0x5, 0x1ff, 0x80, 0x80000000, 0x8, 0x24000000, 0x101, 0x3ff, 0x1, 0xec, 0x2, 0x7, 0x0, 0x4, 0x4, 0xfd6, 0x4, 0x4, 0x10000, 0x400, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x2000, 0x1, 0x4, 0x0, 0xae8, 0x980, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3, 0x5, 0x4, 0x5, 0x0, 0x5, 0x84, 0x2, 0x80000001, 0x0, 0x1f, 0x7, 0x7, 0x7fff, 0x81, 0x6ce, 0x0, 0x0, 0x30f, 0xffffffffffffff00, 0x80000000, 0x3, 0x7fff, 0x7, 0xffffffff00000000, 0x7, 0x6, 0x0, 0x46, 0x1ff, 0x7, 0x3d8, 0x7, 0x5, 0x266, 0x9, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x200, 0x500}, 0x200, 0x98bb, 0x100000001, 0x6, 0x3ff, 0x61, 0x1}, 0x0, 0xd, r0, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x10) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0x2) 18:45:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000f4ee", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:45:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000f0ffffff7f00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) [ 2591.888064] Bluetooth: hci0: command 0xfc11 tx timeout [ 2591.888085] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2591.957818] nla_parse: 26 callbacks suppressed [ 2591.957828] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2591.979142] Bluetooth: hci0: Frame reassembly failed (-84) [ 2591.985472] Bluetooth: hci0: Frame reassembly failed (-84) [ 2591.992800] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2591.992878] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2592.005670] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:21 executing program 0: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x7) r0 = creat(0x0, 0x1000000000b) r1 = socket$inet6(0xa, 0x80802, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000080)=""/180, &(0x7f0000000140)=0xb4) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x9d, 0x4}, &(0x7f0000000200)=0x90) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000380)={r3, 0x4}, 0x8) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x400000000000) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000001c0)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_proto_private(r1, 0x89ea, &(0x7f0000000000)="c4502c78641064370961db9dc75ef24482f37b26ebbf4ceb30f76119b2214096ef04a42a869a10feb30abf22958247c24cdc63f505ae51e2f006895f0306b1a2e33c71abd7cc9cde0793c95752de64289ec1ea401f588f0e2a41995818bfacf0093e96839710ce4b126d") setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @rand_addr=0xbf7, 0x0, 0x2, 'dh\x00', 0x25}, {@loopback, 0x4e22, 0x0, 0x0, 0x0, 0x1}}, 0x44) 18:45:21 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2592.050160] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2592.087273] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:45:21 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80800, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x200, 0x2, 0x3, 0x8, 0x7, 0x9}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x2686) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000008880)=[{{0x0, 0xfffffffffffffe47, &(0x7f0000000780)=[{&(0x7f0000000240)=""/62, 0x3e}], 0x1}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000d2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x9) inotify_init() ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000100)=0x2) 18:45:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000000000000008ef", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000340000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:21 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x2df, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000001c0)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 18:45:21 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2592.259998] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2592.294168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2592.345985] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2592.367805] Bluetooth: hci1: Frame reassembly failed (-84) [ 2592.374846] Bluetooth: hci1: Frame reassembly failed (-84) [ 2592.381536] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000ffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000007ffffffff0000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:45:21 executing program 0: mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000012fee)='/.ev/\x11%put/event#\x00', 0x0, 0x0) r1 = request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='vboxnet0keyring:{user(,$mime_type@uservboxnet0#GPL\'ppp1:eth1%+\x00', 0xfffffffffffffffe) r2 = request_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='vboxnet1\x00', 0xfffffffffffffffc) r3 = request_key(&(0x7f0000000280)='.dead\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='/dev/media#\x00', 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) socket$bt_cmtp(0x1f, 0x3, 0x5) 18:45:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000fffffffffffff0000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2594.048000] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2594.048011] Bluetooth: hci0: command 0xfc11 tx timeout 18:45:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x3, 0x4}, &(0x7f0000000240)=0x90) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 18:45:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:23 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2594.229684] Bluetooth: hci0: Frame reassembly failed (-84) [ 2594.235649] Bluetooth: hci0: Frame reassembly failed (-84) [ 2594.246920] Bluetooth: hci0: Frame reassembly failed (-84) [ 2594.368148] Bluetooth: hci1: command 0xfc11 tx timeout [ 2594.374311] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2596.288095] Bluetooth: hci0: command 0xfc11 tx timeout [ 2596.293516] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:45:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000100)) fcntl$notify(r0, 0x402, 0x80000000) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 18:45:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x80000000000006) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x5, 0x1, 0xfffffffffffffffe}) unshare(0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x101000, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x13) ioctl$KDSKBLED(r1, 0x4b65, 0x5ed) prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) ioctl$TIOCSSERIAL(r1, 0x541f, &(0x7f0000000240)={0x5, 0x1, 0x7f, 0x800, 0x7, 0x1, 0x7f, 0x7b, 0x1, 0x50, 0x3f, 0x0, 0x6, 0xfff, &(0x7f0000000200)=""/32, 0x0, 0xffffffffffffff00, 0x80000000}) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x4) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000000c0)=[0xfffffffffffffff9, 0x1f]) 18:45:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000ffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:45:25 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2596.448139] Bluetooth: hci1: command 0xfc11 tx timeout [ 2596.453773] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2596.532021] Bluetooth: hci0: Frame reassembly failed (-84) [ 2596.532330] Bluetooth: hci0: Frame reassembly failed (-84) 18:45:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000007fff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:25 executing program 0: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x0) 18:45:25 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000030000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000000000000000f0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2598.608031] Bluetooth: hci0: command 0xfc11 tx timeout [ 2598.613489] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2598.698060] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2598.698358] Bluetooth: hci1: command 0xfc11 tx timeout 18:45:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$VT_ACTIVATE(r0, 0x5606, 0x100000001) 18:45:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000040000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:29 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000001200)='/dev/vcsa#\x00', 0x1, 0x102) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280), 0x2d0}, {&(0x7f0000000000)="15", 0x200000dd}], 0x2) 18:45:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000007fff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:29 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000000)={0x6, 0x10471e20}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2600.768067] Bluetooth: hci0: command 0xfc11 tx timeout [ 2600.768074] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2600.858462] nla_parse: 32 callbacks suppressed [ 2600.858472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2600.874652] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2600.887103] Bluetooth: hci0: Frame reassembly failed (-84) [ 2600.888187] Bluetooth: hci0: Frame reassembly failed (-84) [ 2600.918374] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2600.927380] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) shutdown(r0, 0x0) 18:45:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000050000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2600.961301] Bluetooth: hci1: Frame reassembly failed (-84) [ 2600.979766] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2601.000281] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:30 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000009eff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2601.106736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2601.139124] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCSETSF(r0, 0x8926, 0x0) [ 2601.161185] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2601.170422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000060000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2602.928004] Bluetooth: hci0: command 0xfc11 tx timeout [ 2602.928012] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:45:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x7, 0xffffffff, 0x1ff, 0x5, 0x4, 0x6, 0x9, 0x1f, 0x9, 0x9, 0x4}) 18:45:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000f0ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:32 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:32 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x400000003, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 18:45:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000070000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x600000) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)={@empty, @empty, 0x1, 0x2, [@empty, @local]}, 0x18) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0xfffffffffffffffe) [ 2603.017982] Bluetooth: hci1: command 0xfc11 tx timeout [ 2603.023403] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2603.126872] Bluetooth: hci0: Frame reassembly failed (-84) [ 2603.138134] Bluetooth: hci0: Frame reassembly failed (-84) [ 2603.143960] Bluetooth: hci0: Frame reassembly failed (-84) 18:45:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000007fffef080000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:32 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000ffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2603.209006] Bluetooth: hci1: Frame reassembly failed (-84) 18:45:32 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="3eafa3c5a38ae7e73d3fc74ed507b72d"}, 0x1c) 18:45:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000000000000000f0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:45:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000000000000a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2605.168024] Bluetooth: hci0: command 0xfc11 tx timeout [ 2605.173469] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2605.248026] Bluetooth: hci1: command 0xfc11 tx timeout [ 2605.248257] Bluetooth: hci1: Entering manufacturer mode failed (-110) 18:45:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl(r0, 0x2, &(0x7f0000000100)="e93231ae89e981b37c7b8eb2e85c2f8eba332ef7738fb4580fa0a7e4b54e2f55ffac15ef4f6219f00cb589eeaad2f01192ae79c3239198520e085964e59e9897c281fa1687f5a3bb977a7aa56010f179bc3111cf225aa02c7dc74da6486d929751ea906878cdc6d9c6c56515728c1a697ecaa96ecd01c4e5c49d493e3c8ce7d0661e4a5c2f29bfce1f6455372b71aaf246a9dc5514e85b4babf765b08b29a0d0d42d3a847de575a75090ebaf266054b1643286c17fb546fa39") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) write$UHID_CREATE(r1, &(0x7f00000002c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000001c0)=""/203, 0xcb, 0x7, 0xd8, 0x0, 0x80000001, 0x3}, 0x120) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) signalfd4(r0, &(0x7f0000000400)={0x4}, 0x8, 0x80000) 18:45:36 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:36 executing program 0: socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x2, [0x7, 0x3], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0x11, 0x5}}}}}}}}, 0x0) 18:45:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000000000000e0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:36 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xc, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x9) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x208, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200040000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xac, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xc27, @mcast1, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8001, @loopback, 0xfff}}}}]}, @TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x380000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xba1c}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x90, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0xb}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x18}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbc}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xc39bc7e74149345b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) [ 2607.328043] Bluetooth: hci0: command 0xfc11 tx timeout [ 2607.328109] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2607.393607] nla_parse: 22 callbacks suppressed [ 2607.393618] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2607.401153] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2607.438075] Bluetooth: hci0: Frame reassembly failed (-84) [ 2607.443812] Bluetooth: hci0: Frame reassembly failed (-84) [ 2607.450050] Bluetooth: hci0: Frame reassembly failed (-84) [ 2607.458454] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:45:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='dummy0\x00', 0xa) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x13c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000400), 0x7) [ 2607.496460] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2607.525077] Bluetooth: hci1: Frame reassembly failed (-84) 18:45:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000000000000f0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2607.562886] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:36 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:36 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) getsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) fcntl$getown(r0, 0x9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000280)={0x0, {{0xa, 0x4e21, 0x5, @ipv4={[], [], @multicast1}}}, 0x0, 0x3, [{{0xa, 0x4e23, 0x5, @rand_addr="c09fca95e515a7e618fae0e2221c61b6", 0x1}}, {{0xa, 0x4e20, 0x7f, @empty}}, {{0xa, 0x4e21, 0x0, @ipv4={[], [], @local}, 0xf3d}}]}, 0x210) write$apparmor_current(0xffffffffffffffff, &(0x7f00000004c0)=@profile={'permprofile ', '\x00'}, 0xd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 2607.630375] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2607.657305] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2607.664544] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000140000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2607.823034] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2607.871205] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2609.488091] Bluetooth: hci0: command 0xfc11 tx timeout [ 2609.497996] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2609.568020] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2609.568127] Bluetooth: hci1: command 0xfc11 tx timeout [ 2609.606938] Bluetooth: hci0: Frame reassembly failed (-84) 18:45:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000100)="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") ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x202002, 0x0) 18:45:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x20000, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 18:45:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000ffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000200000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) ptrace$setopts(0x4200, r1, 0xbb74, 0x100000) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2611.648074] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2611.655470] Bluetooth: hci0: command tx timeout [ 2611.729782] Bluetooth: hci0: Frame reassembly failed (-84) [ 2611.729849] Bluetooth: hci0: Frame reassembly failed (-84) 18:45:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000000000003f0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2611.788957] Bluetooth: hci1: Frame reassembly failed (-84) 18:45:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r1, 0x0, 0x10, &(0x7f00000000c0)='^usermime_type:\x00'}, 0x30) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r2, &(0x7f0000005fc0), 0x80000000000006a, 0x40000000) 18:45:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000480000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:45:41 executing program 0: keyctl$search(0xa, 0x0, &(0x7f0000000300)='encrypted\x00', &(0x7f0000000340)={'syz'}, 0x0) [ 2613.818191] Bluetooth: hci1: command 0xfc11 tx timeout [ 2613.825721] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2613.833230] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:45:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x803f, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x10000, 0x0) setsockopt$rose(r1, 0x104, 0x20007, &(0x7f0000000240)=0xada6, 0x128) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000fec000/0x13000)=nil, 0x13000}, 0x3}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x80000000000f) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x80) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000180)=0x2, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x100, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1e8) write$binfmt_elf64(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x5f7) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) accept4$rose(r0, 0x0, &(0x7f0000000280), 0x80000) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000380)=0x13) 18:45:45 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000000000004c0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000280)={0x80000000, {{0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast1}, 0x4}}, 0x0, 0x1, [{{0xa, 0x4e23, 0x5, @rand_addr="c09fca95e515a7e618fae0e2221c61b6"}}]}, 0x10c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 18:45:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0xceb) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2615.888082] Bluetooth: hci0: command 0xfc11 tx timeout [ 2615.888212] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2615.953056] nla_parse: 22 callbacks suppressed [ 2615.953065] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2615.985085] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2616.008274] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2616.027551] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:45:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) write$binfmt_elf64(r0, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], []]}, 0x478) 18:45:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2616.107128] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) write$binfmt_misc(r0, &(0x7f0000000100)={'syz1', "8cfad5ebd86a912560472e20e8691d03b5e5872f88ef01bd5bda3cdb45bef52075c9021b20da571f0a21f664a66abc80e90faaec1946d3e663551a847b0042e4d7dafb48a8c34cd70ab29b48e7f75b21820b353f47b98143221bcbb1e60371862d45682785b27dca81c9b3cfc19efa874c7c4b4e28"}, 0x79) 18:45:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000600000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) [ 2616.159875] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:45 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2616.264714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:45:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x160, &(0x7f0000000640)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0) [ 2616.313291] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2616.332629] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x80010006, 0x800) readlinkat(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)=""/184, 0xfe85) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000040)) [ 2616.387513] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000680000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2616.465835] Bluetooth: hci1: Frame reassembly failed (-84) [ 2616.478540] Bluetooth: hci1: Frame reassembly failed (-84) [ 2616.489295] Bluetooth: hci1: Frame reassembly failed (-84) 18:45:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:45 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x83, 0x80, 0xf}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0xb}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x7, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000000000006c0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:45 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2618.368102] Bluetooth: hci0: command 0xfc11 tx timeout [ 2618.378032] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2618.391998] Bluetooth: hci0: Frame reassembly failed (-84) [ 2618.528058] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2618.528077] Bluetooth: hci1: command 0xfc11 tx timeout 18:45:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) 18:45:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000740000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfe47bf070") close(r0) inotify_init() r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa5) 18:45:49 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000100)=""/214) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x280800, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2620.448108] Bluetooth: hci0: command 0xfc11 tx timeout [ 2620.453501] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:45:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000000000007a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:49 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000004c0)}], 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = openat(0xffffffffffffffff, &(0x7f00000010c0)='./file0\x00', 0x82080, 0xc2) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000001100)={0x5, [0x81, 0x2, 0x8, 0x5c0, 0x6]}, 0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) socket$inet6(0xa, 0x1, 0xe3ad) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/4096) 18:45:49 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = socket(0x19, 0x80000, 0x7fffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001580)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000001680)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000016c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x28, r2}) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 18:45:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:45:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000001930000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) [ 2620.784418] Bluetooth: hci0: Frame reassembly failed (-84) 18:45:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @win={{0x0, 0x0, 0x52424752}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 18:45:50 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000ffffff9e0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x16) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2621.012012] nla_parse: 32 callbacks suppressed [ 2621.012022] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2621.048243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2621.062256] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2621.092825] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2621.103510] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:50 executing program 0: 18:45:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000fffffff00000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2621.123854] Bluetooth: hci1: Frame reassembly failed (-84) [ 2621.130748] Bluetooth: hci1: Frame reassembly failed (-84) [ 2621.152094] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2621.254168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2621.273960] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2622.848061] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2622.848069] Bluetooth: hci0: command 0xfc11 tx timeout [ 2622.867250] Bluetooth: hci0: Frame reassembly failed (-90) [ 2623.168025] Bluetooth: hci1: Entering manufacturer mode failed (-110) 18:45:54 executing program 2: clone(0xffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000180)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x7, 0xffff, 0xd7, 0xe0, 0x1b, 0x62b1, 0x10, 0x200, 0x0, 0xf7, 0x2e}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x9) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0x2) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x28, &(0x7f00000001c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={r2, 0xfff}, 0xc) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x7fff, 0xeb, 0xe6, 0x1000, 0x1, 0x1, 0x8, 0xfff, 0x4, 0x2a5, 0x10001, 0x6}) 18:45:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:45:54 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000007fffeef40000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:54 executing program 0: 18:45:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = dup2(r0, r0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000100)="b9a9dfce2203e0c2598eb85eb9e88a9f4dc6df020430af6b7be78bdad6145a1e0c916765f92e689a98d46504e501ca28987565b7644c10154c6c537b14c5d3a16575c69feb6cd6c58cb4d7fc7589bd48a8f37c79b2fe3b57f2219db9ebaac7f606c0c56b01dc88eb19e3189dbd78bc6fdfc0f3a4344402186f199af9e498dd1380736bf05ec4b0803c25c849ac9f57f28dd31e00c7984e1d53f3f7b30fe9b28cac3e07b083255b28947660959e26874b315ef21936a43eae5f472ee060e6", 0xbe) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2624.928104] Bluetooth: hci0: command 0xfc11 tx timeout [ 2624.933525] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:45:54 executing program 0: [ 2625.003640] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2625.023267] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:45:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2625.082927] Bluetooth: hci0: Frame reassembly failed (-84) 18:45:54 executing program 0: 18:45:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000007fffffff0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:54 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) [ 2627.088071] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2627.088078] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2627.088187] Bluetooth: hci0: command 0xfc11 tx timeout 18:45:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x5, 0x8, 0xc4d7, 0x3f, 0xc, 0x0, 0x1, 0x0, 0x3, 0xffffffffffff1c52}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 18:45:56 executing program 0: 18:45:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000ffffffff0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:56 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000100)=""/198) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2627.168051] Bluetooth: hci2: command 0xfc11 tx timeout [ 2627.168212] Bluetooth: hci2: Entering manufacturer mode failed (-110) 18:45:56 executing program 0: [ 2627.266291] Bluetooth: hci0: Frame reassembly failed (-84) [ 2627.269096] Bluetooth: hci0: Frame reassembly failed (-84) [ 2627.292096] nla_parse: 14 callbacks suppressed [ 2627.292105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2627.295972] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2627.313679] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2627.331942] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2627.345036] Bluetooth: hci1: Frame reassembly failed (-84) 18:45:56 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_bp={0x0}, 0x0, 0x4000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x101002, 0x100cf41d3c497d2e) faccessat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1a, 0x0) fadvise64(r0, 0x0, 0x0, 0x1) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x2) write$P9_RFLUSH(r2, &(0x7f00000000c0)={0x7}, 0x7) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000004c0)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5t\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv\x03Qa\xf3\xd4\xfc(\x83\xfb\xf8C\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd7:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1\x0fy\x12\x181\xa5|8\xc8\xe7\x9f@\xeb:\nJA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9}h\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f]\x97\x9f\xc2') getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) r5 = socket(0xb, 0x806, 0x9) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, 0x0, 0x0) socket$inet(0x2, 0x1, 0x6) r6 = dup(r2) pipe2$9p(&(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) ioctl$LOOP_SET_CAPACITY(r6, 0x4c07) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) write$P9_RREAD(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="3a00000075020023aec3a72f0000000475f52215beaeb8bee39a784c6746fb9bda0345072cfaea23416ef84519c52f587aebe0e968f9b1b17a55052d8572772cd1647ca562d419bf8950fd9b9db27079df412f00db75"], 0x3a) 18:45:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2627.359872] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2627.376043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000001a0ffffffff0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) [ 2627.444615] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2627.460709] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2627.478632] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2627.489855] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:45:56 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2629.328187] Bluetooth: hci0: command 0xfc11 tx timeout [ 2629.338156] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2629.408014] Bluetooth: hci1: command 0xfc11 tx timeout [ 2629.408067] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2629.445438] Bluetooth: hci0: Frame reassembly failed (-84) 18:46:00 executing program 2: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x168, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x2c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'nlmon0\x00'}}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x403}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x1}, 0x48000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x9) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000080)=0x2) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x500, 0x1) 18:46:00 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="290000000400000000000000000000000100000000000000000000000000000000000000000000000054c92981fadd0a3e48adbea79ee9b7507aa234e27643742123d51264852f56fb7e291b669e5dffb17b6de6bed6977a0e40217dfb2d81c8c2452707431b60d388659505930ec34278c5d373c093d978354469231f4339bda6caefbee36d8baf483e0ef9e6"], 0x29) 18:46:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000f0ffffffffffff0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:46:00 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:46:00 executing program 1: clock_settime(0x7, &(0x7f0000000000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2631.488070] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:46:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2631.598491] Bluetooth: hci0: Frame reassembly failed (-84) [ 2631.608388] Bluetooth: hci0: Frame reassembly failed (-84) [ 2631.619615] Bluetooth: hci0: Frame reassembly failed (-84) 18:46:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:46:00 executing program 0: r0 = memfd_create(&(0x7f0000000000)='}nodevwlan1%eth0trusted!{&vmnet\xcc\x00', 0x0) fcntl$addseals(r0, 0x409, 0x11) [ 2631.691385] Bluetooth: hci1: Frame reassembly failed (-84) 18:46:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:00 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:46:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000000000000000f0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2633.648157] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:46:02 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x7fffffff, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='barrier,umask=00000000000000000000K00,\x00']) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f00000000c0)={0xf, {0x8, 0x8, 0x7fff, 0xfffffffffffffffc}, {0x4, 0x1ff, 0x3ff, 0x2}, {0x4, 0x6681}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x4) ioctl$KDADDIO(r2, 0x400455c8, 0xccba) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000080)=0x2) 18:46:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:46:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TCFLSH(r1, 0x40087101, 0x0) 18:46:02 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:46:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="4e6bd0018b1268d835d2b59c06920a36be73a3dd1f2f33b0d902d06affeecf8723945d32dd02317d20dbe49c0ef62f018535dc92d2e99a399dd750622844b37c533e09346bc447") ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2633.728047] Bluetooth: hci1: command 0xfc11 tx timeout [ 2633.736621] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2633.841198] Bluetooth: hci0: Frame reassembly failed (-84) [ 2633.850443] Bluetooth: hci0: Frame reassembly failed (-84) [ 2633.857690] nla_parse: 24 callbacks suppressed [ 2633.857702] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2633.875366] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2633.903425] hfsplus: unable to parse mount options [ 2633.922327] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:46:03 executing program 0: socket$inet6(0xa, 0x6, 0x80000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x2a8}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000e80)={0x3, 0x1e, &(0x7f0000000e40)="b9ebb83b3423db8ca8e7caa6968197cca6a088cd1a3188a0d9f457c3b0a1"}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x40080) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffb000/0x3000)=nil) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') write$P9_RCREATE(r0, &(0x7f0000000340)={0x18, 0x73, 0x1, {{0x20, 0x3, 0x3}, 0x3}}, 0x18) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x307, 0x0, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40091) unlink(&(0x7f0000000640)='./file0\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)={{0x1cf, 0x7fffffff, 0x83a, 0x197, 0x91, 0x0, 0x0, 0x1d}, "f677e782f043e41f4b7140b2eb0a5a92e3ce332b7caabe568b7e0e929f1a824939d71dab67ed5d3c1a3c88124980a9fd33c49d9be2080fc317a3b0177d3e7d46c803aa3547df827915253747e45f6329bc65da3e89cb07b7d6b2df855761", [[], [], [], []]}, 0x47e) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d40)={{{@in=@empty, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @local}, {0x2, 0x0, @remote}, 0xab052ebbe6fbd72e}) [ 2633.954238] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2633.996976] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 18:46:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000050000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) [ 2634.037361] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:46:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 18:46:03 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:46:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000003", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2634.171861] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2634.196101] Bluetooth: hci1: Frame reassembly failed (-84) 18:46:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000100)="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") ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x202002, 0x0) [ 2634.212999] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2634.224638] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 18:46:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000060000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) [ 2634.264981] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:46:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:46:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000100)="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") ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x202002, 0x0) 18:46:03 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:46:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000070000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2635.888178] Bluetooth: hci0: command 0xfc11 tx timeout [ 2635.898107] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:46:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0xfffffffffffffffe, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 18:46:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000000a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000a0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) [ 2636.208190] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2636.229020] Bluetooth: hci0: Frame reassembly failed (-84) 18:46:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0xfffffffffffffffc, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 18:46:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000100)="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") ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x202002, 0x0) 18:46:07 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:46:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000000e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000e0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x6) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2638.288175] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:46:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000f0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000000f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x2) ioctl$TIOCEXCL(r0, 0x540c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffc00, 0x2000) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000200)={@initdev, @dev}, &(0x7f0000000240)=0xc) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000140)=0x8) write$selinux_access(r1, &(0x7f0000000280)={'system_u:object_r:lib_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x6}, 0x3f) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x448000, 0x0) getsockname$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) 18:46:07 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/48, 0x30}], 0x1, 0x0) close(r2) 18:46:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000100)=""/108) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) r2 = pkey_alloc(0x0, 0x1) pkey_free(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x9, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x9, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x5, 0x1, 0x8, 0x3}, &(0x7f0000000240)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x9}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r3, 0x4) 18:46:07 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2638.621546] Bluetooth: hci0: Frame reassembly failed (-84) [ 2638.623526] Bluetooth: hci0: Frame reassembly failed (-84) [ 2638.627362] Bluetooth: hci0: Frame reassembly failed (-84) 18:46:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000014", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000140000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:46:07 executing program 0: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0xf, &(0x7f0000000080)={0x0, 0x0, 0x5}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r3, 0xc0044306, &(0x7f0000000040)=0x2) read(r2, &(0x7f0000481000)=""/128, 0x80) 18:46:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001180)=0x14, 0x80800) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000011c0)={@empty, @dev, 0x0}, &(0x7f0000001200)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000013c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001380)={&(0x7f0000001240)={0x118, r2, 0x0, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xfc, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}]}}]}, 0x118}}, 0x800) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 18:46:07 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:46:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000060", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000480000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:08 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/11, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = epoll_create1(0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x180, 0x11, r0, 0x0, r4, 0x0, 0x4, 0x81}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000280)) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/4\x00') preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000400)=""/246, 0xf6}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) nanosleep(&(0x7f00000003c0)={r7, r8+10000000}, &(0x7f0000000600)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000340)='fdinfo/4\x00') tkill(r0, 0x1000000000013) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$sndseq(r5, &(0x7f0000000740)=[{0x5, 0x5, 0x31a, 0x7, @tick=0x10001, {0x80000001}, {0x3, 0xfffffffffffffffd}, @connect={{0x8, 0x3}, {0x5, 0xeca}}}, {0x1, 0x4, 0x5, 0x52df, @time, {0x8001}, {0x0, 0x1f}, @connect={{0x5, 0xccf6}, {0x3, 0x6}}}, {0x5, 0x474, 0x2, 0x3f, @tick=0x10000000000, {0x1, 0x1}, {0xffff, 0x7}, @quote={{0x7fff, 0x6}, 0x8, &(0x7f00000002c0)={0x1, 0x4, 0x40, 0x10001, @time={r9, r10+30000000}, {0x0, 0xffffffffffff0001}, {0x6, 0xb8}, @result={0x100, 0x3}}}}, {0xd5f, 0x93bb, 0x100000001, 0x80000000, @tick=0x1, {0xfffffffffffffff9, 0xb3}, {0x2, 0x8}, @ext={0xe8, &(0x7f0000000500)="6928b47de15fd5857842295c388d79f6a5129329ed625a15636fd893da0a1730924d5606373d1768e474cb9c7193815a6d7d3dc6ab70f776073b714132305f3a43d899231d0b7d885dd48b80b0b6eb586de2f564d180983e9fbbb941a8aaee4ca2d4c9c338be04cddfaf40e04e89b674df12699e20b67310d24971a9cab228f6de65288234bc4f49690d48837004fe55110373493d5559155a1fbb5033f8280656d7d5991fcd13f225d255bfafa64a2c6483450b18e1d0a865934a3df8d6f8ff4fa63637c49d10b4b098ca1ffbb82e07a479cad21e5e9c9a61db7cfcb6e974048617797c8a118f2d"}}, {0x80000001, 0x6, 0x10001, 0xebd, @time, {0xde, 0x7}, {0xffffffffffffff5d}, @raw8={"e48e18d1ecdd4064e1dee751"}}, {0x6, 0x9, 0xff, 0x4, @time, {0x7, 0x3ff}, {0xfffffffffffff801, 0x8c}, @addr={0x80000001, 0xffffffff}}], 0x120) [ 2638.939653] Bluetooth: hci1: Frame reassembly failed (-84) [ 2638.945546] Bluetooth: hci1: Frame reassembly failed (-84) [ 2638.999508] nla_parse: 34 callbacks suppressed [ 2638.999519] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2639.024324] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2639.047842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2639.048571] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2639.099290] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2639.113152] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2640.688009] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2640.688078] Bluetooth: hci0: command 0xfc11 tx timeout [ 2640.715001] Bluetooth: hci0: Frame reassembly failed (-84) [ 2640.721794] Bluetooth: hci0: Frame reassembly failed (-84) [ 2641.008038] Bluetooth: hci1: command 0xfc11 tx timeout [ 2641.008127] Bluetooth: hci1: Entering manufacturer mode failed (-110) 18:46:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x2, 0x5}) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 18:46:11 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:46:11 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES32], 0x62f4c3e3) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)=0xff, 0x4) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)={0x0}) r3 = getpgid(0x0) move_pages(r3, 0x2, &(0x7f00000001c0)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f0000000200)=[0x4, 0x3, 0x8000000000, 0xffffffffbf2d7985, 0x9fdf, 0x101, 0x729, 0xff, 0x3a00000000000], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={r2, 0x0, r1}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000040)={0x7f}) 18:46:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000000000000000f0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000004c0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000012c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r2, &(0x7f0000001300)="c1ce51704ad36dd67aa93fec2fbc7b620a6f962a01ef9106a3abb9b526c2b8b9aadf5397c050e4c6f9c112302df00310a3b77beb69e6a1e959a03b04e6c6e1d2718e9b3aab570c98a674ee72ce8fa98d7da945b90ab5d975b6fb4249050dacd2caa4da7983fb4b1d7e63"}, 0x10) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000001c0)=@req={0x7fffffff, 0x0, 0x7, 0xff}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f00000013c0)={0x7, 0xff}) r3 = dup(r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x28, &(0x7f0000000200)}, 0x10) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000100)={0x7, 0x1f4e, {0x0, 0x3ff, 0x8, {0x10001, 0x6}, {0x9, 0x8}, @cond=[{0x80000001, 0xc3, 0x583d, 0x6, 0x6, 0x8}, {0x1, 0x2, 0x9, 0x1, 0x8, 0x2}]}, {0x57, 0x6, 0x8, {0x2d1e, 0x8}, {0x7, 0x56}, @period={0x0, 0x40, 0x6, 0x6, 0x4, {0x2, 0x6, 0x7, 0x7}, 0x3, &(0x7f0000000000)=[0x3, 0xf882034, 0x0]}}}) [ 2642.768188] Bluetooth: hci0: command 0xfc11 tx timeout [ 2642.775345] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2642.859030] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2642.869446] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2642.893362] Bluetooth: hci0: Frame reassembly failed (-84) [ 2642.895285] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2642.901258] Bluetooth: hci0: Frame reassembly failed (-84) [ 2642.921931] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:46:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000000000000000a0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:46:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001180)=0x14, 0x80800) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000011c0)={@empty, @dev, 0x0}, &(0x7f0000001200)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000013c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001380)={&(0x7f0000001240)={0x118, r2, 0x0, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xfc, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}]}}]}, 0x118}}, 0x800) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2642.955710] Bluetooth: hci1: Frame reassembly failed (-84) 18:46:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000600000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:46:12 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:46:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000680000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2644.928009] Bluetooth: hci0: command 0xfc11 tx timeout [ 2644.928017] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2645.008095] Bluetooth: hci1: command 0xfc11 tx timeout [ 2645.008199] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2645.027729] Bluetooth: hci0: Frame reassembly failed (-84) 18:46:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x6, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400002, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x4012, r1, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="070000000000000002004e23e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020800000002004e22e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24e000000200000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e210000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e217f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f93feb866d87d5545de064ce95bd4d18ce665eb7fb05f795d2846c40817a29f31cee055f20cc03fa845072ef91100e77b07ae762d30d547a2040e665cf103f6c8cfdcd548d875ac093a578e5797e"], 0x490) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x17) ioctl$TIOCCBRK(r0, 0x5428) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x19) 18:46:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001180)=0x14, 0x80800) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000011c0)={@empty, @dev, 0x0}, &(0x7f0000001200)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000013c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001380)={&(0x7f0000001240)={0x118, r2, 0x0, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xfc, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}]}}]}, 0x118}}, 0x800) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 18:46:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:46:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:46:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000006c0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2647.088055] Bluetooth: hci0: command 0xfc11 tx timeout [ 2647.088063] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2647.140213] nla_parse: 14 callbacks suppressed [ 2647.140223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2647.147812] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2647.184837] sp0: Synchronizing with TNC [ 2647.204461] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2647.215236] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2647.262198] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 18:46:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001180)=0x14, 0x80800) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000011c0)={@empty, @dev, 0x0}, &(0x7f0000001200)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000013c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001380)={&(0x7f0000001240)={0x118, r2, 0x0, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xfc, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}]}}]}, 0x118}}, 0x800) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 18:46:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000740000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2647.315101] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:46:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) io_setup(0x10000, &(0x7f00000002c0)=0x0) io_getevents(r1, 0x0, 0x2, &(0x7f0000000300)=[{}, {}], &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x272) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) sendmmsg(r2, &(0x7f00000089c0)=[{{&(0x7f0000000640)=@xdp={0x2c, 0x6, r3, 0x15}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000006c0)="4f7c7e612402cc62a39a88d87e38cbaaa8a216bef949f9b973ec96990232904490db5c0f95d0d8f29cb6c626e62b8db89d61eba165e2399c3f12909fcad9e3042775aee92621663d36ba964d1310e31bf08cc15e753186659a2d7451acff4c42020fc68bc8b96cab30749a79e363ca298452041cbebd8e0cd28a61a8ca5487cf8ece077e2c77731c363c6fa192510cb65214bfee0595390e96203cfb88afe4690bbfe6821a0c0ec4ce8469181f69dbb0309157f5982d3b2e0adf40f01cc3403b8ee1a42b43171db8c43e4b37d2", 0xcd}, {&(0x7f00000007c0)="16456b2d1561a5f78eddcbc823b0cf8da9e6143c6e62754f0efb0ecff7205f8af37ad1bddd46f22473c5", 0x2a}, {&(0x7f0000000800)="8e46a837e87a293c7fd0567201f816abc4dfe02f78330104411d4f62a240a1884bd21ae48cb77cc1f2bfefc972e2aaa5df6cc83124211be563c72825193d2a6ba872b5fe9b3c61685bb83f30b9c2b0a60336eddbe8d09b7992d89a", 0x5b}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="7f425d233dae1c9e774f4ade3d0b18db3735f454937bf7c8a06b917694ff401f18b58efda0f0cbd87a11fdc5c60ce3f22ff9c16d41f8a2218303eae3ef870850b9a0f24449d04697bafdb49d673aa9161b23b3b2cbdc556fe8d789214233aa04ae2540c15dcee67383915cf6060d8727cadc058ead52f16fb856d4b25ad6b6af90ff6946efc84a2f83b3a609bc26369a920db3597518c3985f65bf62f18452698516fc8b70aa4dc0c6ed1446b38d50bf23e762ddbe0a71a0e62d3ddb3d47edbc0dbeeda59290af66fd77aeea44754822d8ca29c1da4dee167c6b8ba9d8f3fbb722", 0xe1}, {&(0x7f00000009c0)="2e5ab990b54ce112a5bb30a8535d62d44a34d8ff3a13bf60ea0839d8d1866a5949f49d45f57c3489bd30f6328b28e574e236f71657ea3be0773f3ea920c7105063284bcfba3c21589c7b2acdd8b616799f06d30474b9238d6491e5c7f7576f7056671a095fbabe81300397eb6caa2cb3a3be01cdfc542b28ee1439f5591e33793e9395c21a194c239a259675", 0x8c}, {&(0x7f0000000a80)="45dd1c8b7480551cbd9ed0620ff758aa0c0cdac9648cef934353ed27c366e3132935f55e843e19d4e30444d51a039ecc9adb8f24d15d2eea287b10ee2d19b5a8538008d788efd0cd5537d05191fbb1c9060902228f58aa6c89130f5411e6230458d3a7f2545e8b5579b3672517b082b13efe49b064658a67", 0x78}], 0x7, &(0x7f0000000b80)=[{0xc8, 0x88, 0x100000001, "29118065014976518a45ddfe86b3a856ad15b77795cd18b801ff9e5a4e36bb95571e752b467bc84d70b49df0a329b705215c1e8b1c1faa7151ec326b488c12f8e0555e8208239d83d75253db07618c43a472e63e0b951cb4d23f3f0bd0faf2a35f9f703e97e4172ec9ce6961bf5d781c4633693407ef702a4d72c7f4355c362dac8fe023db44af2abc301836a9f405857d1be3ca82c39208b8c6ec05affc4d6876d283ca5c3de16358285cf97c8c1882f2b63b1d"}, {0x48, 0x0, 0x6, "fe0da9e64f2c5b26159c535a770521677b5b1a4bc7d363bef71b6d00407658fa71dbe62d5dc75fc9bfe510506af4211ed7"}, {0xc8, 0x119, 0x2, "2564db2756c1e210c925ed591ecb3999713ea1572d96cc679ac96fc50db6c06d5eb36703e870269ad6948852ff6452dad7a6a7912e0ab43433444263ea7368549376328febdfb9a52290cb351186d4421723dd1a8c25d9415fd9f3fb1ab3b176fae5ab9c87b3069ba003055dee77e366a21f2c8934a916f06fd8e95da034c9703f143eb0a058d6b5625727aaa972b00f383b9dd6f0400517724f042c5c4ea91d654136cf1f09ad69bfa90a8074af49bbea78281d531fb95b"}, {0xa0, 0x0, 0x3, "8f0bcb1bfa49896dae1aa54f56a4b50f712f8f2b0bf31926f50aea51f29b43cfcba05522addbfbb0370966a4c5ceef74180d4d51225ffdca7a70b0b4878c25c82479a0e980a2158fdce79a5675030557f1feb7b67a933f3eb34e696a0cf9534e19922260051fbc38681fa6955f47bc1e27ba70050aff7f45431d9b62547638fedcff7a39205e12c088bef6"}, {0x38, 0x189, 0xc8d, "e11658fea727262dd28d6a705a59fc6429020140c3a9233b5c5c48b5bb7cf3bb8f9c68a2"}, {0x1010, 0x119, 0x6, "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"}, {0x38, 0x109, 0x2, "601fa6cdb467caed42285a4c96088c28d20e9a43b5556630047594a0904a4a9602f5b9"}, {0x20, 0x1, 0x2, "f8e7022aa9940c8f151d8aea6a0b98"}], 0x1318}}, {{&(0x7f0000001ec0)=@pptp={0x18, 0x2, {0x1, @rand_addr=0x1}}, 0x80, &(0x7f0000004340)=[{&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000002f40)="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", 0x1000}, {&(0x7f0000003f40)="641df6b93b9a946b461b084ee5b01f32da1656169200da7ffec868f9b4b1739bafa4e5de41a3a09b9f0691007d8a6e5a20bf9cd72a7a3e1eb16ec9a440d706c46c26fe9f65edc1076c4b6ba37d3e197fa784df38c0b3a4caedd86e127c535187a0d361bd12cb4d9c28349c395974bd582c8b6c5f9c3043314ced25486675536cb19f5ffb8d2a2572715797c46d8ecc2afd2a26d4e6f88362d5eb0227b67425", 0x9f}, {&(0x7f0000004000)="b809775f449769eaa3486d75662d63fd93613a778d706a1bd7c917b1f31d2f0c71d909e33fccefac90250f3f2490e10b2544b2109c96a990de1dd794130cc37f2d12f805edcca10270665154c6f978961d86abd7a57b7a0ced847889b05859f8761d140574fdfb2e318efb2c7d9b6ca78140062737430396fac326416316c66d1e52a0422b38b2f127891f6cb9c717839147a71036dbbf905d38025bef49aef3d8f00454ec6bd985e5bdc9023cab5c1b76fb1f2170b98095bb7686fbcbdd739096b4dd5167e7f269", 0xc8}, {&(0x7f0000004100)="4d4678fc944a9cce54ae871d9ccf4b2134e415c0f5fee66a0ce28d9a7597cee1bb69faf200dd5c9c2e75a3e9a3af8def904fc65b05f4fe23d481280de9b7e9c6affda92e3b061d85577f7925b2d56a6104827d002f5b41e5a1ceb271a861d022968c2fdaea3ceabb64e9fa2396eca20d1c369f27f16b12f6ca1a6d74759b500d41edd91e6c5f9db5f3ceaba8c24168927c3800916a1323c7190efdada56a236cfb729443694a133cd5274a77ad9dbbb77b90282da385fa57063eab6dee79a022205ab534330128d9b36ca065b9dcad285f708815dc9da72db7c43beb2933b18d641df494764bbc05be21b5002401f01d2ea1a1c953d5b295b48cb6d589e3", 0xfe}, {&(0x7f0000004200)="2da5f4caa628b4b7d066af5a624a3972e9f61ce2728c406ef04e8daf9d4dd58f8f05d45dcd2961a82a93fb6419d8a5e780d521f1a0424a5d36e1ee55472ccc0810f74a3b3db5b1c79e6f007cfc343c18379e7c8ff818e8d3f3a7adc2eb2fdf1e5cae096d8ef87228d21b9f96f0c84675023ecf3ae6ca15e0d75b51bb5b5a30d94633ca4dc6510a792df058779c52c533f22fa2d775d6fdf98b38964b0aaeddf8aa9cfe24cc", 0xa5}, {&(0x7f00000042c0)="897819846f82d55f18a2a0b54353f67ba216f608d2acfbdb0c713453e7380af49ce83c4c0c5135352d1e356246f92dc7800da3d51f2e01ee58e81e3362497fd2333e47d8adac3b3ebc76ec0a9360c279bc1ce431", 0x54}], 0x7, &(0x7f00000043c0)=ANY=[@ANYBLOB="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"], 0x518}}, {{0x0, 0x0, &(0x7f0000005c80)=[{&(0x7f0000004900)="10c9b12ce79b8d14c4f9622ddf9b21e49bccda0df521e67b71686822aab915d3f24fd4ededad4931c85d4d43cfb590f34a934a8ae2a3d1115ea8f4e12631c9d4de95d3a5e5d519a235494b6af1ed07251ed8101c8f813c278551f17a3a5ef9096f1e70a36278b173a649974a6323694fe70c041c8eba1e0d08c2a01dc7a378c3ffb5e5d41dd8d4c0dee10eccc59abab344d5e101d6623a1ea652ba2c6d998f4b06ba300e24d7b64bcc60ab9f214fc5eaa49b91374ed03f2dd24ca9adcd919b0bd1304b97568cad3dc6486df9548ee633b0fe77fec0f9311356f031e7bc7e713dcc0efcd1590890e4f240855f7aa28c58447e", 0xf2}, {&(0x7f0000004a00)="532ad83c8364d36c50c251cab1350113d4659f2d9e1396fc444177aaed6570d9dfe398c55c8bb2c39482f956b953136fd905ed998d3cb6287516313724f0385e97bf87a51c709150b3dbcf5c201af573f771ffe6d00e4678e372d7eed9d4043f9f5a53157fa9d9c602e0528d83580141552961e0a547788f7c5ebaf56fbe3b756a6f6f6e4d2165f6398bea44c5b528eed34a3487d2887d1462c53cd1858f4d5aa031f4dcd3aac96b4d", 0xa9}, {&(0x7f0000004ac0)="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", 0x1000}, {&(0x7f0000005ac0)="d9c3769494172b34fa2e50d42afe31bad8f359745efaa6298ca0b2557f5d39e44f1cf5bed0655b26c0e4e4d6dce7e4e249dafab87e9473ca5d90e1e9ac3c2adaca803d2860e9ab3ec1c5e9620a6d0f407aa08e8830d35bcaa03889cc5362f5f71e6501b235effe457bde40225fb5e11e72aada7c58722124196326db1694cd4c000924faf58c9eb84b772f9b1901416302fe628031b3045f1250b8845b17", 0x9e}, {&(0x7f0000005b80)="15989d1b62bd7a357fc73aaab31de782e609046401546be52ea6c34dd0dd32410299a6cf7812d5116f8886cd13654cb1a42ec8f8387e277ec2455d2be4fb6c8c78df56d707d098e6a7f7379b35bc2b20451d3596e473fb35fd7e6e3ab88bdd8004486246e344bfe810c035d3352d074acdf599dc0618e61430dafcec4fd968951d16ead463a2ebb8d0100ea1680e72844257844e323dfca17e9cc59549b5b39c12571118d1a6a7bfcde2f39246e4bfb3f0491bf651418aac42294ba99a9712c1881e8bd510113dc3", 0xc8}], 0x5, &(0x7f0000005d00)=[{0x70, 0x10c, 0x1, "16e347fc6474da32265a69414f9ebdf861985de0f23f4b9de518dd081fc86dfb3dcc27bc8476b4c88b3b52c2c35d8807c8f21c959869e229fd981fbb3c58508590af20c262673e3de08d4c9ce2b45d2744c2e1662a0c78d20d71c798"}, {0x1010, 0x0, 0x38, "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"}, {0xb8, 0x10e, 0x1, "bbc93d31046a3298ead755a7ba380043318ddc241a78d89822198146a9fbe906a4e995406951ded16761674d3654d93dcc49f73f4ac5d63eb8865bbb93a183ea4f4a736f76a64d9e6d31aa51e97bd5c20dbf6b14bad6cbf2b98bd42ed78a0427d0895f3e560fdc77a09f90b52dee75adc435a47e34d58eb774ee0f9a58cfc2307e7860eaf1b3699a37d5523349b1f7e4bfcdab087abde2af5781e09c8ce26b054334080ad05c"}, {0x110, 0x11f, 0x7e, "6049f11ed1f9b8b4d361a9ccbd77d33dad90759c30def746d3777fd50292d75c6838a6a3ad09395157900ffaa6d40e197ebdf97849fe0e84b45b4b530070e445817bc00ce422ab46f2d333c737d36785293a13a07384e140c65280bfcf78f5f23597b2631882717c569fa98a2d7830379d2cac021d30599c99450533fc2741f116303f04e0087fd3489d6d54cde471652f5e1a6e8a54bfb95b70bdf2862a4b5374ca68fae1b13bd872c43bff92dda94213fdeb6c84f14f00832f045aa5d6ba735359088afbb739715a93cf90dc2bd3d908d5ba6b25191c833c843a1c0733b2af559872be231c1aa42ecd1967f9e7672a56f6362dc3ad09b9226906ec17"}, {0x100, 0x1, 0x3e, "2d2c4212586ce64eec8ae9b94c9fb6c157bfadd851fd6414e472281e25ec4cac75d91d288beb18597ba1e2c8f17efca016b924a5a35f4814ab7f2cb6aa79a63f6b8edf0618a540aa199978af40fce09de7b7706e6c67eab8cbb0e45cd582b24f0b16acdb3fb6ea72c9337358a8080e8bf0d7b8758842bec2b83dc960ce46887f45ce0e4fd5f8d5499d686bc7298b26437d7577b32c3bc8e028fe1f5bdb78558830022c872fb82eb5850cb53f4f886c74d9b6f6c9dcb7f8221aac1f05eecb9a4be989d3eef0e6400c5125c06af149ed8d4b986019881c7599af468e40c6e1adbe0627d4858f76aa59fcf3"}, {0xb8, 0x0, 0x10c0, "3df648afc201f18494be4a3a904b55a584201144d45f95a8af5fdaf077b7d6a0bbdda3ffd7c8e6f88584873d25393bee187e7ea9fd715836fea35a99ebd49366d53c2af864a88e0adf0b1cfc58aead2fa58732b11168c68a28652f93877d01a3a1f30bb84aa9f8b1b3ff90832ee53fa49849404c143bcdc985c78bebae6e161352aa6fd62161e25a651cffd15f49975c3c7fb2b5125fdcca3dda91210ebfb93e56c4"}, {0xd0, 0x1ff, 0x78a1, "b91bdab1c1fcff24aa634d3870cec1c004c213824023410cee964ec6ae3d3547683490efbccf1531d7563d9129a172711d362bb9ed2efdf981a5f7cab51895869a082ec4195aafdbca1e2465ede655a44e795bb4f16db57c50b63ae1b534b351f207c3c2a5df6706c9f9de299b408b980703422f6bcca38aafa991970f24f1e56a350abfa34559ecea43b1f13ccd1a8cfd64cbbcc293d33bbebccc7358bc11b2472d48110814a723f1ca49bc01918b29b0b754a842ecf463508f2bdcc4"}, {0x1010, 0x10f, 0x5, "54880a715e710187793e5fe5b3779a86708ef38d38c8a05e82701f40a574be92ab07bcac69608c051c35cbba973ab4006457f03c0eb54cca73b9d08720a815724c8ca2ff987414920dc531878d01b2e9967396c19018d7d04cf59accf8c966ffcfa7d318277c83bec6ae039e3e91c8ea7a75bea859532c99b49baba26d1969c6d9aaa316259091ea0ecb0a5b4c4912de90502bd9a43c6fc218282f517dcd24ae9e6b625ae6a3004e9cdc9197b096c5a7121b1e9f938d897826539ba349f3e919245fef1fd8d6069ea3715cde4433bb0445e737b795a44320227656a69595a27578b4057b355aad9647057782a254694da711db8e91612733d81092451ff9c3951f2d332ab48debe2e53f90b1d1a3101a63d306b46ecfca37851d99f8d0880b005cacb9ecf1e056aa3e8d8d1b985421ee37323a6ebdd126162d82655f41153c57a15762a887b7aefd7e724a54b505e8ba0a96cdef14d341de17d4501d36fb18c53c41e36de2f2fb313568f56b2b4260c23c4e59892a86594dfca03f24adfe4b06403fd333f74328feb2cb4ce751f4ad2bb8f4e641a8064d4a05e97dcc574c6ebd42de889ba866fd73852bab7074bfda1344ed3210971cea68832ccc4e67c5c79dfe4fac484006fea7af510c89d146ed6abe1b29a4386d5ca1a7d2357639f40e8623694c249eeb49929a7d2b47134a11f22bb396bab0e9aba09d0bc71d620a5a3247853b76ce1cf92e371b40fd12c384733eb0c4434fa6725517effe33f62b8ffb5e14c44381895bc79c51d95b8ca3c3c9bd281f12a803939ed8879f9530407713b881ef3bff49fbd7ce822aa84c35798ce7cc3427ad71166906f11eb429e1503c4314072b60165bba1c76b90494d082885430ce1b3582517da254a89be0e9d40bcaf9fac3e9b68c7683c85bd75f61feaf5e317ce2e8440d9bb883526c906666fab85bf47fb5bd985a0f36710ace0a360531d99f19b47f3649691ff7a339dbbea9ba1705598d1adab01686cb0ae02faf4212bcf7059b6d9fb3425af479a23b0cc61561324f35c9576b6cb22d82bf4bd29fd74e43f1610dae61bac9cea91537f9b05e8e0d7d5db038487c2fa278b328b16d4e6624cf0358952081d2bf89f1fbdca8d22ecf9c19554515c674cd4367b12fd4e396cc5ae7c5a97e3ef2f76ff02e193c7ec2a4556d5699daa3500942e99a8e1e25940f809d277dd4e760c74aa10fca99ba1bf6e9b49853fca896a2f0573afbb40f49c976fb2b4de1d7b66f898c9fd1de350e1dc0fc8c2d8f0b2f7041ef02d80c3e0567b8940fcdbaf8e9289ded9cb99f07c1da039996428c0e03d7087278217190854a0952f79bb02f6053a706e6cf72461546820bafb16cb15e8b22e59a9efbf814a02fe0e668d65156ab78092b36f081e6f0ef48c46b527e8f42456e5066c5bbfca3db5582145c55ea7f85ce2d09157d5feaeb575f81338d65394368ef4a3d9e909ea4994819bb75487d093e7bc6afbcfaae65d502ff44728e5b90d0de659ac4fcd3080975f7ece8fceb06377538523e30ba6a46315743fc693a0bb9022144ef157d543e19f637e66b6d6c4c44ccd5a4600ade9d9756b4ef285ed90d258309497f5e468f27ed6beba7ca981be7365ac9d48d4bff57f3e932b112fc2d4f698e075520c6c38f2a0616abc5a1826615918d2e41670190e69c3c239174d26729a06c3ce88774b000487d2cb801e9c3b5648697b1ab1faeb1b827e864e878886f24a315307c045d2d53c15af96b0cbaa668f4f3d789e66c5ceb9ead2d0ada07db9422fec8d834566024d5d0fbd2acd54b1e20b07b5999eedd2493c6f44d8f04333aee1d799f6b8da8ea528409731f27990555a3e92bbf74f9304140535d39edbdd86cb4004ad275b5429f6608fecbdda57bfcf74c08d161e0649f157eaa520a150fa181211c77f492120dca124f43b3b37fd3fc92db057761736688e42095feb11b3bc92f0e3633b7d886aeb150d4e9ce5637191b779cd43db4e0b9ea314a4abb19f0952f7510a9d631dc2a20022a468be851abaa8e1c5c6ace5620edaf3b10853a259dafde8e7e64cefd046d32849d00e3bb62259d1fc8aca8de1f1d0f3be577c5ae4f0eacd66c8f896e9672f0884967a532c0d52d0832ec3883319ce86ee5c6e46d5cab6c99b42655d4c64a1ba793a7e355fc01626f76e26e28add86e4acd47dba46bb9ce50349e0c84e76dfb345e777950359f854f1cf95a48dda7ef0dbd229119f6d3ca12274b4b86ecb85c896fde3fbe5da4490e3ec833d1e1ac774f31a26177a0d2a28be6be364e1e9b4cd85c1f926f8c6d797bf8271f78470e7a3f8df1511071a12c231e32d7bce492229c5bad6d15ea2e051136772966e23f812e3a8492520a2125ec93c125b0cbc022a7829dfa4aabff75a668edd29a1635da054c8b7bfdceffe9a71393503ac48c3af308e62a9b2f7b4c75e53254f65bde7b5807a64a621aa9b5c50d339850a8b738f6723f40993b9a0d04c956c13b8193a040f1d86efa538798bd333803e448d31f4f83765413aec4acfc80506378663b1d82d03413203e8375126fbe609be0aec2310032cd735516d97c02edc5f4e8cfe684a3821b8e81b2a3e27c70bab54149b4a9b3261784f180ba366e13e9f8b4f793646504013d8735d89f6f629e04cdb3584c9a50c311f2f96c90680a51fc436c2a510b970eb0e82bd80724e27aa481ba2da1d99346f4fa9d61a11c4e73171042cb1059341a221534017bc67816906fe10a5ed3b6818a9f12f386cdf7613b2e76132dbc923e7b6cc87669387bfa9dac66788eb8cc5e7890a904600887fad91ee52238a42322f3cb3eb27f2cbdb903a8abb364275ddd637e91458a02c113513bda0283b28c30d5c8b0abb6dafb32eb5c83bee6cbda2a1aa5e1a3f528028e23d1f80e30d4be9bf1c28d532b604f4d67e599bfba82b3f07645dca33dbf189d7fb8f0eaa7a9c5e11d8102ed460b8c5c5c67d85730ec48b5dc64aebbd6ceb5f3ec522ab79970989474305e196e5cc4e8b042cf9e260b4859fd3fe9a54f82de8a4bdd3bfe269375f52ecbc14aa12e748e396a3ea089c985e7444f6d7af4017f2a574c70c7eac46aac3cc8c4af89ec68d560d06dcb3bef99f377c75e433f43fa4af73ce6303c01342d215d419dd94503457fd67b4f6f4d4f01cae9e5436e9158f341ab27a5067f09dcd01abdcd2393e044de6b40817de612380c22d04fe8f756239c422adaeee9bab0e885a47dd84b2871df125e818521add6dbd43e5614a4ac95492137890a7247d8f9198f88b789783c53b00beb1616ff5acb6d0f02385eb546a94561f2c761cc160a1ffba1b07157694637f1e65ce7e95e1cb88f06b79ccdc8ddef071849095b430863fd6cee0ed1993cbf72793b10c4ab4338dd5a99bfbf3c4eec5f526e5b1e689880b5fb150ee3796bfa9f6dfe5861e94a45a43d4c8ef469770950c3440ce41468f7f34ff664bb356ca1011a7b11dcef9ebc82fa1d9cd660895863d1303ff0d77aada0feb2a2e2fe17ab9532cb8dc546201bc9d106e3960089ec01cc5a075cffeaf6c1ec68510bfd75fcd9c97e99c6fed66d7b5eea7107f754203750dab100354e41244c16610ee6927d4c89aea46b444ffb782b4bd0ac64a055258b3e175f2842a34ba88f8f9e4942af9ac541d6d1bf68a31ef0913f84525a38d2448f3939f325091f8e2ef517b8ee55f8c519253f30959b6485a47285a9a4203a7599e817bf27cd6346e0b2cfb92461adeee4243375e9ea07f394f09df56b34cda24efaabb66ed08c08bbe80d2722e8ac1ad5224b94ae7423f3bb2dab63325be44616c3397e6a4c32eb49d8eb50d14f6180af8dc1c07817b2c91eac58a88797589b8a13a55020fcd6f157e28586a359f68add7999ed166352ef81902d2ddc53a9bbc64082f411e1656a007a72d06ac78c8a96e0eea04f5770b5ede77c634ae5c3c48de94603c79a1c044a524667c8c2ec724074a478fcac84639011ac052378ae898ae3d18da1909852704f162c3b1ba495d88d192a1228e7ba39e883e0f56955a0454bb2a1d926704283718362be9bb94f2aa2714515f65908868419b3fa182fe7afd4d527b639193dd1cce364bb02a1bf9646bff394652477ea8d4718da5ceab7612bfc2d8e7872be7c0d2df0a57720e4b94d5476247dd2c466702eb76d83da737ba13955b3a916d4641296f19b2442412d00225636f953ea8816a0c840d968aa8a0ad0ca247683a0d8f0459568f91094ab4fbfe889fd5770b1171ed47303ab65e5fbe1316ecb5f68fd640a98277bc1a7142729cd39b61eb2f8f4e4e9d9bb8bd1967af4569742a7671aa91ce8054c003fd56ad9e4c049943aa120b3d0bf2c941cb2304b1e269cab37057210c4b0b8ab79165029f1a86a629f36074f9f193ce8ff9c348d0321d314500b45e6f8dcce32d43a0b4a880e54845bb38a69d883f6ec94012bd7bf863942706a946bab3147a1dd8b1b1825222f64650e7e3084b9e18ddfd6f66f0197e00db30789d789c875222c8e32eb65d0ad6804fd005f882977bbaf1df2407980430c01b97e291d0c6649f499bbd2cef1182fba46eabb3b11d599db2a45c04a239a40349c57cfc52aedc74dcfbd7fb9b42b69179175e5b0ca369c5f8e57062db815051259bf3e41bc1f1e8088309090a692be1a95a8c73df30cc1d76a4ea6941a6ca1678be445b5393a3b3a5e583b6d6e4a0cc6147352a47f5ee78a527abaf9e1963beb1c27a75729b6b771954b1d6182798b2cc8339fec17597371ba99443bd30ed56319a8d7ba67a5c67fdf8bd5dc5a9289023887a930dea092c0bd800e11232b59cfaefaf2329a70692c08a5a4d36c0b9dd281169a8e24dfd12cc15ca8bab6bb81d4b424aa6ba05e77666def21812a7f9a479c8a6accf31d15677741d3c48b41efec7581631e23e2c7e5518e37566fda4c9286d23123363b4df9c86fe288070b5600872a4e773db3943022ea3954af48122ac1e470aa2214a52879cbea0e3227e9e624be668a28ea1a55ade3ce2aaa8ada6c838876acc496939a22c186433abc66232d2c9a6362354eefd88ca5dc8e6d562a7e2cac858ea1e5c6452f235fe4f1eae4b65908bb9e90f293d9126244f63806ed033bfb1a5ad51c9c6d777c8b2de2e18891d3cbc767d8018899e4667df2f1c0ce58fe91b075f2775df9d4e26d1e02f9a3ac5570ae7ddedf672a9765cf5ab765fbf061cbb15e2f8c1b5c54c4ca6f1842a34592da4b46d058e77cea4e5124195ab7db04c4c3a8885d139bfaf242553fcfa58d8282479a25f14f73c1cae119109ca376df59e7141077c811294ebe90b24ab626f17e636bd819d814e09405b76b70647eb8ae0859cb936b2692ecd034bdfb19b4986e381f4441335a6430bbbc9a2ce7e784478f02e3993747ed5d4e6eb68b94eaaca582120e8b2c55f590785c6977ad0de967ab38fb11793598d6c977cea2f2814df1d77356efb483c5e9d78a4d087c5a9b0ad2f13aef81eadf3f1b59fc4b60ac417cb8397856a5cdfd07231decfd77315910bfd429b06bd63f7880e993594bb29db4caeab12dd5b5354250b72ac80d16fff9f00c646832e2e590466596a3822397b8f46816a022667ab64743fb450bd6e47ef2a5ba421281c126225ffa7c7460b2be2b696f073d9f70d64dd4de41072d37b361e72de6afd082d2ed0c73df4a9e6811f4577d3d7f6eb5fcbbca2d84ccccc17fa3423c04da35bc9b4bc1393f248929244e66d031005b47131650ce0598a41e65615635acb9742e29bcfcac86a1694aa26a72c9c9ebc67f44cd"}, {0xb0, 0x19c, 0x7, "387d9783b369ffd75c60a55fcd2b33636eec861189f963d7f1f814eb187f697f6ed41bff74342d3bc02632bc0c8f9c64b809eaa53368cee822ee414fcc127867544042e0840f2aa3cbbc72f4221988f87b1c07ee40bed7775f23426cd0777305d9942641a20f7f671fba9781fff842444529877e6c83a6bd1eb213ca85b20d9ae306e3292583d6dea2ace6cba642dbf6e73e181320c8d472f26333"}, {0x98, 0x117, 0x7f, "ee5c9ee6303fc794114635512da5726fd0ac691a7023e49899d4337f6bd30cd0c95ea70cc6739b2481c5840dbf641bf11b294dedccd7c4e4cdfb4d8968551f74931a2765ff874785207a3e1042cc984ffd81c232b67be992da14153ed47f73706f03e57f3cb3d7381b34303d3503f318e8b78664b971f23851c54f3e21440da2ad"}], 0x2628}}, {{&(0x7f0000008340)=@l2={0x1f, 0x8, {0x9, 0x3ff, 0x8, 0x8000, 0x3, 0xc8}, 0x101, 0x7}, 0x80, &(0x7f00000088c0)=[{&(0x7f00000083c0)="6e069b4e20cf4493d590333f25693696995c84fb38eeb11f744a1e691a72f1abd27180e22184608383c9cc30e839d7ec8b202a800aa20623cf269cb530ef6180107b11191b6f6828ac6d6c7a7226bc4ee44cb7823653d1951f19dc98ed568ef395a8fa77f6d67bb7c449f49267645e8386c407ff148a7ac3661918a7aedd99b180b5ada642eba66db9e19051cee779573bdf01833dd19b5e479727a2cacd884d2c6df655a34d2b1cb5ace3ed6592b78933b869018f11d0080204403d308389c179b8b26ed8cf7bff6f4318a111dcd5cb8aa3f39399d9658ff04aa546cc61a6804d05e6c008f66c263c3dcdc56553edc3f2df420a", 0xf4}, {&(0x7f00000084c0)="3032ea432f6e4c696360562d94a0eb8f4f501457097874b1d6c29a39ffbc0d56561ccff40a311e7e21ae19c504690c09b093a8775a2a41a4aeb7620de59b2b6e06b7eb98b452d67a26b99e9991d44be4e6a8df514081ec6256a329040a95377656686a45e3d99669291e5cbfbc5bcb7a13382f9844b7a7ee0ff28deb3fbc1f5dfa2347f0b1b11a77280839d2a1e21a", 0x8f}, {&(0x7f0000008580)="eaeff6495bc36457c391a48e8103ba8d81b50343311b983808e112041bc6ec2cc8858440b0fec815c17e3d8af47bd18f257c8f578002db6dcc523d340e7da415d2ce9ee43d49fc5c9e3a77f3e68fe01b605e41efffa9ac8f6e70eee12342baaf64ddbf6d32612dc8d22661fe183938be8c3a4e88970968ac85b9571f96a30fa4a2594614ee891d3b997262c4dd21924368fd0f8fdd2e22c9faecff4efb2e9b63bf7df04f5c36d74ffaf393b4939dc0dcefc328dc7b6aba04fb3a98a8a3a30f377f3e1442f8d7ca00b2060788a1e98f3ed9fc654bf8e1d05c3f7724dadacb4ce79ba96b4d0f2c0386", 0xe8}, {&(0x7f0000008680)="aa0ceaee5d5798b3b6a953c08073700cc31ca2e1c3f078d8eb8806034832b9dc44e83e3eca85a020e5aadcd3e069dcac13f6aaaf28f9fc282a008000e4ef8b1766d6b1e605096173dbcfa393701039741406ab3f1a84b7e4f4b50389a075cb66c8aed2e4bd2d7a7d7b7eeecab20a447d63995349c1abb22d296956e58c90f1aebf7d818a52d707a88df6808e9bbf27c9af2a35eee5a27aa0e13f213d2116864868f09ea513e4df8ac99eaf02d5ee084b313fdd90d55b0a0feb64a8b8c5bc8d85d9b38a1ee508064952f5dc83dd35bafc8920b9dafdaab5297cc93e5c9a4705926737d3d5f97baead60ac5c38212e46a6f317f139a495e375", 0xf8}, {&(0x7f0000008780)="a46b963e34323030e81bdba5db89cb31db1c4ba7c105b4bd7e96d4b1c2f45b570b238e590b3832235acc5ca5cbaf66afbfa2e2c38e2829cfe61d1cc5210d48007ffde57371e48a4d12196dddd5be942a9f5ca3abe6e3e0eaea159d4d191ac9de96205b4ff5947101cf870a3669fe6cdd0bc27217ad803652bacfad24c3d83fe2458d43afd2ff6654e1cb77aef55f45018fed6da2f6c98669ae53d75b47598bbe955019fcb2be2afbc5146132d120e41b8f097354ba57e595b478e182c4c8139a0ca11066fb31c01ff8f1349dfa0e", 0xce}, {&(0x7f0000008880)="2635aa6fa81c6e3a83c3c7747cb423a5550396b814c259786737f83dc18632eae1539e25280b46787853c2c39beac997d293900b8414aa", 0x37}], 0x6, &(0x7f0000008940)=[{0x70, 0x118, 0x4aa, "cb93a799ccf537bfa280d510de5c54a2749a6d5afd8e3d5e155c065d2701aedc415bd90a70e8c38630b072a8e94c3011b90dc019811019ef185dbf75094d4bafd634aec3d82be4eb97b042b49c56f3cdce4741ae5003c26d8a5f0a9068131237"}], 0x70}}], 0x4, 0x8000) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x20) setsockopt$inet_dccp_buf(r2, 0x21, 0xf, &(0x7f00000003c0)="b6dd4c16e68ec9958509e1a3a361c76365799dc818e36aec29a6c0118a6b556afc42be647dcd45e34ab13e1be2d8d97de3c35301679c0716c7b05a5c58de8b614bed", 0x42) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000001c0)={0x4, 0xffff, 0x80000000, 0x4, 0x9, 0x4, 0x1000, 0xfb6, 0x7fff, 0x7}) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000000380)) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000240)) ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000280)=0x1) 18:46:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2647.419794] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:46:16 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x201, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000200)={0x1f, {0x67a8, 0x1, 0x3, 0x4, 0xe1ea}}, 0xa) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x6, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000240)=0xff, &(0x7f0000000280)=0x1) r2 = socket(0x2, 0x3, 0x6) sendto$rxrpc(r2, &(0x7f0000000080)="08aaf267c3e138b3d45cfef5505a2e0a61b1cca0cef07f5347e8e217c2bdab0913586e2907d57baf6e85b4585d967609f9aa1bb41b7ab69fa1930014d029db821662fb05a3177e3d236244c5c2632916edfd1c", 0x53, 0x40, &(0x7f0000000180)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmmsg(r1, &(0x7f0000000000)=[{{&(0x7f00000024c0)=@hci, 0x80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@tipc=@name, 0x80, &(0x7f0000004840), 0x0, &(0x7f00000048c0)}}], 0x400000000000081, 0x0) [ 2647.479094] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:46:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = socket(0xa, 0x80005, 0x6) sendto$isdn(r1, &(0x7f0000000100)={0x5, 0x8000, "85a4f7fd6491f32f67da2d395f7b6fd0b25def44127d93d012e9cce44aaeb3e9465da0a85b9069fa63f23bfbb44541f1bb79fb43d1f55994b6c2a617189cb50cbaaa4cc1c715b7acb702649ace4d0f9b3122c696111a5d87084f8e5374d952a403ffb59888087bff5a833993115f412a"}, 0x78, 0x4, &(0x7f0000000000)={0x22, 0x100, 0xbbeb, 0x5, 0x2c}, 0x6) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 18:46:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000007a0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2647.519719] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2647.559699] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:46:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2647.625425] Bluetooth: hci1: Frame reassembly failed (-84) [ 2647.651602] Bluetooth: hci1: Frame reassembly failed (-84) 18:46:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x400014) r1 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000000c0)={0x9, 0x9, 0x4, 0x800, {0x77359400}, {0x4, 0xd, 0x81, 0x53, 0x7, 0x1, "1b8b8c4b"}, 0xffffffffffffff81, 0x0, @offset=0x1, 0x4}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0x11}) 18:46:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000f00000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:46:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:46:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000930100000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2649.568023] Bluetooth: hci0: command 0xfc11 tx timeout [ 2649.568043] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2649.648107] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2651.658062] Bluetooth: hci0: command 0xfc11 tx timeout [ 2651.658070] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:46:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x6, 0x24000) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000180)={0xbe83, 0x80000000, 0x80000001, 0x4, 0x1, 0xc352, 0x6, 0x80000000, 0x7, 0x100, 0x5c9, 0x6}) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x3, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000280)=""/146, &(0x7f0000000340)=0x92) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) connect$caif(r0, &(0x7f0000000000)=@dgm={0x25, 0x7, 0x864}, 0x18) ioctl$void(r0, 0x5450) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') 18:46:20 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) mq_open(&(0x7f0000000300)=':GPL!]proc,user\'&,\x00', 0x0, 0x90, &(0x7f00000003c0)={0x0, 0x7, 0x0, 0x6, 0x0, 0x8001}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000280)={0x7ff, 0x0, 0x8001}) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0x1d, 0xc0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, 0x0) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@remote, 0x0}, &(0x7f0000000180)=0x14) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r3}, 0x10, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x200400d0) syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000400)=@pppol2tpv3in6, 0x80, &(0x7f0000000600)=[{&(0x7f0000000480)=""/230, 0xe6}, {&(0x7f0000000140)}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000240)=""/47, 0x2f}, {&(0x7f0000000580)=""/65, 0x41}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x6, &(0x7f0000000680)=""/200, 0xc8}, 0x80000000}], 0x1, 0x0, 0x0) syz_open_procfs(r2, 0x0) 18:46:20 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:46:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000070", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000a00100000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$KDMKTONE(r0, 0x4b30, 0x4b0f) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000240)={0x2, 0x7, 0x2, 0x100000000, 0x17, 0xfffffffffffffffe, 0x9, 0xfffffffffffffff9, 0x8001, 0x5}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3a81, 0x101000) getsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x8, 0x4}, {0x100000001, 0xa210}]}, 0x14, 0x3) [ 2651.831949] Bluetooth: hci0: Frame reassembly failed (-84) [ 2651.841324] Bluetooth: hci0: Frame reassembly failed (-84) 18:46:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000300000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:46:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaacbf, &(0x7f00000014c0)=[{&(0x7f0000000200)="11b447ca5c30dce5be53ea36e3c55b41422b02b3175726a3a90dea136afb06b622182304402aadf7230c17f2c7d5e3b2d0f7205e3756790bd544bf40e0a68570e37c5f077aa5a136bfa4f6b1a1ab5760", 0x0, 0x5}, {&(0x7f0000000280)="88a71a12fab470e35fa7b3299e"}, {&(0x7f00000002c0)="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", 0x0, 0x4}, {&(0x7f00000003c0)="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", 0x0, 0x7}, {&(0x7f00000013c0)="0533a416ab003001233b24e26aabc4b757cc9a792331bc9b5b08b28ec62885066f6d2584ebcf9df30071bd2e45bd753ff04a5ffd050df4c48358f599f57d1e40e3ed3cb126", 0x0, 0x4}, {&(0x7f0000001440)="000cd8c32b19af6b087a5fb4a1c92e4c9612de0d30b31e862c07e5e362ccc08b767d452299899dcd28fae02d0d8705bb7f8ed4c7072b337e1f6fc9fa42a8de55bd13331e1ca15f6c93be0052eb976c157916aeffac8a31d390475b5bf5e1a8762b9f796e45", 0x0, 0x1}], 0x1000000000000000, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L-', 0x1}, 0x28, 0x3) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 18:46:21 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:46:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000500000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:46:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2652.170560] nla_parse: 28 callbacks suppressed [ 2652.170570] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2652.190129] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2652.206130] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2652.227726] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2652.236957] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2652.252523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2653.888057] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2653.888065] Bluetooth: hci0: command 0xfc11 tx timeout [ 2653.968077] Bluetooth: hci1: command 0xfc11 tx timeout [ 2653.973500] Bluetooth: hci1: Entering manufacturer mode failed (-110) 18:46:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000180)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000100)={0x0, 0x40, 0x301f, 0x1}) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000140)) 18:46:25 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:46:25 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e23578134662c300b2c000500018701546fabca1b4e7d06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 18:46:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000001f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000600000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x7fffffff}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={r2, 0x80000001}, 0x8) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000240)={{0x200, 0x8}, {0x686, 0x8000}, 0x7, 0x0, 0xcd}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000140)={0x0, 0x8000, 0x9, 'queue0\x00', 0x1}) [ 2656.048291] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2656.055166] Bluetooth: hci0: command tx timeout [ 2656.147295] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2656.158233] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:46:25 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x1, 0x0, 0x0, 0x0, 0x9acb}}) [ 2656.194098] Bluetooth: hci0: Frame reassembly failed (-84) [ 2656.201321] Bluetooth: hci0: Frame reassembly failed (-84) [ 2656.212233] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2656.222973] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:46:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:25 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2656.259858] Bluetooth: hci1: Frame reassembly failed (-84) 18:46:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000700000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:25 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:46:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2658.218106] Bluetooth: hci0: command 0xfc11 tx timeout [ 2658.223555] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2658.262915] Bluetooth: hci0: Frame reassembly failed (-84) [ 2658.270612] Bluetooth: hci0: Frame reassembly failed (-84) [ 2658.288049] Bluetooth: hci1: command 0xfc11 tx timeout [ 2658.288262] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2658.318454] Bluetooth: hci1: Frame reassembly failed (-84) [ 2660.288028] Bluetooth: hci0: command 0xfc11 tx timeout [ 2660.288065] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:46:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1a) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 18:46:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) prctl$PR_SET_FPEXC(0xc, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0xffffdfff00000001) ioctl$TCSETS(r0, 0x5404, &(0x7f0000000180)) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 18:46:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:29 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:46:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000140)={{0x1, 0x3, 0xfff, 0x7, 'syz1\x00', 0x5}, 0x0, [0x6, 0x2, 0x7ff, 0x3ac7, 0x8, 0x0, 0x3ff, 0x100000000, 0x0, 0x100000000, 0xff, 0x7b, 0x80000000, 0x2, 0x401, 0xfff, 0x80000000, 0x1, 0x9, 0x1, 0x8d08, 0x5, 0x0, 0x6f5, 0x6681, 0x2, 0x0, 0x8001, 0x2, 0x4, 0x101, 0x81, 0x800, 0x3, 0x6, 0x9, 0x8, 0x0, 0x9c17, 0x6, 0x8, 0xd7a, 0x9, 0x3f, 0x80000000, 0x19, 0x200, 0x1, 0x1ff, 0xbfa, 0xffffffffffff82f5, 0x40, 0xdc4, 0x4, 0x80, 0x5, 0x6, 0x3, 0x9, 0x1, 0x0, 0x2, 0x8, 0x8, 0x4fc0, 0xee07, 0x1000, 0x8001, 0x47, 0x2, 0x4, 0x3, 0x5, 0xe, 0x80, 0xf1, 0x1, 0x7, 0x3e, 0x4, 0x9, 0x6, 0x4, 0x7, 0x0, 0x5, 0x4, 0xb02, 0x7, 0x1, 0x8, 0x4, 0x9, 0x2, 0x1, 0x8, 0x80, 0xe2c, 0x6, 0x4, 0x1, 0x9, 0x9, 0x4, 0xffffffffffff8001, 0x9, 0x7b, 0x22286178, 0x3ff, 0x0, 0xffff, 0x400, 0x9, 0x101, 0x0, 0x847, 0xef7, 0x3ff, 0x9, 0xffff, 0xfffffffffffffffa, 0x1f, 0xc2e, 0xf5fa, 0x2, 0x2, 0x5, 0x8001], {0x0, 0x989680}}) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x1, 0x5, 0x4, 0x8, 0x11, 0x760a, 0x6, 0x2da, 0xffffffffffffffc0, 0x8}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2660.368050] Bluetooth: hci1: command 0xfc11 tx timeout [ 2660.368099] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2660.443587] nla_parse: 12 callbacks suppressed [ 2660.443599] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2660.485994] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2660.495995] Bluetooth: hci0: Frame reassembly failed (-84) [ 2660.506003] Bluetooth: hci0: Frame reassembly failed (-84) [ 2660.535367] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2660.535510] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:46:29 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x10) getsockname$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000026000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = gettid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000140)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x8, 0x2, 0x6}) tkill(r1, 0x3b) 18:46:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x20400, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000001c0)=""/116) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x18000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="b9ea16e1914d8e19b95037baf24e3c893e7365abba16aaca6accf385b9702783244b6af3c2e3814a04d1c05626815335b8ffa7315c0890d38c559dcff409915ad57ffaf203a12649028b6ead7d77181ac6d92508cf0f24eb51e9abd57f8982364665409bf72b8ea052", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x10) ioctl$BLKROGET(r1, 0x125e, &(0x7f00000003c0)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4850) 18:46:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000e00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:29 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2660.657773] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2660.697770] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2660.703180] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:46:29 executing program 0: 18:46:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000000000000000ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) [ 2660.751965] Bluetooth: hci1: Frame reassembly failed (-84) [ 2660.782526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:46:29 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:46:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000f00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:30 executing program 0: [ 2660.922221] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2660.949570] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:46:30 executing program 0: 18:46:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2662.538103] Bluetooth: hci0: command 0xfc11 tx timeout [ 2662.543613] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:46:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:pam_console_exec_t:s0\x00', 0x28, 0x3) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video35\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 18:46:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000001400000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2662.703051] Bluetooth: hci0: Frame reassembly failed (-84) [ 2662.703227] Bluetooth: hci0: Frame reassembly failed (-84) [ 2662.715708] Bluetooth: hci0: Frame reassembly failed (-84) [ 2662.778155] Bluetooth: hci1: command 0xfc11 tx timeout [ 2662.783654] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2662.800945] Bluetooth: hci1: Frame reassembly failed (-84) [ 2664.778057] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2664.778131] Bluetooth: hci0: command 0xfc11 tx timeout 18:46:33 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x800000000e, &(0x7f0000000000)="03", 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x3, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x12) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x9) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0x2) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80, 0x80000) getsockname$ax25(r2, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @null, @bcast, @netrom, @rose, @null, @null]}, &(0x7f0000000240)=0x48) 18:46:33 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:46:33 executing program 0: 18:46:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000002000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x24400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0xfffffffffffffffe) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x80000000, 0x80c80) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f00000002c0)={0x0, 0x0, 0x5001, 0x6, 0x3f, {0xcee8, 0xfffffffffffff5c5}}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x0, 0x0, 0x10001, 0x3}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={r3, 0x6}) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000180)) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/checkreqprot\x00', 0x400, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f00000001c0)) [ 2664.853053] Bluetooth: hci1: command 0xfc11 tx timeout [ 2664.858485] Bluetooth: hci1: Entering manufacturer mode failed (-110) 18:46:34 executing program 0: 18:46:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000003f00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2664.969175] Bluetooth: hci0: Frame reassembly failed (-84) [ 2664.984193] Bluetooth: hci0: Frame reassembly failed (-84) 18:46:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:46:34 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2665.074392] Bluetooth: hci1: Frame reassembly failed (-84) [ 2665.080510] Bluetooth: hci1: Frame reassembly failed (-84) 18:46:34 executing program 0: 18:46:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000004800000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2667.008102] Bluetooth: hci0: command 0xfc11 tx timeout [ 2667.018007] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2667.088104] Bluetooth: hci1: command 0xfc11 tx timeout [ 2667.088178] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2667.109690] Bluetooth: hci0: Frame reassembly failed (-84) 18:46:38 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x10000) write$P9_RSYMLINK(r0, &(0x7f0000000100)={0x14, 0x11, 0x2, {0x3, 0x3, 0x6}}, 0x14) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x9) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2a8001, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, @remote, 0x5, 0x2d36, 0x800, 0x500, 0xfffffffffffffff9, 0x200000, r2}) 18:46:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:38 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x10) getsockname$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000026000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = gettid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000140)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x8, 0x0, 0x6}) tkill(r1, 0x3b) 18:46:38 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:46:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000004c00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:46:38 executing program 1: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000100)=0x4c64) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x9) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)) ioctl$VT_RELDISP(r0, 0x5605) [ 2669.168109] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2669.168117] Bluetooth: hci0: command 0xfc11 tx timeout [ 2669.258971] Bluetooth: hci0: Frame reassembly failed (-84) [ 2669.260230] Bluetooth: hci0: Frame reassembly failed (-84) [ 2669.264737] Bluetooth: hci0: Frame reassembly failed (-84) [ 2669.275609] nla_parse: 24 callbacks suppressed [ 2669.275619] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2669.294958] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2669.303775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2669.322945] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2669.344722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:46:38 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="11dca5055e0bcfe4") r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 2669.361932] Bluetooth: hci1: Frame reassembly failed (-84) [ 2669.364238] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:46:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000007f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000006000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2669.456719] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2669.472984] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:46:38 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2669.497883] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2669.530965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:46:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000044, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 18:46:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000006800000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2671.328085] Bluetooth: hci0: command 0xfc11 tx timeout [ 2671.333524] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2671.418358] Bluetooth: hci1: command 0xfc11 tx timeout [ 2671.423928] Bluetooth: hci1: Entering manufacturer mode failed (-110) 18:46:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) ioctl$TCGETX(r0, 0x5432, &(0x7f0000000140)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101900, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) 18:46:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:42 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:46:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000006c00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) msgctl$IPC_INFO(0x0, 0x3, 0x0) keyctl$session_to_parent(0x12) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x7) sysfs$1(0x1, &(0x7f0000000100)='\x00') open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2673.488079] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2673.494867] Bluetooth: hci0: command tx timeout 18:46:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) close(r0) pipe(&(0x7f00000000c0)) read(r0, &(0x7f0000000240)=""/127, 0x2001002f) write$binfmt_aout(r1, &(0x7f0000000100), 0xffffff9c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:46:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000007400000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x13c) 18:46:42 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:46:42 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x80, 0x2000) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x6, 0x400, 0x618, 0x9, 0x4a52}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r1, 0x8001, 0x8, [0x6, 0x7, 0x8, 0x9, 0x9, 0x6, 0x1ff, 0x81]}, &(0x7f00000001c0)=0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x9) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x101000, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000080)) 18:46:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2673.855935] Bluetooth: hci1: Frame reassembly failed (-84) [ 2673.865490] Bluetooth: hci1: Frame reassembly failed (-84) 18:46:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xc) ioctl$KDADDIO(r0, 0x400455c8, 0x9) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f00000002c0)=0xe8) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="3d82edbaeb90ab52c59f29e410c114ed2aa35c4caf036c1ee31bb3593ffa03c7a605f28afa20dfc024e7", 0x2a, 0xc09}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="636f6d6d69743d30786666725253d6092e3fe363d6d4663a5741000683666666666666446638", @ANYRESDEC=r1, @ANYBLOB=',\x00']) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 18:46:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000007a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x60, 0x0, &(0x7f0000000100)=0x44) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000000)) 18:46:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:44 executing program 4 (fault-call:18 fault-nth:0): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2675.728117] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2675.735491] Bluetooth: hci0: command tx timeout [ 2675.818873] nla_parse: 20 callbacks suppressed [ 2675.818882] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2675.842659] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:46:45 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/user\x00', 0x2, 0x0) [ 2675.873372] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2675.880921] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2675.891320] Bluetooth: hci1: command 0xfc11 tx timeout [ 2675.896794] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2675.920838] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2675.956980] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:46:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000019300000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:45 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1000, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x9) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)) 18:46:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:45 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:46:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000640)='./file1\x00', 0x4) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000680), &(0x7f00000006c0)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f0000000280)={0xa0, 0x19, 0x2, {0x48, {0x0, 0x0, 0x6}, 0x108, r3, r4, 0x8, 0x8, 0x1, 0x7fffffff, 0x9f7, 0x80000001, 0x0, 0x20, 0x2, 0xfff, 0x800, 0x100000000, 0x8, 0x8001}}, 0xa0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) [ 2676.135013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2676.166101] Bluetooth: hci0: Frame reassembly failed (-84) [ 2676.166145] Bluetooth: hci0: Frame reassembly failed (-84) 18:46:45 executing program 0: r0 = getpgrp(0x0) ptrace(0x1, r0) r1 = syz_open_dev$mouse(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xd06c, 0x100) ioctl$BLKRRPART(r1, 0x125f, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYBLOB="ff0717003339d70c8125d7f8188fa1b43dcbab119361329e16c9d9"], 0x1f) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000040)={'bond0\x00\xe1\x00e\x00!!\x0f\xdb\x00', @ifru_names='bond_slave_1\x00'}) [ 2676.178628] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2676.187444] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2676.201317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:46:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000f000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:45 executing program 0: ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) userfaultfd(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200080, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000000080)) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) pkey_mprotect(&(0x7f00002a2000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'bridge_slave_0\x00', {0x2, 0x4e24, @broadcast}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x8000}}, 0x10) 18:46:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000004003000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:46:45 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x2, 0x0) 18:46:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000340000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2678.208108] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2678.214970] Bluetooth: hci0: command tx timeout 18:46:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x12) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x2c, &(0x7f0000000200)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x8, @mcast1, 0x100000000}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={r2, 0x8000000}, &(0x7f0000000300)=0x8) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x4200, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000180)=0x48a, 0x4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x121c0, 0x0) write$P9_RLINK(r4, &(0x7f0000000100)={0x7, 0x47, 0x1}, 0x7) 18:46:47 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0xffffffffffffff08, &(0x7f0000000140), 0x1}, 0x8008) 18:46:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000fffff0000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2678.298213] Bluetooth: hci1: command 0xfc11 tx timeout [ 2678.303625] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2678.339171] Bluetooth: hci0: Frame reassembly failed (-84) 18:46:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 18:46:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000000000000000f4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:49 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x4b47, 0x0) 18:46:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000010000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f00000000c0)=0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 18:46:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 2680.368151] Bluetooth: hci0: command 0xfc11 tx timeout [ 2680.373599] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:46:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000020000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000008", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2680.485516] Bluetooth: hci0: sending frame failed (-49) [ 2680.517587] Bluetooth: hci1: Frame reassembly failed (-84) [ 2680.527452] Bluetooth: hci1: Frame reassembly failed (-84) 18:46:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='dctcp\x00', 0x72dc2c91667ccfdb) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = semget(0x1, 0x0, 0x1f1) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000000)=""/200) 18:46:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000030000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000000000000000ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:46:49 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x4b49, 0x0) [ 2682.538125] Bluetooth: hci1: command 0xfc11 tx timeout [ 2682.543560] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2682.550271] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:46:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1f) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000100)) ioctl$TCXONC(r0, 0x540a, 0xf3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x100006) 18:46:51 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00'}) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8000, 0x26100) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x2, 0x2, 0x1, 'queue0\x00', 0x1ff}) 18:46:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:51 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x541b, 0x0) [ 2682.665528] nla_parse: 36 callbacks suppressed [ 2682.665538] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2682.689522] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 18:46:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) 18:46:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$usb(0x0, 0x3, 0x1012c1) memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r0 = socket$inet(0x2, 0x4000020000000001, 0x0) socket$inet(0x2, 0x7, 0x27c) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000002c0)={{0x2, 0x0, @local}, {0x0, @local}, 0x8, {0x2, 0x0, @loopback}, 'rose0\x00'}) [ 2682.726973] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2682.791264] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2682.818263] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2682.823651] Bluetooth: hci0: Frame reassembly failed (-84) 18:46:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x20000, 0x0) [ 2682.836747] Bluetooth: hci0: Frame reassembly failed (-84) 18:46:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000050000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:52 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x5421, 0x0) 18:46:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000000000000000ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:52 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000640)={@loopback, @loopback, 0x0}, &(0x7f0000000680)=0xc) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000080)) fstat(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000740)={{{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x743, 0x4e22, 0x10001, 0x2, 0x80, 0x80, 0x5e, r3, r4}, {0x3, 0x80000001, 0x0, 0x7, 0x8, 0x1cf2f626, 0x4, 0xa441}, {0x2, 0x400, 0x3, 0x786}, 0x4292, 0x0, 0x2, 0x0, 0x3}, {{@in6=@remote, 0x4d2, 0xff}, 0x2, @in=@rand_addr=0x1f, 0x3502, 0x4, 0x3, 0x1, 0x1, 0x5, 0xfffffffffffffff8}}, 0xe8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000000180)) [ 2682.978096] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2683.016487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2683.026703] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 18:46:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x400000) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) [ 2683.079176] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:46:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x20000, 0x0) 18:46:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000060000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2683.143628] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 18:46:52 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x5450, 0x0) 18:46:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000007f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2683.221647] Bluetooth: hci1: Frame reassembly failed (-84) [ 2683.227644] Bluetooth: hci1: Frame reassembly failed (-84) [ 2684.848090] Bluetooth: hci0: command 0xfc11 tx timeout [ 2684.848170] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:46:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x3bb, 0x0, 0x23d, 0xa8, 0xb, 0x6, 0x8, 0x7fff, 0x4, 0x5, 0x9d, 0x6}) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)) mq_open(&(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0, &(0x7f0000000100)={0xffffffff80000001, 0x0, 0x3, 0x3, 0x0, 0xa4, 0x8, 0xfffffffffffffffc}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 18:46:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x20000, 0x0) 18:46:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000070000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:54 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x5451, 0x0) 18:46:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000007fffef080000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x20000, 0x0) [ 2685.074287] Bluetooth: hci0: Frame reassembly failed (-84) [ 2685.084608] Bluetooth: hci0: Frame reassembly failed (-84) [ 2685.248043] Bluetooth: hci1: command 0xfc11 tx timeout [ 2685.253481] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2687.088011] Bluetooth: hci0: command 0xfc11 tx timeout [ 2687.088049] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:46:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0xfffffffffffffffe, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xc) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$TIOCSETD(r0, 0x5412, 0xfffffffffffffffe) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000000)) 18:46:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000000000007f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:46:56 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x5452, 0x0) 18:46:56 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/prof+\x00\x00s/net/ipv\x14/vs/lblcr_expiration\x00', 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @broadcast}, &(0x7f00000003c0)=0xffffffffffffff77) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x103200, 0x0) getsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000100), 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x800) write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[], 0xc9) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000080)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f00000002c0)=""/135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x5460, 0x0) 18:46:56 executing program 0: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000040)={r0, 0x7, 0xbd71, "7a45e61e4f5d2ef38b153d6e9d937caffaa74f133a9aaa4b0761b02c08249ef4d54f67a30cc884375317176194e14f713bc9df73e9023ad3385fa702fa5f9375695c29dcc43305513522f2637d436a56beb7fa2c41b43d5135fe1622f51414bfe2d7afff0be395e8e63d952616c6959720d8a06c003c28bbb213297dccea0a428894bc4f209e491c3cde2c5eb438e4515d3dbe708745ede183c82929dddf0b71bc3b40521db962a11298fb1dcd888f3919"}) recvmmsg(r0, &(0x7f0000000180), 0x4000118, 0x0, 0x0) [ 2687.708382] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2687.774214] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2687.785491] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2687.795611] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:46:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000000000000000ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) [ 2687.823181] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:46:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000140000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:57 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001040)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000001080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x4024, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmsg(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nl=@unspec, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000000c0)="06a3d832e00f2409ee483a794f35182b7045818817e7fa5a943414293a8eb7c1da93d2fc5c288f36fb0bc178ddacca", 0x2f}, {&(0x7f0000000a40)="7feaae8306f1727bd57bb96ba7d8bd46a20e6faec3d2f00677e8063b3485bac14ce597aee886cb483b38f6c665a72ea0fbfcc9feafa0b0cb2c6d8f4c984ab2f926f36425ff0815ec98177818ef8f30fc1c77bc7a8244aaad6b23e0f54402f11fead8d60034a3adba89bb1b9be8220bb098a1592d0b3d779d07ff7835e78f19fa0d2a1302087293a33f007e76436a7703d3d3848639cf263aa4b942284117da19d931563ea93b00a807598935d76cb70943944158cbf4ef6c11f9242ae06a682851f1e29e", 0xc4}, {&(0x7f00000001c0)="b8c1842c8c6dec0ec157136b08983ab6cbebbb91f8c6cad5bfe91bbbafd540977d02af3dd6b4d19a3f8eab8d5a9697533d0a69dfa8cb19bed827962ad89465753aa7fddc72531690a3ae4474b9d5cc840df69879e545f29697cc317c54d417eb49675d0ee1f84139e88efaeedc61992db10a06e5fb52c2460d5d9ec431b89a45cbf66cd5888f49c5f7df4443c153f2942a2a06b50c959f89d74c30b15625ce", 0x9f}, {&(0x7f0000000300)="982b059339d841868de59e846cf6c4d1ea50fdea595dd5900b8a5b68de75d64509f9d7c85df87623eaef47085aa7b596a27ec1e19a292ffd001539c48a042551c7ae563c00f9b1c9d93c3ad492213d3e2d6f4fca6e8d8fa9b0947d8187a7", 0x5e}, {&(0x7f0000000b40)="c60e3422f2fde4a01180e815fa7ee51f386570bf4a4c80c89bb1f679bd7ff414987104388710003c39741176522f78207cc666edea2f0ec9b5512db55b1bed3810d2f9e6b5e39b6cb32559971ffd6aa9d84849985dd18735a41208c41452f736a661144c966ecaac40a15ec26025c2b793260c6887bb71a6e2e936f6cd42db45959dbc2d56180ab9c65468b3a50643", 0x8f}, {&(0x7f0000000c00)="27e90d44e28dc74ab2c66d69a5e3725de453e62be6bbde742816d4c3f565d4608a4dfa25271e3ccd2550b431fcc8b0b5a418fa58d15a0a39fc18aaa243d45692227a561e69870fef4f1d4640cd0ebb6d51119745a6b97a987d6f38704831bdf3592d1fe48a9fd971dd814caaf959c95771d61f253002dd9fbaf825ae030ec4ad9d4e1d0028f7a31af37bb9397e63967ccfe8c21d20054fd4801cb36238363c", 0x9f}], 0x6, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x128}, 0x40) r3 = openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000280)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x0) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154}, {&(0x7f00000003c0)=""/68}, {&(0x7f00000005c0)=""/214}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/146}, {&(0x7f0000000880)=""/144}, {&(0x7f0000000480)=""/13}, {&(0x7f0000000940)=""/71}], 0x2a9, 0x0) r4 = getuid() socket$pppoe(0x18, 0x1, 0x0) lsetxattr$security_evm(&(0x7f0000000ec0)='./file0/file1\x00', &(0x7f0000000f00)='security.evm\x00', &(0x7f0000000f40)=@v2={0x21623f5e0eb1e72e, 0x2, 0x5, 0xfffffffffffff358, 0x9a, "a880dd04e6e9b55f9d046e75ed3821f3b32b5235287fa82f01ff32943496dc04ce807f31ce033011bdeaf4757a48277428b884cfe92c54c32bf6fb2a4f4dec53b9df00a3f306cf9e55cd38b73b8c71fbdcd3c19e265796c5af3d64ae910642e646fffbcbac277d093bf55a5e29d3113f0e8f080660b42ec8fa078ec9badbfd5e966a7689ad3ebe7898cebb8298f58936e7dae6a6fa671aba13ee"}, 0xa4, 0x3) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000e80)={0x3, @default, r4}) [ 2687.977207] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2687.993412] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2688.005043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2688.032567] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2689.488064] Bluetooth: hci0: command 0xfc11 tx timeout [ 2689.488083] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:46:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:46:58 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x40049409, 0x0) 18:46:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpid() timer_create(0x6, &(0x7f0000000040)={0x0, 0x39, 0x4, @tid=r1}, &(0x7f0000000080)) close(r0) prctl$PR_SVE_SET_VL(0x32, 0x2472a) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00\x1f\xff\xf2\x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="4ef27f454c460000006c006c00000000000000000144230511380000000038000000000000000900000000000000000000000000000000005fc870082f6ab610f12a9655c915acc71067733bbbb3e663b5500d2281fb23f9dd3de6a7317a80bcc80c4297f22e37fa374bb364a319a4d264c74d47ba956f3d5ba5b5ab0bc80d32feb34f0b1c70307b8ea66332ae07594b1677ad7541a97585d5b076acc14da4b7b0503e24a94a78e6f1041e1395fdc99c41cae22a9cf46bef799617da115ee972102b2280"], 0x38) [ 2689.648097] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2689.665379] Bluetooth: hci0: Frame reassembly failed (-84) 18:47:00 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000100)='/dev/ptmx\x00'}, 0x30) tkill(r0, 0x1e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x9) r2 = gettid() fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x3, r2}) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0x2) 18:47:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0xbbec62454a9c4a93, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0xfffffffffffffffb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x101}, &(0x7f0000000200)=0x8) write$P9_RWRITE(r1, &(0x7f0000001440)={0xb, 0x77, 0x1, 0x683e}, 0xb) ioctl$TCSETS(r0, 0x5402, &(0x7f0000001400)={0xfffffffffffffff8, 0x48, 0x200, 0x3ef, 0xc, 0x9b, 0x7fff, 0x6, 0x2, 0x5, 0x80000001, 0x9}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r3, 0x7}, &(0x7f0000000280)=0x8) r4 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) recvfrom(r4, &(0x7f0000000300)=""/4096, 0x1000, 0x100, &(0x7f0000001300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x80) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000001380)={0x4, 0x2, @stop_pts=0x5}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) ioctl$KIOCSOUND(r2, 0x4b2f, 0x7) 18:47:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000003f0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="020b00bd02000000000040000000000081f0b51c8dea5f1d492b69ee0edf1ab3233e03aa8c346f967772d2d161ecebc43607c964462e58ea2edd0f9b47c4fdad79a5ca2c97862db869988c7cd2c7a10db2ec7f2a6a3f65785ab6548ccb1c918f02f492000000000000004c8c0e95c9a6ecbe36228c9a71b21b02ada70bfeea1639d03f3c8f297bbf083c22fac0caf0532c92e57ffd61eca3327adfc0fbb5a0b5d36c740292319a59b2601e6c93440000"], 0x10}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000002, 0x0) 18:47:00 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) [ 2691.728046] Bluetooth: hci0: command 0xfc11 tx timeout [ 2691.733527] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:47:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000480000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2691.829265] Bluetooth: hci0: Frame reassembly failed (-84) [ 2691.830508] Bluetooth: hci0: Frame reassembly failed (-84) [ 2691.857232] Bluetooth: hci1: Frame reassembly failed (-84) 18:47:01 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\x00\x00\x06\x00\x99A\xeb\xa6\xde@\x13wk\x02\xa3\xff\xc7{\xcf\xe5,\xba\xc2C\xf0\x8e\xcf\x14]hB6\x9f\n\x9d\"\x1a\xdbl\xe2\xf1\b\x13\xe7\xad\x98\xb9\xe7\xf1\x01\x1b3\v\xac\x8c\x8a\xc4\xb6-\xcasX\x9f+\"fc\xa9>\r\t\xad6\xe0\x8cD\xc6wM\x92\xa3\x14\xa2\x1aihN\nHE\xca\xad\xfb\f\x9d\x8cC8\x81\xb4^N', 0x0) write$binfmt_elf32(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46000000000080000000000000030006000000000000000000380000007fffffff000000000000200002000020000200000000000000000000000000000000000000000000000400dfff000000000000000000000003000000170000000100000c01000000"], 0x68) execveat(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) 18:47:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000004c0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:47:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000600000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2693.898109] Bluetooth: hci1: command 0xfc11 tx timeout [ 2693.903541] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2693.908212] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2693.910359] Bluetooth: hci0: command 0xfc11 tx timeout [ 2693.949700] Bluetooth: hci0: sending frame failed (-49) 18:47:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x40000, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xd) ioctl$KDADDIO(r0, 0x400455c8, 0xb367) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 18:47:05 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) 18:47:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000000000000000ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000272000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x3, 0x7ff, 0xb96, 0x4, 0x81}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={r2, 0x9}, &(0x7f0000000140)=0x8) getdents(r0, &(0x7f0000000180)=""/178, 0xb2) getdents(r0, &(0x7f00000002c0)=""/66, 0xffffffffffffffb4) 18:47:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000680000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x6) [ 2695.968054] Bluetooth: hci0: command 0xfc11 tx timeout [ 2695.968172] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2696.070364] nla_parse: 24 callbacks suppressed [ 2696.070374] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2696.088162] Bluetooth: hci0: Frame reassembly failed (-84) [ 2696.089873] Bluetooth: hci0: Frame reassembly failed (-84) [ 2696.098813] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:47:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0xf, @sdr={0x38414261, 0xce6}}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'batadv0\x00'}) [ 2696.141295] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2696.149739] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:47:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7fffffff}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r2, 0x3eb3624d}, 0x8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f0000000100)={0x7, 0x21, 0x2}, 0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x0, 0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 18:47:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000006c0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2696.200067] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2696.218495] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:47:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:05 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x40086602, 0x0) 18:47:05 executing program 0: perf_event_open$cgroup(&(0x7f0000000040)={0x7, 0x70, 0x200, 0x101, 0x2, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x8, 0x4, 0x1f, 0x80000000, 0x8, 0x0, 0x0, 0x938, 0x0, 0x2, 0x9, 0x2, 0x0, 0x3, 0x7fffffff, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x1fc0, 0x0, 0x0, 0x7fffffff, 0x8, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x2, 0x2163}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000400)=ANY=[@ANYBLOB="960000001000000006000000684300000900000009000000702adad12fd72d70ac6689c75d205d4958c5589309d0aeb91f9c528d5c60a08b7bd863b0b554f309d83915a7b8c030689b27895e3699fa0464ff53c9d9634da01ba57e392f70546cbdcd62a86557dbf71ac268f5cef14a9f9b71abea5b3dd51f91d0061c12eff1273133671a0f5449325314534fba60eeb951191347d3b38a2ec6308fbdd30fb275fd815cdbdfaaedab3527ae03e1865e166a9b1ca18dab"]) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000280)) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000002f00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6o\x9b\x99M\xf8\x87\x1a\xf1\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+\xdb-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\x00v\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') connect$ax25(r1, &(0x7f0000000380)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2696.359441] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2696.369418] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2696.380646] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2696.400713] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2696.439184] Bluetooth: hci1: Frame reassembly failed (-90) [ 2696.444997] Bluetooth: hci1: Frame reassembly failed (-84) 18:47:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000740000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:47:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000000000007a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:47:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:05 executing program 0: r0 = socket$caif_seqpacket(0x25, 0x5, 0x2) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) [ 2698.128065] Bluetooth: hci0: command 0xfc11 tx timeout [ 2698.133526] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:47:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000004c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) timerfd_settime(r1, 0x1, &(0x7f0000000140)={{0x0, 0x1c9c380}}, &(0x7f0000000180)) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0x1) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/688], 0x2b0) timerfd_gettime(r1, &(0x7f0000000500)) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000000)) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000480)=@req={0x9, 0x80000001, 0x2, 0x93}, 0x10) 18:47:07 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x40087602, 0x0) [ 2698.294570] QAT: Invalid ioctl [ 2698.307663] Bluetooth: hci0: Frame reassembly failed (-84) [ 2698.315336] QAT: Invalid ioctl [ 2698.448256] Bluetooth: hci1: command 0xfc11 tx timeout [ 2698.453704] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2700.378183] Bluetooth: hci0: command 0xfc11 tx timeout [ 2700.383593] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:47:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x103800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$rxrpc(r2, &(0x7f0000000100)="3b9420d651fce87ab39211dc8921758442abf72ae37274ed", 0x18, 0x4, &(0x7f0000000140)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x5, @ipv4={[], [], @remote}, 0x7911}}, 0x24) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) 18:47:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000f4eeff7f0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:47:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:09 executing program 0: perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040), 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000140)={0xf, @capture={0x0, 0x1, {0x7ff, 0xffff}, 0x60, 0x5}}) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0xc8000, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) tkill(r1, 0x1000000000016) poll(0x0, 0x0, 0x0) 18:47:09 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) 18:47:09 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x1000}], 0x1, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x80000001}, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10040, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0x63, 0x2) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x1, 0x500) ioctl$KDADDIO(r1, 0x400455c8, 0xd) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)) [ 2700.528295] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2700.535082] Bluetooth: hci1: command tx timeout 18:47:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:47:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000008efff7f0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2700.720768] Bluetooth: hci0: Frame reassembly failed (-84) 18:47:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x10, 0x2, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x100, 0x88040) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000000c0)={0x4, "46b5acdee75828d76b14d0ad887d6fa30bf0c2b2d732324f57f8a26a6ea57457", 0x3, 0x1, 0x3, 0xc00000, 0x2, 0x2}) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080007000400ff7e280000001100ffffba16a0aa1c09000000", 0x35}], 0x1}, 0x0) 18:47:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/load\x00', 0x2, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000100)="58dff4aa7bb5af8b6423457f7cfc420d388f968a944e7e7b2aaa59d347c6e8ab25919216459c36480c4f02a844336075fa8b3096eaaabc53e26ff1c3fe4d74ad566639ef9d06c1a013344a3c7c8b5fd5eb7c8fe62ddff9be49b79d520d5fcca12e84a718682d6e5c2b1077747caaf2d1d6f22564362c320109edca1be728d5fdfb7d2e4457f5f5c082190f3327b559d6a85833fe6bdbbdb2a28272bfe43732dd77ec4db105f81e91752bc156e7174302d6f67fc04192e216e068d93962df79bdb3774587c0649041e0aaee876aaf06d2ed607585dc5e50afde03b066c7557f8dcd4d7251ddf3a1dea023") ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20a00000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r1, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x2c}}, 0x80) 18:47:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:09 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) [ 2700.883109] Bluetooth: hci1: Frame reassembly failed (-84) [ 2700.891390] Bluetooth: hci1: Frame reassembly failed (-84) [ 2702.768058] Bluetooth: hci0: command 0xfc11 tx timeout [ 2702.768099] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2702.792798] Bluetooth: hci0: Frame reassembly failed (-90) [ 2702.938038] Bluetooth: hci1: command 0xfc11 tx timeout [ 2702.938046] Bluetooth: hci1: Entering manufacturer mode failed (-110) 18:47:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x7d4, 0x8, 0xe2a2, 0xfffffffffffffff8, 0x1a, 0x4, 0x3ff, 0x5, 0xc, 0x4, 0x8001, 0x2}) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 18:47:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000001930000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:47:13 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400000, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000000c0)={0x8001007, 0x101, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x2800005) 18:47:13 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 18:47:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x400140, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000140)={0x40}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) ioctl(r0, 0x81, &(0x7f00000000c0)="99cd21005f008514ef1aa50e00ab5c3b1f43a152f3e0da0daa74c6a23de7d2d7e306") [ 2704.848089] Bluetooth: hci0: command 0xfc11 tx timeout [ 2704.848110] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2704.944643] nla_parse: 30 callbacks suppressed [ 2704.944654] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2704.945127] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2704.968356] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2705.001613] Bluetooth: hci0: Frame reassembly failed (-84) [ 2705.007596] Bluetooth: hci0: Frame reassembly failed (-84) [ 2705.024058] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2705.033186] Bluetooth: hci0: Frame reassembly failed (-84) [ 2705.038611] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:47:14 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x5, 0x2, 0x1, 0x200000000000009}, 0xe) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000040), &(0x7f0000000200)="132546d4639c7f0675744c36f3fd7e45f9c625785917d8b1b4c4b676e3bd5f7bf8c2db32a96b9b442c055c6fbe49101803ecb1709a4de5cc1434a41510f619d1caf5249dbc7369bd35922926296f8cbc90a28f7016c99882a2a20fb4ebf53a08a16bef43628ac95e50f7ef1d719b89129503904920b1817b8cc8b446499494c1a65b5e17bcacfb8f83903f531f860161e4bb2bbe5f051bb944625d029522981f52dae3c9b430bcc39bde0ba97a89951b70bf9ae3648457fcc9eaced9657c1afb42df4ebac35e497d6e70d2a778ea438e6db8335cd00f"}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0}, 0x10) [ 2705.048812] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:47:14 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) 18:47:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000ffffff9e0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2705.225547] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2705.245494] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2705.250186] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2705.286600] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:47:14 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 18:47:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b40)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@iv={0x48, 0x117, 0x2, 0x30, "a9d3f2cd828a5f0dfe479bbf2464404c24df4873571d62220e4ea571f9ddfabb83c0324d44257c0e8023feeb9395e2e5"}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x60}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'sit0\x00', {0x2, 0x0, @multicast1}}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x620002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='memory.swap.current\x00', 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x84000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000200)) [ 2707.008147] Bluetooth: hci0: command 0xfc11 tx timeout [ 2707.014524] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2707.088029] Bluetooth: hci1: command 0xfc11 tx timeout [ 2707.098230] Bluetooth: hci1: Entering manufacturer mode failed (-110) 18:47:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00') ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000200)={0x101, 0xc9f4, 0x200, 0x0, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000100)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x9) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0x2) r2 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x5, 0x2) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000180)={0x7b}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x76, 0x7f, 0x1, 0x1, 0xe, 0x5, 0x2, 0xffff, 0x20, 0x4f, 0xfffffffffffffffe, 0x2}) r3 = getpgid(0x0) wait4(r3, &(0x7f0000000240), 0x1, &(0x7f0000000280)) 18:47:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000001a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) times(&(0x7f0000000000)) clone(0x200002002001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fchdir(r0) r1 = socket$inet(0x2, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80001, 0xffffffffffffff3f) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x81, 0x6, 0x1f, 0x4, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={r3, 0xfefa, 0x1000}, &(0x7f0000000200)=0x8) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x3d, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_getoverrun(r4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) connect$inet(r1, &(0x7f0000000040), 0x10) 18:47:18 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 18:47:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1c) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2709.168115] Bluetooth: hci0: command 0xfc11 tx timeout [ 2709.173575] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:47:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000fffffff00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2709.347150] Bluetooth: hci0: sending frame failed (-49) 18:47:18 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffff, 0x2) setsockopt$inet6_dccp_buf(r0, 0x21, 0xcf, &(0x7f0000000040)="fe54136eb8c8bc7ab2fb9ef051618cb658fcd384a98d5a448b98c7612e94f015115ea9dfa28da45c51457de923c14fd0a4f94fc05753716bb4ab10d724d8965a85986e7822f481a8398b641dd741d2379ae1e1ee11daa819fbc45ec02d1ae5255ad2dabc35981cdf232eaa1c0f91cfab9902d15d901c4f39e2701c17306eb3872f8172e5ebdf1ddde46ade65d8e9c74392c3670584648612dda20b13ee6eb8966f41eebcdef92d83ca698381375fad2db0ccaaf52231726d1ce358b01acafc46a10aa47b91d6f1006c0972b36b736b587093661ee5c4aa4f3e155d15b3660aff91a060bf9a", 0xe5) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r1 = dup3(r0, r0, 0x80000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNOTTY(r1, 0x5422) fremovexattr(r2, &(0x7f0000000240)=@random={'btrfs.', 'GPL\x00'}) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000280)={0xff, "a74bba180fc5e58d1f10bfa8a85b8f4e5e7095eeb9968393c607e155d06245d3fa96761db33fa795d3e9fc5e15fb0eb8966d26cff9ecdf6c0eada6b809290ed96a6abe6711a9b4fb98ad398e7f3a3ebd58f9295e6da16ea04f2a288f5b74580dc52f255949ebc22da005028bf9f3b759cc281a5d84ec0cacc1c001ac001b3ee4"}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x6) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x7, @empty, 0x3}}}, 0x88) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000480)=0x2, &(0x7f00000004c0)=0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000500)=0x7, 0x4) sendfile(r2, r3, &(0x7f0000000540), 0x538800000) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000580)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f00000006c0)={r4, 0x8, &(0x7f00000005c0)=[0x81, 0xac, 0xe70c, 0x100, 0x1, 0x800, 0x5, 0x400], &(0x7f0000000600)=[0x8000, 0x3f, 0x37, 0xb3], 0x0, 0x1, 0x3, &(0x7f0000000640)=[0x3], &(0x7f0000000680)=[0x400, 0x8, 0x2, 0x2]}) semget$private(0x0, 0x1, 0x200) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000700)={'veth1_to_bridge\x00', 0x80}) setxattr$security_ima(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='security.ima\x00', &(0x7f00000007c0)=@sha1={0x1, "a7a710136a2493db296464c2b913d9ddb49f03d6"}, 0x15, 0x1) r5 = getegid() stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f00000008c0)=[0xee01, 0xee01, 0xee01, 0xee01, 0xee01]) r8 = getegid() setgroups(0x4, &(0x7f0000000900)=[r5, r6, r7, r8]) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000940)={0x7}, 0x1) accept4$llc(r0, &(0x7f0000000980)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000009c0)=0x10, 0x800) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000a00)={0x8, 0x4, 0x7, 0x3, 0x2, 0x5, 0xffffffff}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000a40)=0x1) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000a80)={0x1, 0x0, {0x3f, 0x2, 0x3002, 0x2, 0x3, 0x6, 0x0, 0x2}}) lseek(r1, 0x0, 0x2) 18:47:18 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x80086601, 0x0) 18:47:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xa) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 18:47:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2711.408139] Bluetooth: hci0: command 0xfc11 tx timeout [ 2711.413576] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2711.432808] Bluetooth: hci0: Frame reassembly failed (-84) 18:47:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x8000000000000b) ioctl$KDADDIO(r0, 0x400455c8, 0x8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000100)={0x4, 0x31364d59, 0x2, @discrete={0x6}}) 18:47:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000007fffeef40000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:47:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x5) 18:47:22 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001840)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 18:47:22 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x80087601, 0x0) [ 2713.488079] Bluetooth: hci0: command 0xfc11 tx timeout [ 2713.488088] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2713.596671] nla_parse: 18 callbacks suppressed [ 2713.596682] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2713.605783] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2713.628207] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2713.663735] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2713.695385] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:47:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31050000000000f60000090000000c00036b9900010091f2bac05a1a4179c56c566bd8d270df6603bc3bd15230dd0b29185190af5df390aed623aab8be9cfc7f456dc2393ad3d2bd12f5c330c61867378a7a6f280a3f0782fce33c99664f22a9ea95642ae9dc7c6ee380cfdef6f3068960c5a41f050950e9be09227a841b93b144755688b749598bf0e866895ed4201c72982fdde0f07475b6f92a1009c13c344e005a9d3262ea501943b916e244347233eb557fdd16c3e9b6389ea395d42e6d93813384f59a335b79bddcb43105b7f2e38ddc86a28b033bac"], 0x20}}, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x42e00, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5a3, 0x6}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x4f}, 0x8) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x10) [ 2713.709922] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:47:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xfffffffffffffffe, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x9, 0x5, 0xe9d3}) 18:47:22 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 18:47:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000f0ffff0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:47:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000000)={0x2, 0xb80, 0x8f06, 0x3, 0x7ff, 0xdc}) [ 2713.912870] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2713.935225] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:47:23 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) r1 = getgid() chown(&(0x7f0000000100)='./file1\x00', r0, r1) utimes(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)={{0x0, 0x2710}}) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x41da02a10a790999, 0x0) lstat(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000600)) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000001a00)=""/4096) mount$bpf(0x20000000, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fsetxattr$security_evm(r3, &(0x7f0000000280)='security.evm\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="05021300000000010028f7f91e170be275433ac83d8e9b02efa6b9722c45160dcd4eb58f6d3f7a9134d72580759ec2cf9202"], 0x32, 0x2) getuid() setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180158010000000000000000000000000000000000000000000000002a00727066696c7465720000000000000000000000000000000000000000000004000000000000002800727066696c746572000000000000000000000000000000000000000000000b0000000000000040005450524f585900000000000000000000edffffff00000000000000000001ff030000861cd25fc8a0465bb69ec9e9c2ad44d713df2c734e23000000000000fe8000000000000000000000000000bb00000000000000000000ffff00000000ffffffffffffff00040000ff0000000000000000000000ffffffff00ffffff0065727370616e300000000000000000006c617062300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000080202000000000000000000000000000000180140010000000000000000000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000300000000000000280065756936340000000000000000000000000000000000000000000000000000000000000000002800484c0000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180160010000000000000000005f71ba374391e947cda09cb5f5829db90000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000009000000000000002800727066696c7465720000000000000000000000000000000000000000000004000000000000004800444e50540000000000000000000000000000000000000000000000000000fe80000000000000000000000000ff070000000000000000000000000000001b373b00"/1046], 0x1) chmod(&(0x7f0000000700)='./file1\x00', 0x2) geteuid() getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000580)={0x0, 0x8}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000006c0)={r5, 0x9}, 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000740)='./file0/file0\x00', 0x90) [ 2713.964988] Bluetooth: hci0: sending frame failed (-49) [ 2713.965900] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2713.990254] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:47:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 18:47:23 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) 18:47:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000007fffffff0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x40, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000280)={"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"}) 18:47:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac141400000000000000000000000000000000000000009effffff0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:47:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2000000000000) ioctl$KDADDIO(r0, 0x400455c8, 0x9) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x281, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 18:47:23 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) 18:47:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2715.968217] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2715.988447] Bluetooth: hci0: Frame reassembly failed (-84) 18:47:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa0080000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="080427bd7000fcdbdb7114000000a0000500080001007564700008000100696200004400020008000300ffffff7f080004000800000008000400b09a0200080003000600000008000400030000000800040001000000080002002000000008000200050000001400020008000400060000000800040002000000080001006962000008000100696200001c00020008000400060000000800010020000000080002001f00000008000100756470001c000900080002009c00000008000100008000000800010081000000"], 0xd0}, 0x1, 0x0, 0x0, 0x2400c0d1}, 0x20000010) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 18:47:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x80, 0x4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000380), &(0x7f0000000340)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x9, 0x81, 0xfa4, 0x6, 0x7fffffff}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x8001, 0x8, 0x100000000, 0x7, 0x0, 0x99, 0x8849cd7, r3}, 0x20) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="9d12bf919555c2bb9ece8559af91560b9dc864c73a8f6802fe000001000000000028981e1c6713712fbc8fc97161fa5ae1f4689af2fed377cdd49883d6e280c38111bf4447f68ad9ab4ae6a64f2ef39a88df870a13808244e815334c61fac849f9e23ecb5361fb4892d129170a8b9734ed79e1eb05f4"], 0x200600) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:47:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000f0ffffff0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) r1 = getpid() kcmp(0x0, r1, 0x1, r0, r0) 18:47:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:27 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) [ 2718.048175] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2718.048203] Bluetooth: hci0: command 0xfc11 tx timeout [ 2718.140569] Bluetooth: hci0: Frame reassembly failed (-84) [ 2718.146447] Bluetooth: hci0: Frame reassembly failed (-84) [ 2718.153008] Bluetooth: hci0: Frame reassembly failed (-84) 18:47:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:47:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000ffffffffa001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x10000, 0x0) 18:47:27 executing program 0: inotify_init1(0x80000) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x2000, 0x0) getresgid(&(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000300)={0x800, 0xc29, 0x5, 0x4, 0xd, 0x9}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x3}) r3 = dup2(r2, r2) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0x200000d) r4 = syz_open_pts(r3, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x2) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x823}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:47:27 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 18:47:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000f0ffffff7f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2718.361338] Bluetooth: hci1: Frame reassembly failed (-84) 18:47:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) io_setup(0x8a22, &(0x7f0000000080)=0x0) io_pgetevents(r1, 0x400, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f0000000240)={&(0x7f00000001c0), 0x8}) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) close(r0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) close(r2) tkill(r4, 0x16) 18:47:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45087bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) [ 2718.602716] nla_parse: 36 callbacks suppressed [ 2718.603054] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2718.619413] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2718.645089] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2718.687073] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2720.208087] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2720.208107] Bluetooth: hci0: command 0xfc11 tx timeout 18:47:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCNXCL(r0, 0x540d) 18:47:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000003400000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:29 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) 18:47:29 executing program 0: getdents64(0xffffffffffffffff, 0xfffffffffffffffd, 0xfffffffffffffe82) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x82080, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000040)={0x38, 0xfffffffffffffff5, 0x1, [{0x1, 0x3b000, 0xa, 0x7, 'GPLppp1]\'r'}]}, 0x38) 18:47:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2720.333934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2720.343542] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2720.368135] Bluetooth: hci1: command 0xfc11 tx timeout [ 2720.373577] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2720.374965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2720.394771] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2720.421143] Bluetooth: hci0: Frame reassembly failed (-84) [ 2720.435187] Bluetooth: hci1: Frame reassembly failed (-84) [ 2720.436112] Bluetooth: hci1: Frame reassembly failed (-84) [ 2720.441660] Bluetooth: hci1: Frame reassembly failed (-84) [ 2720.464592] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2720.518984] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:47:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0xc8a) ioctl$KDADDIO(r0, 0x400455c8, 0x9) membarrier(0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) r1 = dup(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd0, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6f6}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xdef6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000140)={0x1000000000000000, 0x8333f65f5a9cfd69, 0x4, 0x8}) ioctl$KDENABIO(r0, 0x4b36) getuid() 18:47:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) write$tun(r0, &(0x7f0000001980)=ANY=[@ANYBLOB="0100000000003300e4ff6031409200823a00fe800000000000000000000000000000ff02000000000000000000000000e9ba850023c23416f6ddc140011a907800000000fe800010000004000000000000000000"], 0xff23) keyctl$setperm(0x5, 0x0, 0x4) 18:47:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000007ffffffff00000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:31 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) 18:47:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RLERRORu(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1c00000007ffff0f00d8"], 0xa) clone(0x2020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend='noextend'}]}}) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000100)={0x80}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2722.448046] Bluetooth: hci1: command 0xfc11 tx timeout [ 2722.448136] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2722.460255] Bluetooth: hci0: command 0xfc11 tx timeout [ 2722.465661] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:47:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000fffffffffffff00000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x36) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) [ 2722.635138] Bluetooth: hci0: Frame reassembly failed (-90) [ 2722.641671] Bluetooth: hci0: Frame reassembly failed (-84) 18:47:31 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) 18:47:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCEXCL(r0, 0x540c) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000280)={0x8, 0x7fffffff, 0x20, 0x7, 0x3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x8d1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x4000000000000001, 0x0) fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]) socket$tipc(0x1e, 0x7, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000700)={0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000740)={r6, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000240)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r5}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 2724.688096] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2724.688218] Bluetooth: hci0: command 0xfc11 tx timeout [ 2724.737328] Bluetooth: hci0: Frame reassembly failed (-84) [ 2724.744359] Bluetooth: hci0: Frame reassembly failed (-84) 18:47:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000100)=0x200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x9) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0x2) 18:47:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:35 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000026000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000140)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x1, 0x7, 0x2}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x3b) 18:47:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd080000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:47:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) sysfs$3(0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 18:47:35 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x2) [ 2726.768089] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2726.768269] Bluetooth: hci0: command 0xfc11 tx timeout [ 2726.830343] nla_parse: 16 callbacks suppressed [ 2726.830353] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2726.845614] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2726.868225] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2726.893769] Bluetooth: hci0: Frame reassembly failed (-84) [ 2726.900160] Bluetooth: hci0: Frame reassembly failed (-84) [ 2726.916437] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 18:47:36 executing program 0: r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0x85a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80046601, &(0x7f0000000000)) [ 2726.936237] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2726.945226] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:47:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:36 executing program 0: r0 = socket(0x0, 0x2, 0xfffffffffffff007) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) mkdir(&(0x7f0000002540)='./file0\x00', 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r2, &(0x7f0000000380), r3, 0x0, 0x0, 0x1) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) rename(&(0x7f0000000300)='./file1\x00', 0x0) accept(r0, 0x0, &(0x7f0000002a40)) perf_event_open(&(0x7f000001d000)={0x0, 0xffffffffffffffe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f0000000180)="d353ff072d68b2e4dc14aa5fa8b3d94c22") accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000002b80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000010}, 0xc, 0x0}, 0x20008880) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000002940)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002980)={0x14, r4, 0x824, 0x0, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 18:47:36 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x3) [ 2727.135228] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2727.136494] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2727.162684] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2727.205783] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 18:47:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000300", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2728.928005] Bluetooth: hci0: command 0xfc11 tx timeout [ 2728.928025] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2729.008011] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2729.008312] Bluetooth: hci1: command 0xfc11 tx timeout 18:47:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) 18:47:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd013000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:47:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x4) 18:47:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0xffffffffffffff60}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r2, 0x2, 0xd5}, 0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 18:47:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000000)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) fcntl$getown(r0, 0x9) [ 2731.088062] Bluetooth: hci0: command 0xfc11 tx timeout [ 2731.093520] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2731.196388] Bluetooth: hci0: sending frame failed (-49) [ 2731.204308] Bluetooth: hci0: Frame reassembly failed (-84) 18:47:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) [ 2731.254716] Bluetooth: hci1: Frame reassembly failed (-90) 18:47:40 executing program 0: syz_emit_ethernet(0x3f, &(0x7f0000000600)={@random="cd3997030f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "e30600", 0x9, 0x40000000003a, 0x0, @local, @mcast2, {[], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x0, 0x0, '$'}}}}}}, 0x0) 18:47:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x5) 18:47:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000600", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:40 executing program 0: 18:47:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:40 executing program 0: 18:47:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:47:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x6) [ 2733.248104] Bluetooth: hci0: command 0xfc11 tx timeout [ 2733.253577] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2733.328370] Bluetooth: hci1: command 0xfc11 tx timeout [ 2733.333928] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2733.360576] Bluetooth: hci0: Frame reassembly failed (-90) 18:47:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) ioctl$KDSKBLED(r0, 0x4b65, 0x5) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000100)={'team_slave_1\x00', 0x6}) 18:47:44 executing program 0: 18:47:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000007fffef0800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:44 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x7) 18:47:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x9, 0x3f, 0x2, 0x5, 0x6, 0x3, 0x101, 0x101, 0x8, 0x400000000}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="1900000067b10806000000dbe8000000000000000000"], &(0x7f0000000180)=0x21) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}}, 0x80000001, 0xfff}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000300)={r3, 0xfffffffffffffffb}, &(0x7f0000000340)=0x8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2735.408109] Bluetooth: hci0: command 0xfc11 tx timeout [ 2735.413559] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2735.489479] nla_parse: 24 callbacks suppressed [ 2735.489491] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2735.509852] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2735.532730] Bluetooth: hci0: Frame reassembly failed (-84) 18:47:44 executing program 0: [ 2735.542088] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2735.546424] Bluetooth: hci0: Frame reassembly failed (-84) [ 2735.594130] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2735.603379] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2735.628688] Bluetooth: hci1: Frame reassembly failed (-84) 18:47:44 executing program 0: 18:47:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2735.666182] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:47:44 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x8) 18:47:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:44 executing program 0: [ 2735.755676] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2735.794074] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2735.849980] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2735.879747] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2737.568040] Bluetooth: hci0: command 0xfc11 tx timeout [ 2737.573499] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2737.648339] Bluetooth: hci1: command 0xfc11 tx timeout [ 2737.653815] Bluetooth: hci1: Entering manufacturer mode failed (-110) 18:47:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x8000) r1 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="9d473ea6789a87fb979a6830fd6e7a89e25219bf28dddbe131f603f24e821f794cd296bdfd6340368b4923eb5dd99e5994b0db019a962addeb37f1bfbd7783837039ebbab54a756a25d6b2a06a9d76f8b08f1ac1874cfe7d97239d36e8171913a645cc5d78968f46a2da4168cec6ba57bbc95575f718e9fbe950abf2e57d7eb70139371dd02489659de80b330e0cea080048f67b3e8b25c5bd60d6bb14977e57b323f0a692042e8433821fcfceafa941421aff7473073425581acc7746ab56a04f3942ae627f3a6c9b57382c2314cf07", 0xd0, 0xfffffffffffffffe) r2 = add_key(&(0x7f00000002c0)='cifs.spnego\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="af90337a8c0fa7e9d9f4568e2748ed2686b1f4bffe5950f151766ff0cf2eeffd21ea76ef8e07aa102b35150d9a587f143da2607389bb5d06d5e832a99c4beafba46042c1f3ceae1d578fbe9cc6271cfefaea90e36657b616f4b4e586fe8882659bc7167b2c6c790f3b232ea06d5b080ce8a12c43a13302e1a547e1c403f39f581a326e86e27265f39c449442b7866e24", 0x90, 0xfffffffffffffffc) keyctl$search(0xa, r1, &(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000280)={'syz', 0x3}, r2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 18:47:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000240)=[@increfs_done, @register_looper], 0x0, 0x0, 0x0}) 18:47:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000e00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:47:48 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x9) 18:47:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x6, 0x79, 0x1}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2739.728150] Bluetooth: hci0: command 0xfc11 tx timeout [ 2739.733601] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2739.829678] Bluetooth: hci0: Frame reassembly failed (-84) [ 2739.839641] Bluetooth: hci0: Frame reassembly failed (-84) 18:47:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000000f00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:47:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:49 executing program 0: msgsnd(0x0, &(0x7f0000000280)={0x3}, 0x4, 0x800) 18:47:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xfffffffffffffffe, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 18:47:49 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0xa) 18:47:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2840000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x2, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x9, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8004) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 18:47:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="000b05005100001000"], 0x8) 18:47:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000002000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2740.245130] Bluetooth: hci1: Frame reassembly failed (-84) [ 2740.251646] Bluetooth: hci1: Frame reassembly failed (-84) [ 2741.888106] Bluetooth: hci0: command 0x1003 tx timeout [ 2741.893737] Bluetooth: hci0: sending frame failed (-49) [ 2742.288069] Bluetooth: hci1: command 0xfc11 tx timeout [ 2742.293512] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2743.968139] Bluetooth: hci0: command 0x1001 tx timeout [ 2743.973615] Bluetooth: hci0: sending frame failed (-49) [ 2744.368090] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2744.374911] Bluetooth: hci1: command tx timeout [ 2746.048011] Bluetooth: hci0: command 0x1009 tx timeout 18:47:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000003f00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:59 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0xb) 18:47:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000280)=0x3, 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) bind$packet(r1, &(0x7f0000000240)={0x11, 0x5, r2, 0x1, 0x7fff, 0x6, @broadcast}, 0x14) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000002c0)) 18:47:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) getsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000080), &(0x7f0000000140)=0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) fcntl$getown(r0, 0x9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x20000, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000280)={0x80000000, {{0xa, 0x4e21, 0x5, @ipv4={[], [], @multicast1}, 0x4}}, 0x1, 0x3, [{{0xa, 0x4e23, 0x5, @rand_addr="c09fca95e515a7e618fae0e2221c61b6", 0x1}}, {{0xa, 0x0, 0x7f, @empty, 0x53}}, {{0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}}]}, 0x210) write$apparmor_current(r1, &(0x7f00000004c0)=@profile={'permprofile ', '\x00'}, 0xd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 18:47:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x200200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) [ 2750.441430] nla_parse: 26 callbacks suppressed [ 2750.441441] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2750.456143] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 18:47:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x3, r1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) [ 2750.488423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2750.513730] Bluetooth: hci0: Frame reassembly failed (-84) 18:47:59 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1060}, {&(0x7f0000000400)=""/120, 0x4}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x252}], 0x390, &(0x7f0000002400)=""/191, 0x161}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) [ 2750.532606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2750.532775] Bluetooth: hci0: Frame reassembly failed (-84) [ 2750.555043] Bluetooth: hci0: Frame reassembly failed (-84) [ 2750.578683] Bluetooth: hci0: Frame reassembly failed (-84) 18:47:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000004800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2750.619779] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2750.652440] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:47:59 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0xc) 18:47:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:47:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x6, 0x79, 0x1}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2750.760567] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2750.811129] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2750.828237] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 18:47:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000004c00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2750.853494] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:48:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x6, 0x79, 0x1}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 2752.538079] Bluetooth: hci0: command 0xfc11 tx timeout [ 2752.543710] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:48:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 18:48:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:48:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000006000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:48:01 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0xd) [ 2752.608128] Bluetooth: hci1: command 0xfc11 tx timeout [ 2752.608202] Bluetooth: hci1: Entering manufacturer mode failed (-110) 18:48:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x6, 0x79, 0x1}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 18:48:01 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) getpgid(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x9) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0x2) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0xb59a, 0x2000) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000140)) 18:48:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000006800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:48:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2752.743619] Bluetooth: hci0: Frame reassembly failed (-84) [ 2752.750089] Bluetooth: hci0: Frame reassembly failed (-84) [ 2752.793159] Bluetooth: hci1: Frame reassembly failed (-84) [ 2752.799028] Bluetooth: hci1: Frame reassembly failed (-84) 18:48:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000006c00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:48:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0xc8a) ioctl$KDADDIO(r0, 0x400455c8, 0x9) membarrier(0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) r1 = dup(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd0, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6f6}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xdef6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000140)={0x1000000000000000, 0x8333f65f5a9cfd69, 0x4, 0x8}) ioctl$KDENABIO(r0, 0x4b36) getuid() 18:48:02 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0xe) 18:48:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2754.768058] Bluetooth: hci0: command 0xfc11 tx timeout [ 2754.768066] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:48:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x34196f578932b79a) 18:48:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000007400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:48:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0xc8a) ioctl$KDADDIO(r0, 0x400455c8, 0x9) membarrier(0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) r1 = dup(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd0, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6f6}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xdef6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000140)={0x1000000000000000, 0x8333f65f5a9cfd69, 0x4, 0x8}) ioctl$KDENABIO(r0, 0x4b36) getuid() 18:48:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:48:03 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0xf) [ 2754.858067] Bluetooth: hci1: command 0xfc11 tx timeout [ 2754.858303] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2754.952820] Bluetooth: hci0: Frame reassembly failed (-84) [ 2754.963638] Bluetooth: hci0: Frame reassembly failed (-84) [ 2754.964160] Bluetooth: hci0: Frame reassembly failed (-84) 18:48:04 executing program 2: prctl$PR_GET_FP_MODE(0x2e) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = dup2(r0, r0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000340)=&(0x7f0000000300)) write$smack_current(r1, &(0x7f0000000480)='TIPCv2\x00', 0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="200026bd7000fedbdf250f0000002c000200040004000400040008000200050000000800010007000000040004000800020001000000040004002c0002000800020005000000080002000200000004000400080001000900000008000200fb0b8a2f0400040014000600040002000800010009000000040002005000070008000100ffffffff08000100f8ffffff0c000300ad0b0000000000000c000300000000000000000008000200b4a9000008000200ffffff7f08000200040000000c00040005000000000000000c00010008000300ffffffff"], 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800005}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r3, 0x10c, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffe}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x814) ioctl$TCXONC(r0, 0x540a, 0x4) 18:48:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000007a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:48:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:48:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0xc8a) ioctl$KDADDIO(r0, 0x400455c8, 0x9) membarrier(0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) r1 = dup(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd0, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6f6}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xdef6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000140)={0x1000000000000000, 0x8333f65f5a9cfd69, 0x4, 0x8}) ioctl$KDENABIO(r0, 0x4b36) getuid() 18:48:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000000019300", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:48:04 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x100ff00, 0x0) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1ff, 0x8040) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @rand_addr=0x6}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, 0x80, 0x0, 0x0, 0x0, 0x71, &(0x7f0000000100)='ip6tnl0\x00', 0x5, 0x9d8, 0x9}) 18:48:04 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x10) [ 2755.157418] Bluetooth: hci1: Frame reassembly failed (-84) [ 2757.008120] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2757.014903] Bluetooth: hci0: command tx timeout 18:48:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x410801, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100), 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 18:48:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:48:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000ffffff9e00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:48:06 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x4, 0x1f}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000140)) r1 = socket$inet(0x10, 0x80002, 0x0) bind(r1, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x1, 0x3, 0xaf6, 0x5, "fcecd022cfee309031decb2cd10c7e7d38320d7fb6d2c092147f56674704b0d59e7d95f96f63e2898f28a326dcc1f22436e67f3ee28659c246893c50142d28", 0x21}, 0x80) sendmsg(r1, &(0x7f0000001400)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0xffff, @local, 0xa1}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000300)="b88832d75635f9b9ce2d5539be99d962f8ba1edb13669195b49e82873edf6584a374d0a9544aa5", 0x27}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="7aeea25fffe36ec0364b0990a6a8bb041334439939f0de3090280a7c4170d90a67c6e5c95ad6498daa5fa4ab45098239274ae931abb0ca0728712041189e6ef9840a0d164ee98d2c9b061e388a786903af90d9eb0bba7a0eac88bd5fb7550f71c3ac058fa467538f8a7eac17c6cf0558f7a2", 0x72}], 0x3}, 0x8001) sendmsg(r1, &(0x7f0000000080)={0x0, 0x30f, &(0x7f0000000000)=[{&(0x7f0000000100)="2f0000001800030007fffd946fa283bc8020000000040005031d85681300090007ff0100710b42fa3ccc0000000000", 0xfed1}], 0x100000000000003d}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2003, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001440)={0x0}, &(0x7f0000001480)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000014c0)={r3, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f0000001580)=0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0xffffffffffff0000, 0x5, 0x0, 0xffffffffffffff37, 0x2, 0x3, 0x2, 0x127, 0x3, 0x3, 0x5}, 0xb) 18:48:06 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x11) [ 2757.168155] Bluetooth: hci1: command 0xfc11 tx timeout [ 2757.173634] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 2757.192390] Bluetooth: hci0: Frame reassembly failed (-84) [ 2757.253667] nla_parse: 36 callbacks suppressed [ 2757.258437] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2757.280680] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2757.305641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2757.314976] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2757.332223] Bluetooth: hci1: Frame reassembly failed (-84) [ 2757.341334] Bluetooth: hci1: Frame reassembly failed (-84) [ 2757.347854] Bluetooth: hci1: Frame reassembly failed (-84) [ 2757.361313] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2757.386515] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:48:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)=0x2) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000100)=""/12, &(0x7f0000000140)=0xc) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f00000001c0)=""/126) 18:48:08 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x58, 0xa0, 0x8000000004}, 0xf) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000001180), &(0x7f00000001c0)}, 0x20) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) 18:48:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000fffffff000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:48:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:48:08 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x12) [ 2759.248090] Bluetooth: hci0: command 0xfc11 tx timeout [ 2759.253535] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2759.331172] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2759.341608] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2759.363134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:48:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x101000, 0x0) write$input_event(r3, &(0x7f0000000100)={{0x77359400}, 0x0, 0x8, 0xffffffffffff0000}, 0x18) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000140)) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)=ANY=[@ANYBLOB="1f00000c0000000000000040050000a90000e7fc4b83bbb6a280763e58892043290000f6ff0000002560c9fafef0ffff0403ffffffff00000a00000006b8111d162b3e056bb953bc156520"]) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000002c0)) syz_open_dev$vivid(&(0x7f0000000280)='/dev/video#\x00', 0x1, 0x2) ioctl$TIOCLINUX6(r3, 0x541c, &(0x7f0000000240)) r4 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x68a, 0x42c7fc) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x101000, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000020000008d030000000000000000c1"]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) [ 2759.386238] Bluetooth: hci0: Frame reassembly failed (-84) [ 2759.400013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2759.408236] Bluetooth: hci1: command 0xfc11 tx timeout [ 2759.414030] Bluetooth: hci1: Entering manufacturer mode failed (-110) 18:48:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000007fffeef400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:48:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 18:48:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:48:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000000007fffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:48:08 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x13) 18:48:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8}, 0xb) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendto$inet(r1, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) pwritev(r1, &(0x7f0000001300)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)="3dcfed08f1acbb696487b1e4a90f5c3e7220430ad4178f0ba99f6c1fb86f8ccd8f0c08fe6074f002fc8b9886c93139b4a8c260f4f552301f5e914b8f50e643d3d38d56f7e3c1", 0x46}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="778cedaca8862d9e27cd9191b6a15c000f71db89b248", 0xe}, {&(0x7f0000001180)="b300a8c067562ddaa4554dabdba864fb7cd6540d79b97e2a7176198fa104a2de2c9f20e83b77f1dbc07604055c30ce3bcca0e452b30c8a5bb15949c49f1b36ef85037862899df59f7618628d6979fb85387a26a9bce2f47419edbf933ae7a37ce05b17e8b0a7908fef9a43ee2bfbde8e7ffd093e87a3081050ebbad925994fa5f1f6f56e27d5726067cf7671450ce4d23b17e3e48fd37bf56516cf709b1c9ddfc5e61faa10dd3af829282f4c17f6cae6b1c221e2a75a1d27a245bd76383885475bb103a357fde315d30f67ed8aa36fcd0bb79cc6", 0xd4}, {&(0x7f0000001280)="1ee7f21199aa67b80f0f7b3556d8adfcb939528ff9f28b6d462a9e8b763cd6506dc8ec60f6278c76c6870cf660da2c2828874c5aad6bddc9b88e95b58dc1eb82fe15b048a08504962649736348bcf101b22a34f58537ae15cc7caa9ce8361b0663429da1e1a9d22ed29c", 0x6a}], 0x6, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000013c0)='/dev/usbmon#\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000001400)) r3 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) syz_genetlink_get_family_id$tipc(0x0) bind$inet(r3, &(0x7f0000001380)={0x2, 0x4e21, @loopback}, 0x10) shutdown(r1, 0x1) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000080)=0xdd25) [ 2759.681091] Bluetooth: hci1: Frame reassembly failed (-84) [ 2759.687016] Bluetooth: hci1: Frame reassembly failed (-84) [ 2759.704700] Bluetooth: hci1: Frame reassembly failed (-84) 18:48:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = syz_open_dev$vbi(&(0x7f00000015c0)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 18:48:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:48:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000000000000ffffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2ab45057bca4ed06f2d69eb04dafd030000000000000000e0000002000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000cd605bec36a674b6650000000000000000000000000000000000006016f0fbe4f83c0bc77dce452f7aad2771b53fb06a821d694782b294560e797c6f25f4918a9d7b0112c373b6a7a80b42828a0990f0637e2d36b1f24b024c65f466eed201f8d3bfb30ae33c56a0652b34711404a739482c9bf59a3696a71e44e77f6e2fdc3362c5fcf19505488749bd32ee30fd7cf5bb0636a48354219d1cfc0ea96b2c04998e50065d07ad541974e9d57aa4bc58cc976640e1af03f41bb0858c9d820b449b14c78f0cc88b6bca"], 0xf8}, 0x8}, 0x0) 18:48:10 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="b9090c", 0x3}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x9e, 0x0, 0x0, 0x1, 0x1, 0x4000, [], 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x14) 18:48:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0xffffffffffffff68}], 0x1, &(0x7f00000015c0)=""/240, 0xd932, 0x8004000000000000}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x2) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000280)=0x20000000000000) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000100)={0x7fffffff, 0x3, 0x68c3}) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x2e9c000000000000]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) [ 2761.408143] Bluetooth: hci0: command 0xfc11 tx timeout [ 2761.413585] Bluetooth: hci0: Entering manufacturer mode failed (-110) 18:48:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001300210f0000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 18:48:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001800210f0000000000000000fe8000000000000000000000000000bbac14140000000000000000000000000000000000000000000001a0ffffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) [ 2761.624347] WARNING: CPU: 1 PID: 9203 at drivers/tty/tty_ioctl.c:319 tty_set_termios+0x7a5/0x8d0 [ 2761.633371] Kernel panic - not syncing: panic_on_warn set ... [ 2761.633371] [ 2761.640776] CPU: 1 PID: 9203 Comm: kworker/u5:1 Not tainted 4.19.60 #33 [ 2761.647555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2761.656956] Workqueue: hci0 hci_power_on [ 2761.661045] Call Trace: [ 2761.663662] dump_stack+0x172/0x1f0 [ 2761.667321] panic+0x263/0x507 [ 2761.670533] ? __warn_printk+0xf3/0xf3 [ 2761.674457] ? tty_set_termios+0x7a5/0x8d0 [ 2761.678726] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2761.684291] ? __warn.cold+0x5/0x4a [ 2761.687948] ? __warn+0xe8/0x1d0 [ 2761.691339] ? tty_set_termios+0x7a5/0x8d0 [ 2761.694536] kobject: 'loop0' (00000000e456be8c): kobject_uevent_env [ 2761.695605] __warn.cold+0x20/0x4a [ 2761.695623] ? tty_set_termios+0x7a5/0x8d0 [ 2761.695642] report_bug+0x263/0x2b0 [ 2761.713528] do_error_trap+0x204/0x360 [ 2761.717486] ? math_error+0x340/0x340 [ 2761.721324] ? error_entry+0x76/0xd0 [ 2761.725339] ? trace_hardirqs_off_caller+0x65/0x220 [ 2761.730398] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2761.730414] kobject: 'loop0' (00000000e456be8c): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2761.744831] do_invalid_op+0x1b/0x20 [ 2761.748580] invalid_op+0x14/0x20 [ 2761.752056] RIP: 0010:tty_set_termios+0x7a5/0x8d0 [ 2761.753203] kobject: 'loop3' (00000000cb87b722): kobject_uevent_env [ 2761.756930] Code: 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 a3 00 00 00 45 89 a7 d0 03 00 00 e9 49 fe ff ff e8 9b 5d 05 fe <0f> 0b e9 3e f9 ff ff e8 af ce 3b fe e9 d6 fa ff ff e8 a5 ce 3b fe [ 2761.756940] RSP: 0018:ffff88805c887990 EFLAGS: 00010293 [ 2761.756953] RAX: ffff88805c86c700 RBX: ffff88805c887a50 RCX: ffffffff8365b4fd [ 2761.756961] RDX: 0000000000000000 RSI: ffffffff8365bbc5 RDI: 0000000000000005 [ 2761.756969] RBP: ffff88805c887a78 R08: ffff88805c86c700 R09: fffffbfff15dd849 [ 2761.756985] R10: fffffbfff15dd848 R11: 0000000000000003 R12: ffff88805c887ab8 [ 2761.817126] R13: 0000000000010004 R14: 1ffff1100b910f51 R15: ffff88805ddc42c0 [ 2761.824561] ? tty_set_termios+0xdd/0x8d0 [ 2761.828726] ? tty_set_termios+0x7a5/0x8d0 [ 2761.832981] ? tty_wait_until_sent+0x580/0x580 [ 2761.840115] ? __mutex_lock+0x3cd/0x1300 [ 2761.844197] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2761.849762] ? tty_termios_encode_baud_rate+0x3ca/0x4e0 [ 2761.855162] hci_uart_set_baudrate+0x157/0x1c0 [ 2761.859778] ? hci_uart_set_speeds+0x90/0x90 [ 2761.864216] ? debug_object_deactivate+0x1e4/0x360 [ 2761.869175] ? find_held_lock+0x35/0x130 [ 2761.873253] hci_uart_setup+0xa2/0x490 [ 2761.877182] ? hci_uart_set_baudrate+0x1c0/0x1c0 [ 2761.881956] hci_dev_do_open+0x674/0x14a0 [ 2761.886129] ? hci_rx_work+0xaa0/0xaa0 [ 2761.890049] ? kasan_check_read+0x11/0x20 [ 2761.894219] ? process_one_work+0x890/0x1750 [ 2761.898759] ? find_held_lock+0x35/0x130 [ 2761.903116] ? process_one_work+0x890/0x1750 [ 2761.907575] hci_power_on+0x10d/0x580 [ 2761.911408] ? hci_error_reset+0xf0/0xf0 [ 2761.915503] ? __lock_is_held+0xb6/0x140 [ 2761.919690] process_one_work+0x989/0x1750 [ 2761.923960] ? pwq_dec_nr_in_flight+0x320/0x320 [ 2761.928647] ? lock_acquire+0x16f/0x3f0 [ 2761.932646] ? kasan_check_write+0x14/0x20 [ 2761.936917] ? do_raw_spin_lock+0xc8/0x240 [ 2761.941191] worker_thread+0x98/0xe40 [ 2761.945036] kthread+0x354/0x420 [ 2761.948432] ? process_one_work+0x1750/0x1750 [ 2761.952966] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 2761.958534] ret_from_fork+0x24/0x30 [ 2761.963761] Kernel Offset: disabled [ 2761.967562] Rebooting in 86400 seconds..