736ec5fceff94c8c88f786b2a958e79cfbd1b6cd4183bbf0a2747f29b167e00f01ebaff217aebe371151fe466e26f9b29cee8651420b639f0ef41de0cac5208a58b4e73917ecc6d0cbfdcfa882c065a1f9a24c1b33e60a1724a9e11268ecf5eb4ba85a23ea989d1d6c8d69fab45b4767c0e3f9a2d0b0b93e8fb1519dd6906112035b8ecb8e257333dd1f11a5f28a98a0790656fbb298325ec8e4777d0a354151a8b49ff38627f9b02a09eeb8ae4b889e8f54f14273afd89db30243f51cc5313652637f7378b1766f5c2b597ab6c7a171f10f264450def70288b0f242d7d3d3ba9cb8fddba8a9169c4118cabe8b1bded5e203fc8c60674556c40c5d6c038cdc2c2070e65242656739c399871229cf0c54cb0a05c06ff238574d7c62e803ed2d68d156fcde90d59c1bbf0b3930133d1cb950c15a967055c407d6c07569d7c879e8ca8de0e785853e094af1c8a165f696ed1203d464df326287cd374b37c1b6b57394bb88ca321230a15aba6362dfc8dd18e19d1e5ccbe48403abb4d4ca987130fba63bc7c4396515feb8fa959060ca5e887471d66c34d0d2450fdcdfb236fc019a72709167bcce87509d528297f52c3c2212bcb222f97cab5d543186608eb84a32467d61576348e3f7082565bda20b6dc7dbeca692d7bd390f572bce0fc1ef13d0881d3ae268575b866c80556eb9aa5be0f947eab72e9b0b99f9145f6634ff966b8071b132e99f200581799f68ec251c495d27963637a8966de632409cd41be8ac1613babfb86d132c49a5d1a6af4b7e4a4a7eb105c9826250bbb6ebe9fa7fff2b838bd93641ae5fbcd5dc9acdb28e91e12d728828f51f7bf68f22ead13a96c80a5be7f0b46e2bceeb8f43e9f480b943a1455b88da5dee02e325c9d414cacfc7eef4919f35fb7a1b9565a9fb32f19233ddea2c8d09dfad0424f2d6db50559154b73d5baafe490bb19e32df855282ac9e0b4cbe9bc54db6e5abfa8e74eb74eb0777ca6cd0acbb868a07eace2c4abbd6101b16401042181c8773b869b33c5e132d61136ab834b85ae1161e78d1c08a6a8f8cd6ef18ed8a9ab6247ae40d6fa3fafbf495994b70ef284b35a3e7cd0db1cd9e15c071b424e2c23ce307d56eac2e1d6b6eacdc9b0ee7ae17f2994fbcf764758de9bb3c580b8eaf7fabdd4be8a97a72f60b03485a69aed01ea369866576f5d955e12f801849ad86f513c923389e5a8eaac25203c4da8e5c493f90163514a036eb830451a850b696730c67e23bfdd1be121508422a19afea09c1ee5f09f751d78928a05f280f9bcf81e255db13d30b7b8afe5bcb14129f0da65f16bb883146ec8e66bb11c08a20bb937ed58e074709381022c6c578dde78e6840565de144a451f3f914e8c9ac814f9a35ccbf98c4cbecd1c646ee1459a73e0b406e5e0a2406ac9b91d2f9c6fd058a9ff0e2ee3b18bc9c04f20d6846c5bc01eb4376fd7bf28bd02d0ea157bc34ed9a75af672a485bb5fbffd49331d9277dc6b945087d9300a78bd5475b536f72cc20bd7f1e674f7ed6884615f6e61eb062ea35ec3c32aa9243c653ff52ee0f88f4ba7a17c7c8fcaa768c44d652d0b2f1e8cd8c869d588c24c376c807f9e83a0c8314ca3f71d0a3092098e30196bf1160cdd9c2cca23988db3940086c93b947e39c123ab578da38f47741030ca4898569bdeb7c57cef0a8c661ad5ca870e3e409221b042572018cc2d80ee6da5eabd62ea5ff9712b2bf8297f05ce9657e4f9fd6cbea618e0a3a72bc147c30f88aa42eb5269ce4ffefc7f28a56ffbabbf2d3e7e3f6ab52fe2739ae6fb55b63d8fd8df81008b728d2c06830bdb55a9741b0993d848c91bde5c1ebe8f0ed9357f77b81f477cb7792507d8374f431c6071624b373e133f53a71becba9e123c4ecf8b2138817cdbd36cbf7f037d9d966152cf50fc3994b190ea0c039925e9d4fcaf9889e5eeea13fe01dff94c6ae6804a21558170595c415b0945bfbf4ba323ee574d484f721baab17537f2ec8178ebe729e3dfecaa0004d7590089ad3034e2f5b0ba4fe22f6c3bab5a43bee413ecdcd32228cbcc322f0a30f458af78ef3551c6faebc45ce72557b4a944ba7162cf9b391fb3bf70c8cc528fbff04eebd54461261e1a798593fb0c5ac5fdd1431d4939d94e147a2b3ba84a88f3acaf39afdf5d1ee167706e686f19cfa79a9af6af54c33c21eeabe0818cb9c25fe60d7bf49f5d58d5e0739671502e4d20443b3309d42e18c7cd0353e75b755bd6f10065830e1038c4df4390d1b1f3f45a8cfc8efb09dcf66cfe289009da26dae19ba2308f475de5812853bd58fab366c75ae3c3c2e3eba5e7c4134c34c7926df474847e07c9a67d94547213e736c7d6ab911ef0cac46178630d84407b342681a25caceadae9fc4c479845caf2d9a4629a1d2b33d26d9a21eade9a47717a13dd28d6d2888b7cb129395034fbeabf08d399c9e172c527a2d145996e64251971faabc74eeb046b5ecc538ba4d57da5687e59e288db9e6944e7f05aaff8bf541fb8b252a1608a91596aa497add1c6195f1004e3b73c9fc9b428a6f0a6b001891f5c27c8b36623304330e10cac0ecae0862aee8bde36faf96df3afbada700230f7462ec4ec67f451983ea17110efa55129c559d270280af20abcf8f11ec1d03c6723d6cd27e28950bf1a8545dda990954cb406e81fad0ce4f0d2008bbc2c05211592c3e61972d19b196a1c9fe35ac8eb41b874cdabd4c1242917e0df8bb127278a6ff2974cbd0306133103844506bd56079340225f2a88704a4e1b98957f5fa4698f6e9eb7511ca66949ba73c48932857914bd21233d6f0cc7d27fbbc08e572c1a121959892d16e915f91f8ee9e17fcfcae7329eb3d063ef5388b032774fd6817cc27fe290b910815ff5a23f3cdf64fb0079fc7037b44d67657c926f63df01d1495469b45ca771f090af136a4d8dd5583dc9a0e13a1636bf6a63e3a07d74da1d70451a3d76b37b5c208c0e293f6d6b0f8bbd44ff0809b02d2ae7521c9c4b97f0d91d72090b20086811ec23685f8630ea0c0fbe70c4d7374d8ce10930255f364a57ac9a1363144c693cc6b274222e7d346f36d7fe192247ffb4e03820f2cbb63e4618a975322fe2d25dedf723705d631b1be4fbee2647c6dffc7f302b154fe0e331e92ee353ef71e556cc776f55ed79130a31ea52617934084c510dcdc0f851c5f26d8841a02a06158a5b26f2cea7c41f02c6a3374953f177617907a4ce6415a5506d43de888eb9603b9b21f5fc6a287ae317e0ab166226aba349d33c87ae5a77d82950cff9c331fe919eccc76b4e9e09a4e31d4b2621ce13c2d54882ce72a64653e990efcd3e81948cbdee8876fa19439bca28a319141dbf4311e6be22fec28bc73d0fe660929b0a97cf7e00ed6364f701dd002945abeabc90b8ddca18600f504733d871d6e8077a7d6eedb53ef040bc744637784a5e0dba5dec808ce4255f757b9efbc3650e73df3d5652480f981cdf03a0ea1a9d3d21ed8e55df15e5409acb3ef2b123d0af9786f981c40ed5a5e42d9737d14d915fd362b75757349c5b0f8fa5cd1803c532154e7368f0f12889e3937d673b3415624f2f2d6a3bb1a4f6ce4e8ef55deff54c5904a964fe4caa8cbb1d38918fa30810fe03ae5733b6755c0e920a52b597fc320990f45dbc98c6ba33d38b964a740c69cff8d010598d55c27bb91cbd3ca6783c0ae30de26331634e41712e858844bf302ed51d3cef65d74c7b96061badb85d29957db5e650239d86fac305c3ae479baef900872a3ee2dfef34ae4b6a925cd0b69c7a6ba4222a57eeb94d19e71512870da871de610e6b29190db1028f83ad2cc5ba2e466b16c0fa5034ea32bf9e03cd163b9ec69072ef93a688f6fc75a9f63ba5a633dab2bd3f9c152ba6dbfc6276fa07fc246702b2ea6e0bef3bd9324b3561ddc910296acb7a63198f7fc57dcc31260c32ca2eab89e3bcdec72aab27dd6e63f835ac1d248dab0e0811ea328ae38436bb2c5684d990139b8b6fec066774e2927af654d026c689a4ef6f19c3f4a41710313b55e1022b7d90177f264114d7eb9f127f5954f602283519e17d7fbff586f96ab46c5d1486329679f491de716410d279906a703e31eccf00c75faee6c6c31b84d439c68822d8d1f8fed2ec5592a80bccac8a9e53f2a9307ef9d99168b6b87e9eca5f50b426f19cfe350c37aad7e25109a2342fcce98465435ca97b2b339cc24a85fe3f2d2938bfbcdbfc2842a6ff966821d36d45916052f89d8ad4fd9eeea2256237ebb77dd6a0ac6672dab36d395e02827a9255b7f1dbafc8648211ab95936f9826fdaaf7afa0c28f0a1dc040323f9aec702080f4987bd9becacb95427aab85e6c301fd3a72eba8d34fdce4adb334ce4125d849e765b97fb80724d8b5054266dcaeab285b63e4b37e15e6dcf86a4a267faebed2f3540674aafd8e7d48ed4dee42acc48fa8a71e03687073ddafead3536f5dd05b6131be52962d236d156d21d17d3fc1a4f5a749de92d1b1647dc2f52515c9968320e99205cb8a6937ca9e11dac57d9bf7e1476cab371596cd0f2ff58982d841b4e58a3fdd706392bfef97137fdebf701f31c1d1e0d963c428e491c657c73ae49051c7bfb980e0c0d78941ad9068a8feac27704f86a6e8f566596ea53ea0cedb0ee1d5c459f9805af0c5f546067460dba1c0e10be860cbf405bfd75b4e9edf92136af1ffd4adc1cabcc40e497b39b300926f883e04cfba40748c7d2051b8c076bf3cd688174fae4c3f5aa8bb31f3a9288b345571a9bb9239700e17e30c76051976a2be7c74334392b30d1e777cf0ad5947b5b033cd9f56246bebabe6829a60d1523ab6af2fee9bfb5661e5a6ffa9f337616ffdbc2e3f9d949750a7e717254d66882d9996b8f756c6567b8ef3307bf7cbc200b100122b0d9e402269b1903419739e1f16614e29b6d58c540999a9f5dfecc8e67c03346f4ed5f7d0c210a3ea4ffea20b01c1984087498aebff159a918ec3076823bfbd8c6c36537f940e5a1b07fcf15657ef495f3851ab1fd80d709df08202ff7ed3f966312a31d217fee93ba32cc52626246892dbf628a28122e04cdd0dbb4c29aedbd1d50370bb5a766a4fa7f891f2c180dc8ea3b8df632ea38388a477f395dc82ee892a62ba79b9aa3dab85ffe07c0f053a0e3ea4e406a2867b3373b0102642800b7e5004d3e54db963ec102e4ddf3189f1986aec67e69630cc469c5d0cc5265f827fcb7fa90a95b4e825823d1ec6287d753563764a9d930dc4c6d175c1eb124d14cede32bec1c5b472de39c9bf160625ab0fb98ae72e6f57f43df9a91c453e1acabf9c938476275c0806c63b4ef9a5ce9a6192bcea64f1938de3abf3f34954df536af2ebc74de1252b642711e4f0fb288b47f5a300f1916fd4d7b6fedd39c203275ef60661da14618f48dfa4678c3f5c445df8f11ac9e597dda8abc25e86f707fecb5603dab968d9ea1b306e5e820be32ebb91ad8db268eadf124e531f02424827c5840a124e096c445164b259c95a367c6ee31a28afc0c01e9e8727c0c187f76505034463bc61f0245bc5871a0125172ecd490dc8e12fc9f217eda39dd51e3659acd8df78e507e8e98dbd5c9ae24d3daf31cc0ada51c5c6a7914d0d717438d238086fd4856180a084cadf47", 0x1000}, {&(0x7f0000000780)="868058619140dd3841a52038817f6f49d4c4023424759214f2f2540f4be4d3f46d0865baf3f46a1d2606fc3d27aa4bb5d40d37f62a0d914c09b8db4934208ddf0dd7a9304967554012a02230ea1295f10e5398e536c569a322a4ee4b541ef39a112dde34835a6a74", 0x68}], 0x8, 0x0, 0x0, 0x4}, 0x4000040) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x901, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback, 0x111a}, {0x2, 0x0, 0xffffffc1, @dev={0xfe, 0x80, [], 0x16}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 11:48:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x103c0, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x1, 0xff, 0x8, 0xa5, 0x6f, 0x6, 0x8, {r5, @in6={{0xa, 0x4e21, 0x10000, @empty, 0x7672}}, 0x800, 0xffffffff, 0x3, 0x2, 0x6}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r6, @in={{0x2, 0x4e20, @loopback}}, 0xfffffff7, 0x8c24, 0x2, 0x101, 0x89, 0x8, 0xf3}, &(0x7f00000000c0)=0x9c) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x7, 0x6, 0x5}, 0x14}}, 0x0) 11:48:45 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000006111040800000000851000000200000085000000390000d395000000000000009502a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) 11:48:45 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 634.888915][T18061] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. [ 634.998842][T18061] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. [ 635.335883][T18061] netlink: 54959 bytes leftover after parsing attributes in process `syz-executor.4'. [ 635.367025][T18061] netlink: 54959 bytes leftover after parsing attributes in process `syz-executor.4'. [ 636.140587][T10625] Bluetooth: hci0: command 0x1003 tx timeout [ 636.148017][T17907] Bluetooth: hci0: sending frame failed (-49) [ 638.230616][T10625] Bluetooth: hci0: command 0x1001 tx timeout [ 638.236835][T17907] Bluetooth: hci0: sending frame failed (-49) [ 640.300631][T10625] Bluetooth: hci0: command 0x1009 tx timeout 11:48:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x80000, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 11:48:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xd45a246, 0x999a1) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/91) 11:48:55 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x5) 11:48:55 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:48:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80001, 0x0) r1 = gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x0, r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000800)='SMC_PNETID\x00') ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f00000019c0)={0x0, {0x7, 0x884}}) nanosleep(&(0x7f0000001a00)={0x0, 0x989680}, &(0x7f0000001a40)) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) sched_setattr(r3, &(0x7f0000001940)={0x38, 0x0, 0x10, 0x9, 0x40, 0x40, 0xffff, 0x671d, 0x3ff, 0x8}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104b60100"/20, @ANYRES32=0x0, @ANYBLOB="2b03000007200000200012800b00010067656e657665000010000280060005004e2100000402d00008000a00", @ANYRES32=0x0, @ANYBLOB="036a78de38d78142c8709af2e42c21c1c3790a35d366b2d783549de6e6f0af00e903d0bac82358991899107f965f56fbc5fd64b843a6898a718e04b1f277653cc7da94868393fb03722d912e8a807972e177ac53da27e7fcd3f77aef6d5a007404d05c34778d979b2eb54e8661b1f93a6c2fee9b"], 0x5}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xfdef) r5 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x4, 0x40000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r5, 0x40045730, &(0x7f0000001980)=0x1f) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r4, 0xda4ea000) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000240)="cd023e0f34b12a7373a71baa92cc2531c7df6ea77c24c754621c2a8ec9c78c2cad7c0e11788674b8944ef1dc39abb6e660d7a3a040f4701c5410fc3246d1e231bd6cb972e09c919db3e64e994795d59c4418d763973a371ebb987739e5a487dc1bbddc92f580cc0e5c248c5e4a6ad731d8b34a78b13e6fec765c9726613fa3d7ab3193758587ae648385ddb757e6e030d64adeb0b57cf235b3f6703b5d3a8ffbf24803b46e4edc6f91b7a48f60426ca782c567e810", 0xb5}, {&(0x7f0000000300)="cbe41a3381a6b756233c1f4814980d82c868074474b92e59e098888c58527fa9b24496ca3e45090df71e77fdc6e26237b78bd69fec62c4063e7083bae55c30d41138110df4bda7c44135414a531681f8387c5d2697d3683c2f9a1491088528c071af7359ea09c2b1943b956fd3c98e3ae5ad97eb4c68ba1ea740c0a68b57e13e266009466392036fc54e85716256d5b570fee049d898912c8cc8029ad60392d695a59c29ba", 0xa5}, {&(0x7f00000003c0)="e12e599670ab3169d4cf4cf5dea85d490b294c09e274a76aaf7ce8a2eddd9e719844141516743918d1a1921474d6c2dca6b647a3c138f63b64c48a5da6e94b6a0962d802acde0e8ef0c04ca3f19962b505bff0273265e896733e2b0af8ebc1939c853c68830634f72a46b61559e0c5a0925d45ca629c171f87e7839acbe17ac60e8509b4bd1f", 0x86}, {&(0x7f00000000c0)="d4f1fbe2079bfb41b952683f778f7625ee2e5df4f0e2b9747ac51006dbc78105254aacc6f23efa34bfc9e47c344a60532034632f0cf8372daac8df", 0x3b}, {&(0x7f0000000480)="220efc0e028093e98fe2e32d68a0ae4ffcfa30fc1b11b23914092f13521684083c73c79ee3491d5f201f74cfda77e74e73b2ecac9387344e5f2ecad8374b0177057eb04f2ff6dfee74664fd5d5ba37009486ff5e16bc6ad40bc5193bc58f572c3cb9a158214da3c4ff493be5540986918e29ced3d9e556087f496028283f53d6aa21b35ed2f37b868f82e1c5703de3fdca2667fa324778767d73e252e6a8fe7344baff9d7574d01c9947e6fdeea6f2f3", 0xb0}, {&(0x7f0000000540)="6d1855fdb870d226d2cb5111009aa4659eda81ac115010ec35bf30af558fc2ab104e3672038e43456ec0b71be6212eca7d8ea06198657edb63d5eed08192662058cb537e4961375307de7c8ab712c85a65a81c5d66d9d0b53620319fdf6366a5c74c488aa1e0ad5ae0f44a03e60787d1cfe87dd5b878858de9f8ae4758197484d492a0f0e2a15561be22f0f8df86ef10124367ef717dfa435ce0bc74c1e8b5f20a3938b89182b0fbbea99f4871e6411eeaaa7e77887c4b86c0c71c7196529cc2e7bc", 0xc2}, {&(0x7f0000000640)="8a4ecead48abdf3c018d0917ac71778394484b", 0x13}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000680)="6d5ebcf2d67c7d1e09e9e2020e2c14efd6d6ef9d3448c53169dc646fb389a837f57794b65b550f6aadec8dd05fdb", 0x2e}, {&(0x7f00000006c0)="67eb1c4890e9bd2d52dbfe2e47e766680730aea448ac026a98175788c8c2951e06437c1157c691823c6579da63ca55bbe1ee1fbd57ea5241faed5f9dd02b00791a5e5e5bc38957d04c50320b1336b394341c6395137116abecab3fb356e25689dc7267721bad078e36c821bac82472af766baaa6678dad9381c9e7a91315112e254ce330c5cc6c726b012e8539046dbe94f405bfb0917146", 0x98}], 0xa) 11:48:55 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000040)='vboxnet0ppp0ppp0posix_acl_accessem1nodevmd5sum{\x00'}, 0x30) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000001200)={0x10, 0x30, 0xfa00, {&(0x7f00000011c0)={0xffffffffffffffff}, 0x0, {0xa, 0x4e24, 0x0, @loopback}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000001240)={0x11, 0x10, 0xfa00, {&(0x7f0000001180), r4}}, 0x18) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r4}}, 0x18) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f86dd6b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x28a5) 11:48:55 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) close(r2) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0xa, &(0x7f0000000040)=0x3, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(0xffffffffffffffff) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) dup3(r3, r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x6, 0x0, "da3b813d1d24f39af078d397ab8eec7646291ecac6934040d347f62be1e8c12506ca46ba02a3588a5d1f62353bd7c89d21b865c88496a015add054aef4c0860421e0d5590fed55ac9efcb66ff5dc5bd7"}, 0xd8) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r9, 0x0, 0x0) sendmsg$xdp(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r8, 0x1, 0x0, 0x0, {0x11}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x1c}}, 0x800) dup2(r6, r5) 11:48:56 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) eventfd2(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r4 = dup3(r2, r3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, 0x2, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x5]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_SEQ_ADJ_ORIG={0x4}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x9}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x5, 0x3}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x2}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x3f}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xff, 0x8}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x2, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x9, 0x3f}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4044}, 0x1) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) [ 644.957233][ T9861] Bluetooth: hci0: Frame reassembly failed (-84) [ 645.021595][T18097] Unknown ioctl 1074013192 [ 645.075481][T18097] Bluetooth: hci0: Frame reassembly failed (-84) 11:48:56 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 645.149001][T18108] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000080)=0x5, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000400)="8da4363ac0ed02000a0000000001004d010000000000000000007a0000000000ff2000000000000000000000b10efd9a000001000000000001fffffff60000005f42485266535f4d922889162a0c3ca5563b718606bc746c2550f6a73552f6733c16c1d58695aa646b15ff13af2a6197296f2cb23891304fe6b20bdf54ab8938b310b7a96982e4c26af9dd640d2d0b52dd4f19262b71bf89ccdbaae86702e365a42c53d3f8060fc29050a5d67c58276ae07451e0f3ca6befd305", 0xba, 0x10000}], 0x0, 0x0) [ 645.180338][T18108] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:56 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @rand_addr="dfe5d8ed477e60309ce0a4c5e916caa0", 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000000}, [@ldst={0x6, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 11:48:56 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 645.413227][T18118] BTRFS: device fsid ff200000-0000-0000-0000-0000b10efd9a devid 0 transid 11906404889766996114 /dev/loop5 scanned by syz-executor.5 (18118) [ 645.696619][T18111] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.1'. [ 645.713647][T18111] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.1'. [ 647.020619][ T2996] Bluetooth: hci0: command 0x1003 tx timeout [ 647.026830][T17907] Bluetooth: hci0: sending frame failed (-49) [ 649.100655][ T2996] Bluetooth: hci0: command 0x1001 tx timeout [ 649.108702][T17907] Bluetooth: hci0: sending frame failed (-49) [ 649.182408][ T0] NOHZ: local_softirq_pending 08 [ 651.180543][ T2996] Bluetooth: hci0: command 0x1009 tx timeout [ 653.664238][ T0] NOHZ: local_softirq_pending 08 11:49:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f0000001340)="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", 0x208, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x12) 11:49:06 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockname$llc(r2, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) time(&(0x7f0000000280)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00I\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB], 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) r5 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r6 = getpid() r7 = shmget(0x1, 0x4000, 0x10, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r7, 0xb) r8 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r8, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$CAPI_SET_FLAGS(r8, 0x80044324, &(0x7f0000000300)) fcntl$lock(r5, 0x5, &(0x7f00000002c0)={0x1, 0x2, 0x80000001, 0x3, r6}) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1412, 0x400, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x4044890) 11:49:06 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:49:06 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x483, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000280)="f1", 0x1, r3) r4 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f0000000540)="45dd496b70affd0720649cc2a258573bc7dbde928daf", 0x16, r3) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000280)="f1", 0x1, r5) r6 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="c025eaf65cc051d3d9cb2d15a9e02674c7faac48d44537473e26fbae73a5d350d9d25b33e9b2fc8757b2d2b1f93cc7ad955f4f45720c6dff700cac25fffda8f6ee69e2f57700688c5e92ef1e335076a43ef82861151b14a1dcbc10a318931321760e83cc821b9a9cd10ea56dbf9cab951229ba621e6f585ca8509a01a5dccf26c292024beaa9c8d5b03fc99b53cf29d093d1db4b6eb188a333a8db8670deb3ac9c7d6cf87af66718af8de145760669ff2d04540e0de8edfb646b6de91602d5fc1b7e18e322eca2c4e9ec55b2207f094e1585bf07a7ad3f25c48481133097523f1253543348bc011a3f78d44d3d28553112", 0xf1, r5) r7 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a0500000000000000422cb4963a160161b1cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x34d, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r8, r7, r8}, &(0x7f0000000240)=""/112, 0x2ae, &(0x7f0000000580)={&(0x7f0000000040)={'tgr160-generic\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000780)={r4, r6, r8}, &(0x7f00000007c0)=""/89, 0x59, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r10, @ANYBLOB="00000000ffffffff0000000008000100636273001c0002001800010000000000070000000500000000feff0000000000000000a2e387d63e7217590578003f91160e12e5cab38ea6d14b05d0df915a3f958c4896775630"], 0x48}}, 0x0) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', r10}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000004c0)={@dev={0xfe, 0x80, [], 0x15}, 0x63, r12}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x1) listen(r0, 0x1ff) r13 = socket$inet_sctp(0x2, 0x801, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r13, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0xc) r14 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r14, 0x3, 0x0, 0x0) accept4$inet(r14, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$rose(r14, 0x104, 0x7, &(0x7f0000000280)=0x8fb, 0x4) r15 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r15, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xfdef) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r15, 0x8983, &(0x7f0000000080)={0x6, 'team_slave_1\x00', {0x80000000}, 0x3}) sendmsg(r13, &(0x7f0000000180)={&(0x7f00000009c0)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000000)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 11:49:06 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_dev$ndb(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r2 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000001140)='\'', 0x1}], 0x1, 0x1081804) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "0eb61538a462ee812ba43ffc89bf1173dc3d06375d14638fb21b49d26972d96ef0b4b2e6d730ad6a7562b478c2974a9896747dccb30e7f63a1b51ec059554277", "1d0e47f158fae68f4d2aa224439c30eb3b3e468dfc3035d92c0929eeee707650bb008bd2cfa188d8954a0ede9661149d95659eff1ce2212f115951f98f736335", "3edea3fa98ed88e7de49fc2596c78e888e955cdca02efa85c8116766d8f71310", [0x0, 0x6]}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x20) openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000000)="1c0000001a009b8a14e5f407000904241d000000ff00000000000000", 0x1c) socket(0x22, 0x2, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xb, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0185648, &(0x7f0000000300)={0xa20000, 0x0, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x980912, 0x9, [], @p_u8=&(0x7f0000000240)=0x40}}) r7 = socket(0x2000000011, 0x4000000000080002, 0x0) sendmmsg(r7, &(0x7f0000000180)=[{{&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, 0x0}}], 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f00000001c0)={0x0, 'netdevsim0\x00', {}, 0x4}) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c27449ab", @ANYRES16, @ANYBLOB="00022dbd7000fedbdf250700000014002000ff0100000000000000000009000000010c001000050000000000000008000a00020000000500040006000000080009000300000006001b004e20000005002200010000006da2ebefbd59695942cac49fd21501d5d8af49e8f5a12565053dc0fadae0f80b3a5321708b65104da4d2466f2004d5d08300239ebac770f7fde6849a6c9fabc37c0ff7022958c7acad093945d194bcc8760a765c378a30c9143c9e53443c158bef74e6639d63714d63d5ff744c8ddcffbb131157f67e3376716c7049baf5def862f9561d79cb62094fc2059f6ecd460000fc25a6652d981c82cc3500e6cc29417f34fd7eb019d3e6a4a5076080fb4f030cf1d30d6ee32f5fb48d020c42dbee58055b43ef7cfe949be21d240da3e5321af0ea005195185a92ec8c7dcf74e300a779447836b3674b5edd578c793777f6988b938826c6d5"], 0x3}}, 0x4000000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000826bd7000fcdbdf250300000005000d0000000000050007000200000005000d00000000001400000000000006001c000800000005000500010000000600030000f800000500050000000000000000000000000000000000000000000000000000faa5341b57efd01f8666bbc1e73f0833a9d6aaa5026a217f5d9e7a202f75f14c5e0af7355bd91cbc3999af4a67ea824a2de05ec467f4f557089b89ca6a11ae060fb58c2fdc84460438f65b9ded4909f5a002786236b37dc5a41e37cf8ab25b02271f3bad15a7b4b995f0"], 0x68}}, 0x800) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000400)={&(0x7f0000000540), 0xb, &(0x7f00000003c0)={&(0x7f0000000480)={0x70, r8, 0x8, 0x70bd2d, 0x25dfdbf8, {}, [@L2TP_ATTR_IP_SADDR, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve0\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = getpid() r10 = getpid() sched_setscheduler(r10, 0x0, &(0x7f0000000000)) sched_setscheduler(r10, 0x5, &(0x7f00000001c0)=0xffff) perf_event_open(0x0, r9, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={[], 0x695, 0x0, 0x0, 0x1, 0x0, r9}) r11 = getpid() sched_getattr(r11, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r12 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r12, 0x40305652, &(0x7f0000000500)={0x4800, 0x0, 0x0, 0xfffffff9, 0x0, 0x2}) r13 = syz_open_dev$sndctrl(&(0x7f0000000440)='/dev/snd/controlC#\x00', 0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r13, 0xc1105517, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x2, 0x2, 0x5, 0x0, 0x0, 0xffffffff, 'syz1\x00', 0x0}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYRESOCT=r13, @ANYRESHEX, @ANYBLOB="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", @ANYRESOCT=0x0, @ANYBLOB="60a57885d37b6d59ebe821af52a2b32af00a72ad84933b48ea15dd06d4368d4a4bad0405cc41b8703b87f20e8acf9c6e0a821c55bf5d7072399e1cbf491da0ff198b"]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) 11:49:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x80000, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 655.046950][T18148] encrypted_key: insufficient parameters specified [ 655.093723][T18148] encrypted_key: insufficient parameters specified [ 655.110321][T18149] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. [ 655.135176][T18155] Bluetooth: hci0: Frame reassembly failed (-84) 11:49:06 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 655.146688][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 655.185190][T18156] encrypted_key: insufficient parameters specified [ 655.213841][T18149] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. 11:49:06 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 655.287739][T18166] netlink: 64759 bytes leftover after parsing attributes in process `syz-executor.3'. [ 655.362630][T18170] netlink: 64759 bytes leftover after parsing attributes in process `syz-executor.3'. 11:49:06 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 11:49:06 executing program 1: mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x8, 0x40010, 0xffffffffffffffff, 0x83000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chown(0x0, 0x0, 0x0) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x381c, 0x0, 0x0, 0x0, 0x84, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0x0, "3237fb"}}}}}, 0xfdef) 11:49:06 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000200)=0x10, 0x40800) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r2 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x6, 0x0, 0x3, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xe43) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$usbmon(r3, &(0x7f0000000080)=""/15, 0xf) read$rfkill(r4, &(0x7f0000000040), 0x8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000008000001201", 0x2e}], 0x1}, 0x0) [ 655.549959][T18147] snd_aloop snd_aloop.0: control 0:0:0:syz1:0 is already present [ 655.593588][T18147] fuse: Unknown parameter '000000000000000000000140xffffffffffffffffƒЯVv&ØÃ' 11:49:06 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) [ 655.915823][T18158] fuse: Unknown parameter '000000000000000000000160xffffffffffffffffƒЯVv&ØÃ' [ 656.052119][T18187] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 656.068050][T18187] team0: Device ipvlan1 failed to register rx_handler 11:49:07 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="020300004000"], 0xa) [ 656.702231][T18187] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 656.714819][T18187] team0: Device ipvlan1 failed to register rx_handler [ 657.180637][T10625] Bluetooth: hci0: command 0x1003 tx timeout [ 657.187041][T17907] Bluetooth: hci0: sending frame failed (-49) [ 659.260594][T10625] Bluetooth: hci0: command 0x1001 tx timeout [ 659.268285][T17907] Bluetooth: hci0: sending frame failed (-49) [ 661.340728][T10625] Bluetooth: hci0: command 0x1009 tx timeout 11:49:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x80000, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 11:49:16 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 11:49:16 executing program 4: r0 = socket(0x40000000002, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x8005, 0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0)=0x25, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 11:49:16 executing program 5: recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2b, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) add_key$user(&(0x7f0000000200)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ff7000/0x3000)=nil) creat(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) readahead(r1, 0x10001, 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(0xffffffffffffffff, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_genetlink_get_family_id$nl80211(0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000280)={0x1ff}, &(0x7f0000000200), 0x0) 11:49:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0500000000000000140012800b0001006d61637365630000040002800a0005003c00000000000000"], 0x40}}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000000)={{0x2, 0x0, @reserved="1d7a2b599c76662cef21b6c5468de6e6ef74d3d85c566322e9892dc3d5b8561b"}}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', './file0', [{}, {0x20, '\xc0\x03\xa9\xcef\xb1KGe\x8b\xf9l\xaa\xe3h\xc15\"\xbdF\xc9\xecF\x13K\xc1\xf1|$A*\xe6\x02\xb6\xb8\xf7\x13\xa7l3\xb3\xa1\x8f\xab\x13r\xb4\xa1\xd408\x1c\xf7tV\xda6\xb98\x004H\x822\xfc5\x86\xf46d?&\"\xe8] \xd5-\xfb\xe7\xbbpK{qWDl'}, {0x20, 'cgroup'}, {}, {0x20, '$'}, {}], 0xa, "5ee3a901cb9516f63d152cff7caab2699b96af9895359475ef5f9cf07f0552d7ed092eec8d1aab4622700d50b957dfa87a9f3db5137cac5619ee5a7855ea4e947990ae9308ef34c8f13743f1f43609a793ce82b6083578aa6239a1550869ed8350596054bdff977fcd0072f75cbe3a36ac8a4026718a72a612c7af672c74f7f27646c4f970d80113c4bfa66219a71280fb68b6af63ea27727aa1c1079735c0a5ba6eb708a723965c0943683c85e5c5b6fbad5519cb9d914f24cdfc5a6ad4e0f00c5088f2b9c1f3dbf474e3a2a2c7dd915a43281fde6965e1a232125a2fbd242c43b82ef2a85f61d1e67e017c49af6731cfba87"}, 0x163) 11:49:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) sendto(r3, &(0x7f0000000000)="923427d77e4eab7fb23900bb07d31e179b", 0x11, 0x4004, &(0x7f0000000180)=@isdn={0x22, 0x7f, 0x80, 0x4, 0x1}, 0x80) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400000) r5 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x80c00, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff, r5, r1], 0x3) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x8, 0x6}, {0x7, 0x7fff}], r7}, 0x18, 0x3) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000100001080300000000977c030200d536", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) [ 665.258320][T18211] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 665.293257][T18216] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.1'. 11:49:16 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8}, 0x10) [ 665.394556][T18222] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.1'. [ 665.459808][T11108] Bluetooth: hci0: Frame reassembly failed (-84) [ 665.466672][T18223] Bluetooth: hci0: Frame reassembly failed (-84) 11:49:16 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='ocfs2\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f00000001c0)={{0x77359400}, {r1, r2+10000000}}, &(0x7f0000000140)) 11:49:16 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8}, 0x10) [ 665.583276][T18222] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.1'. [ 665.619319][T18216] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.1'. 11:49:16 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8}, 0x10) 11:49:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400012) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7}, 0x1024, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = gettid() r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000040)=@ipx={0x4, 0x1, 0x101, "2b04ec665b4b", 0xff}, 0x80, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x7, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r6, 0xb) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) r7 = openat$cgroup(r6, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r7, 0xa9bff5772b9e2466, 0x0, 0x4, 0x0}, 0xfffffe14) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffdf5) socket$kcm(0xa, 0x6, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000240)) sendmsg(r4, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=r3, 0xfffffffffffffec6) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x23, 0x16, &(0x7f0000000200)="dab7655af780f6dd2dd38c7f2848ba7e2f182b349ca6fa76a8921aed6c98c7806280b0", &(0x7f0000000240)=""/22, 0x2, 0x0, 0x95, 0x8b, &(0x7f00000002c0)="c796e54990825cd5827330223fd2a4714c0a01cc294d4c0df4ab4961230462093d0fd5d6fc0d555ada36d3a5123b057f76378740b3a8a8161e46d6841581e001bec0f45baf423101cee8ef1dcdd65a8c45ccb11f51c3331dfcd74a785c2b905293e6410d00392c1ee4736de7dcd9048f2f449c7ce7f89937a67b9c250e0a668b8b7a0325eb3f3d804a4a334fec96f88500810ae818", &(0x7f00000003c0)="da9325d2b248c00bb44445e87018e97ba8df06a7e4838d008fea53681452f21c4cf7cbece2d4f038e93f67db3616ae6510efb236a21e7e94d40869b74e648adfa94bd398b982e56d242f36b5280bf9e1d5aaf805c3437de6f0ac3c64862bb0e706f0bc2019858a6f47f4b5e823b770501bc948f4a9bb49b750cd9a92154f099a063c55e083182a22ab9764"}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, 0x0, 0x4, 0x9c, &(0x7f0000000340)="1eaabdd8", &(0x7f0000001700)="6aa93d208d67bc734dce75854727883cac958a7d556aae64087a306e60490859b3c8f71d36727995b0a5a340affef72c334adaec120563d610157d7a110b67c4de3ab98224cc7f7e7f25d72a20d3cc8330681741d13103b43947a6bcdc68f212808144c1199784e49980dabad6df98bdb13bdb6aba4469b60ba2c16bd62fc4146277907cb9cf49bb09f8f26a08e172c89a8c9ebce43e576ab0b54716"}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r10 = gettid() perf_event_open(&(0x7f0000000640)={0x4, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x7f}, 0x30914, 0x0, 0xb, 0x8, 0x9, 0x4, 0x7c}, r10, 0x40000002, r1, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, r10, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r13 = socket$kcm(0x2, 0x4, 0x0) setsockopt$sock_attach_bpf(r13, 0x1, 0x3e, &(0x7f00000002c0)=r12, 0x28e) openat$cgroup_ro(r12, &(0x7f00000006c0)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000500)={r5}) 11:49:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="000000000000000004000a000a000100726f7574650000002000020008000100000000000800030040000000040006000800020000000000"], 0x50}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmmsg$alg(r3, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETX(r6, 0x5433, &(0x7f0000000300)={0x400, 0x9, [0x7, 0x2, 0x1f, 0x5, 0x9], 0x5}) [ 665.796616][ T2629] block nbd4: Attempted send on invalid socket [ 665.804177][ T2629] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 665.837427][T18238] (syz-executor.4,18238,1):ocfs2_get_sector:1777 ERROR: status = -5 [ 665.882114][T18238] (syz-executor.4,18238,0):ocfs2_sb_probe:752 ERROR: status = -5 [ 665.954037][T18238] (syz-executor.4,18238,0):ocfs2_fill_super:993 ERROR: superblock probe failed! [ 666.007383][T18238] (syz-executor.4,18238,0):ocfs2_fill_super:1175 ERROR: status = -5 [ 666.036546][ T2629] block nbd4: Attempted send on invalid socket [ 666.043186][ T2629] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 666.054353][T18240] (syz-executor.4,18240,1):ocfs2_get_sector:1777 ERROR: status = -5 [ 666.067001][T18256] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.1'. [ 666.077328][T18240] (syz-executor.4,18240,1):ocfs2_sb_probe:752 ERROR: status = -5 [ 666.085276][T18240] (syz-executor.4,18240,1):ocfs2_fill_super:993 ERROR: superblock probe failed! [ 666.097675][T18256] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 666.109143][T18240] (syz-executor.4,18240,1):ocfs2_fill_super:1175 ERROR: status = -5 [ 666.290986][T18251] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.1'. [ 666.312917][T18251] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 667.500505][ T2996] Bluetooth: hci0: command 0x1003 tx timeout [ 667.508126][T17907] Bluetooth: hci0: sending frame failed (-49) [ 669.580601][ T9838] Bluetooth: hci0: command 0x1001 tx timeout [ 669.587468][T17907] Bluetooth: hci0: sending frame failed (-49) [ 671.660596][ T9838] Bluetooth: hci0: command 0x1009 tx timeout 11:49:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x80000, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 11:49:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000060a5c26800183adffe8000000079230000000000000000bbff0200000000000000000000001000018600907800000000f5ffffff000000000501e5fbea633eaa4c26fd487b3de4f532eb936c57b5bb2db3e13065327ab5681fd112e199db561800e24c1ebfa88dc1a7acefd13dc6b345d82504bdc1ec644ccc3b06f50016f699f67b8bc0d4f9667a3ab63c6ab5b095f1094b810aa65a26d24e90e491a20d9c3aa6058e8f7487c21175b35ecbfc0300000000000000ab12d90939d326b2d7e9a08068f1"], 0x4a) 11:49:27 executing program 2 (fault-call:3 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:49:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) sendmsg$nl_crypto(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=@get={0x130, 0x13, 0x100, 0x70bd2b, 0x25dfdbff, {{'xts-twofish-3way\x00'}, [], [], 0x2000, 0x2400}, [{0x8, 0x1, 0x5f3}, {0x8, 0x1, 0x8001}, {0x8, 0x1, 0x10001}, {0x8, 0x1, 0x80000001}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0xf2}, {0x8, 0x1, 0xff}, {0x8, 0x1, 0xfff}, {0x8, 0x1, 0x4}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x40000) recvfrom$inet6(r2, &(0x7f0000000280)=""/227, 0xe3, 0x2040, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xc000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@aname={'aname'}}, {@access_client='access=client'}, {@posixacl='posixacl'}]}}) 11:49:27 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a503d39c2bd6a40f03c8aa024d00000000ffffffffffff7f261e21ccf67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b300", 0x2b}, 0x60) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x44804, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000180)=""/185) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000)={0x3, 0x20}, 0x2) 11:49:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) close(0xffffffffffffffff) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000038, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r1 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0xa10000, 0x68, 0x4, r1, 0x0, &(0x7f0000000000)={0x9c0906, 0xff, [], @ptr=0x1}}) ioctl$SNDRV_PCM_IOCTL_INFO(r2, 0x81204101, &(0x7f0000000340)) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "47f6b94ec39bf0ac", "87a7ed899b114c8557dbf600", "eff8a9ea", "70621f0000007056"}, 0x28) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008064d20010000f000080", 0x14}], 0x1}, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x0, 0x0) [ 676.145560][T18272] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.1'. [ 676.184422][T18277] FAULT_INJECTION: forcing a failure. [ 676.184422][T18277] name failslab, interval 1, probability 0, space 0, times 0 [ 676.220150][T18276] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. [ 676.250766][T18277] CPU: 0 PID: 18277 Comm: syz-executor.2 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 676.260741][T18277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.270812][T18277] Call Trace: [ 676.274132][T18277] dump_stack+0x197/0x210 [ 676.278509][T18277] should_fail.cold+0x5/0xf [ 676.283044][T18277] ? setup_fault_attr+0x1f0/0x1f0 [ 676.288107][T18277] ? ___might_sleep+0x163/0x2c0 [ 676.293004][T18277] __should_failslab+0xb7/0x100 [ 676.297881][T18277] should_failslab+0x9/0x14 [ 676.302411][T18277] kmem_cache_alloc_trace+0x2d3/0x790 [ 676.307934][T18277] ? xas_find_conflict+0x890/0x890 [ 676.313233][T18277] ? rcu_read_lock_held+0x9c/0xb0 [ 676.318385][T18277] cma_alloc_port+0x56/0x1b0 [ 676.323003][T18277] rdma_bind_addr+0x1bc5/0x1f80 [ 676.327649][T18282] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.1'. [ 676.327869][T18277] ? find_held_lock+0x35/0x130 [ 676.342247][T18277] ? ucma_get_ctx+0x80/0x160 [ 676.346863][T18277] ? cma_ndev_work_handler+0x190/0x190 [ 676.352338][T18277] ? lock_downgrade+0x920/0x920 [ 676.353218][T11108] Bluetooth: hci0: Frame reassembly failed (-84) [ 676.357199][T18277] ? rwlock_bug.part.0+0x90/0x90 11:49:27 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000080)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r4, r3, 0x0, 0xffffffff800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r8, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r9 = perf_event_open(&(0x7f0000000400)={0x3, 0x70, 0x0, 0xff, 0x6, 0x3, 0x0, 0x5, 0x20220, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000001c0), 0x1a}, 0x1080, 0x7, 0x6, 0x7, 0x2a, 0x40, 0x401}, 0xffffffffffffffff, 0xa, r8, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40042409, 0x0) r10 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) ioctl$FIGETBSZ(r10, 0x2, &(0x7f0000000180)) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcs\x00', 0x100, 0x0) getsockopt$SO_J1939_ERRQUEUE(r11, 0x6b, 0x4, &(0x7f00000004c0), &(0x7f0000000500)=0x4) pwrite64(r7, &(0x7f0000000200)="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", 0x200, 0x0) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) [ 676.368470][T18277] rdma_listen+0xa3/0x970 [ 676.372824][T18277] ? _raw_spin_unlock+0x28/0x40 [ 676.377703][T18277] ucma_listen+0x14d/0x1c0 [ 676.382141][T18277] ? ucma_notify+0x190/0x190 [ 676.386760][T18277] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 676.393106][T18277] ? _copy_from_user+0x12c/0x1a0 [ 676.398084][T18277] ucma_write+0x2d7/0x3c0 [ 676.402433][T18277] ? ucma_notify+0x190/0x190 [ 676.407028][T18277] ? ucma_open+0x290/0x290 [ 676.411517][T18277] ? apparmor_file_permission+0x27/0x30 [ 676.417089][T18277] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 676.423351][T18277] ? security_file_permission+0x8f/0x380 [ 676.429009][T18277] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 676.434467][T18277] __vfs_write+0x8a/0x110 [ 676.438821][T18277] ? ucma_open+0x290/0x290 [ 676.443266][T18277] vfs_write+0x268/0x5d0 [ 676.447533][T18277] ksys_write+0x220/0x290 [ 676.451892][T18277] ? __ia32_sys_read+0xb0/0xb0 [ 676.456678][T18277] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 676.462156][T18277] ? do_syscall_64+0x26/0x790 [ 676.466854][T18277] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.472948][T18277] ? do_syscall_64+0x26/0x790 [ 676.477655][T18277] __x64_sys_write+0x73/0xb0 [ 676.482270][T18277] do_syscall_64+0xfa/0x790 [ 676.486977][T18277] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.492967][T18277] RIP: 0033:0x45c479 [ 676.496883][T18277] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 676.516501][T18277] RSP: 002b:00007f08fde00c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 676.524932][T18277] RAX: ffffffffffffffda RBX: 00007f08fde016d4 RCX: 000000000045c479 [ 676.532928][T18277] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000003 [ 676.540911][T18277] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 676.549159][T18277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 676.557155][T18277] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000000 [ 676.570173][ T27] audit: type=1804 audit(1583322567.550:9476): pid=18288 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir964400407/syzkaller.DorUrO/243/memory.events" dev="sda1" ino=16590 res=1 [ 676.598100][ T27] audit: type=1800 audit(1583322567.550:9477): pid=18288 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16590 res=0 11:49:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff7fffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x6, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000440)={0x6, {{0xa, 0x4e23, 0x7fff, @mcast1, 0x5}}, {{0xa, 0x4e24, 0x427f, @ipv4={[], [], @rand_addr=0x2}, 0x1}}}, 0x108) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x44000, 0x50) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000001c0)=@req={0x3, 0x8, 0x4, 0x2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) [ 676.637850][ T27] audit: type=1804 audit(1583322567.560:9478): pid=18288 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir964400407/syzkaller.DorUrO/243/memory.events" dev="sda1" ino=16590 res=1 [ 676.673645][ T27] audit: type=1804 audit(1583322567.660:9479): pid=18289 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir964400407/syzkaller.DorUrO/243/memory.events" dev="sda1" ino=16590 res=1 11:49:27 executing program 2 (fault-call:3 fault-nth:1): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 676.819750][T18294] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. [ 676.919361][T18297] FAULT_INJECTION: forcing a failure. [ 676.919361][T18297] name failslab, interval 1, probability 0, space 0, times 0 [ 676.932840][T18297] CPU: 0 PID: 18297 Comm: syz-executor.2 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 676.942756][T18297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.952853][T18297] Call Trace: [ 676.956171][T18297] dump_stack+0x197/0x210 [ 676.960544][T18297] should_fail.cold+0x5/0xf [ 676.965079][T18297] ? setup_fault_attr+0x1f0/0x1f0 [ 676.970194][T18297] ? stack_trace_save+0x8f/0xc0 [ 676.975083][T18297] ? stack_trace_consume_entry+0x170/0x170 [ 676.980930][T18297] __should_failslab+0xb7/0x100 [ 676.985813][T18297] should_failslab+0x9/0x14 [ 676.990340][T18297] kmem_cache_alloc+0x47/0x710 [ 676.995131][T18297] ? save_stack+0x5c/0x90 [ 676.999486][T18297] ? save_stack+0x23/0x90 [ 677.003838][T18297] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 677.009663][T18297] ? kasan_kmalloc+0x9/0x10 [ 677.014299][T18297] ? kmem_cache_alloc_trace+0x158/0x790 [ 677.020027][T18297] xas_alloc+0x346/0x460 [ 677.024303][T18297] xas_create+0x2cd/0x1060 [ 677.028909][T18297] xas_store+0x9a/0x1a00 [ 677.033191][T18297] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 677.039439][T18297] ? xas_start+0x166/0x560 [ 677.043878][T18297] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 677.050202][T18297] ? xas_load+0x67/0x150 [ 677.054496][T18297] __xa_insert+0x17b/0x2a0 [ 677.058941][T18297] ? __xa_cmpxchg+0x2f0/0x2f0 [ 677.063671][T18297] cma_alloc_port+0xb9/0x1b0 [ 677.068297][T18297] rdma_bind_addr+0x1bc5/0x1f80 [ 677.073166][T18297] ? find_held_lock+0x35/0x130 [ 677.077953][T18297] ? ucma_get_ctx+0x80/0x160 [ 677.083457][T18297] ? cma_ndev_work_handler+0x190/0x190 [ 677.088941][T18297] ? lock_downgrade+0x920/0x920 [ 677.093820][T18297] ? rwlock_bug.part.0+0x90/0x90 [ 677.098874][T18297] rdma_listen+0xa3/0x970 [ 677.103220][T18297] ? _raw_spin_unlock+0x28/0x40 [ 677.108090][T18297] ucma_listen+0x14d/0x1c0 [ 677.112556][T18297] ? ucma_notify+0x190/0x190 [ 677.117177][T18297] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 677.123445][T18297] ? _copy_from_user+0x12c/0x1a0 [ 677.128707][T18297] ucma_write+0x2d7/0x3c0 [ 677.133062][T18297] ? ucma_notify+0x190/0x190 [ 677.137679][T18297] ? ucma_open+0x290/0x290 [ 677.142120][T18297] ? apparmor_file_permission+0x27/0x30 [ 677.147696][T18297] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 677.153958][T18297] ? security_file_permission+0x8f/0x380 [ 677.159720][T18297] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 677.166025][T18297] __vfs_write+0x8a/0x110 [ 677.170386][T18297] ? ucma_open+0x290/0x290 [ 677.174943][T18297] vfs_write+0x268/0x5d0 [ 677.179225][T18297] ksys_write+0x220/0x290 [ 677.183584][T18297] ? __ia32_sys_read+0xb0/0xb0 [ 677.188372][T18297] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 677.193866][T18297] ? do_syscall_64+0x26/0x790 [ 677.198572][T18297] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.204678][T18297] ? do_syscall_64+0x26/0x790 [ 677.209396][T18297] __x64_sys_write+0x73/0xb0 [ 677.214014][T18297] do_syscall_64+0xfa/0x790 [ 677.218550][T18297] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.224462][T18297] RIP: 0033:0x45c479 [ 677.228390][T18297] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 677.248013][T18297] RSP: 002b:00007f08fde00c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 677.256580][T18297] RAX: ffffffffffffffda RBX: 00007f08fde016d4 RCX: 000000000045c479 [ 677.264570][T18297] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000003 [ 677.272648][T18297] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 677.280636][T18297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 677.288623][T18297] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000001 [ 677.298781][ T27] audit: type=1804 audit(1583322568.370:9480): pid=18300 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir964400407/syzkaller.DorUrO/243/memory.events" dev="sda1" ino=16590 res=1 [ 677.354204][ T27] audit: type=1800 audit(1583322568.370:9481): pid=18300 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16590 res=0 [ 677.420623][ T27] audit: type=1804 audit(1583322568.370:9482): pid=18299 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir964400407/syzkaller.DorUrO/243/memory.events" dev="sda1" ino=16590 res=1 [ 677.453799][ T27] audit: type=1804 audit(1583322568.470:9483): pid=18299 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir964400407/syzkaller.DorUrO/243/memory.events" dev="sda1" ino=16590 res=1 11:49:28 executing program 3: unshare(0x200) r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) ptrace$setregs(0xd, r0, 0x6, &(0x7f00000001c0)="effd7a0a2649b64d1ad5221aad1c67f0c8e18cf2dcfe7e5e25d518d595a3e40ab24f773367eacb50e0477808ad219877eb61678bd729824efb6d1c2c7889e8d79ebb544fce77501ed473795555b471646f48c6ff1bc4f15065db713df56c7b461daefb31bf8179ca1469ff7b957d426c17046910c9db9ea93d42b3a18f2f884f6d5f93272edceb") perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000001400)={0x0, 0x11, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000001440)) close(r1) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r2, &(0x7f0000000000), &(0x7f0000000300)=0x10, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mq_open(&(0x7f00000000c0)='\x00', 0x800, 0x51, &(0x7f0000000140)={0xff, 0x100, 0x5, 0xfffc}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000480)=0x3fe, 0x4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 11:49:28 executing program 2 (fault-call:3 fault-nth:2): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:49:28 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x402000, 0x0) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f00000000c0)={0x3, 0x1, 0x9, 0x20, 0x1bd, &(0x7f0000000640)}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv\x00', 0x3) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)="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", 0xa51}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9091a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r3 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x1, 0x2000) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) accept(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r4, &(0x7f0000000a40)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d0962f2179c09799a4c42ca3041b3a156452bce449969be2b7b88102ceb643115a14d208418b5d2499825fbaf5240a54c05818dc8f8af52f2d5ee7765137430180e3003be5c699fefdfd7e57a11072941"], 0xfdef) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x3a010, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x3ff}}, {@posixacl='posixacl'}, {@mmap='mmap'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x31, 0x62, 0x38, 0x65, 0x64, 0x30, 0x38], 0x2d, [0x39, 0x65, 0x66, 0x67], 0x2d, [0x61, 0x33, 0x30, 0x61], 0x2d, [0x6, 0x63, 0x61, 0x31], 0x2d, [0x35, 0x35, 0x61, 0x32, 0x64, 0x36, 0x33, 0x32]}}}, {@fowner_lt={'fowner<', r6}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/capi/capi20ncci\x00'}}, {@euid_eq={'euid', 0x3d, r7}}]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 677.684713][T18312] FAULT_INJECTION: forcing a failure. [ 677.684713][T18312] name failslab, interval 1, probability 0, space 0, times 0 [ 677.697633][T18312] CPU: 1 PID: 18312 Comm: syz-executor.2 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 677.707534][T18312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.717616][T18312] Call Trace: [ 677.720936][T18312] dump_stack+0x197/0x210 [ 677.725302][T18312] should_fail.cold+0x5/0xf [ 677.729853][T18312] ? setup_fault_attr+0x1f0/0x1f0 [ 677.734916][T18312] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 677.740939][T18312] __should_failslab+0xb7/0x100 [ 677.745964][T18312] should_failslab+0x9/0x14 [ 677.750495][T18312] kmem_cache_alloc+0x47/0x710 [ 677.755445][T18312] xas_alloc+0x346/0x460 [ 677.759836][T18312] xas_create+0x2cd/0x1060 [ 677.764326][T18312] xas_store+0x9a/0x1a00 [ 677.768591][T18312] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 677.774862][T18312] ? xas_start+0x166/0x560 [ 677.779321][T18312] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 677.785695][T18312] ? xas_load+0x67/0x150 [ 677.789963][T18312] __xa_insert+0x17b/0x2a0 [ 677.794395][T18312] ? __xa_cmpxchg+0x2f0/0x2f0 [ 677.799140][T18312] cma_alloc_port+0xb9/0x1b0 [ 677.803747][T18312] rdma_bind_addr+0x1bc5/0x1f80 [ 677.808616][T18312] ? find_held_lock+0x35/0x130 [ 677.813382][T18312] ? ucma_get_ctx+0x80/0x160 [ 677.817974][T18312] ? cma_ndev_work_handler+0x190/0x190 [ 677.823439][T18312] ? lock_downgrade+0x920/0x920 [ 677.828312][T18312] ? rwlock_bug.part.0+0x90/0x90 [ 677.833263][T18312] rdma_listen+0xa3/0x970 [ 677.837738][T18312] ? _raw_spin_unlock+0x28/0x40 [ 677.842596][T18312] ucma_listen+0x14d/0x1c0 [ 677.847007][T18312] ? ucma_notify+0x190/0x190 [ 677.851615][T18312] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 677.857895][T18312] ? _copy_from_user+0x12c/0x1a0 [ 677.862846][T18312] ucma_write+0x2d7/0x3c0 [ 677.867173][T18312] ? ucma_notify+0x190/0x190 [ 677.871862][T18312] ? ucma_open+0x290/0x290 [ 677.876328][T18312] ? apparmor_file_permission+0x27/0x30 [ 677.881971][T18312] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 677.888212][T18312] ? security_file_permission+0x8f/0x380 [ 677.893842][T18312] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 677.899149][T18312] __vfs_write+0x8a/0x110 [ 677.903476][T18312] ? ucma_open+0x290/0x290 [ 677.907900][T18312] vfs_write+0x268/0x5d0 [ 677.912141][T18312] ksys_write+0x220/0x290 [ 677.916469][T18312] ? __ia32_sys_read+0xb0/0xb0 [ 677.921243][T18312] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 677.926875][T18312] ? do_syscall_64+0x26/0x790 [ 677.931544][T18312] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.937739][T18312] ? do_syscall_64+0x26/0x790 [ 677.942427][T18312] __x64_sys_write+0x73/0xb0 [ 677.947016][T18312] do_syscall_64+0xfa/0x790 [ 677.951518][T18312] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.957401][T18312] RIP: 0033:0x45c479 [ 677.961316][T18312] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 677.980922][T18312] RSP: 002b:00007f08fde00c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 677.989602][T18312] RAX: ffffffffffffffda RBX: 00007f08fde016d4 RCX: 000000000045c479 [ 677.997564][T18312] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000003 [ 678.005624][T18312] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 678.013630][T18312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 678.021598][T18312] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000002 [ 678.268170][T18331] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. [ 678.385542][ T9803] Bluetooth: hci0: command 0x1003 tx timeout [ 678.392075][T17907] Bluetooth: hci0: sending frame failed (-49) [ 680.470611][T10840] Bluetooth: hci0: command 0x1001 tx timeout [ 680.477941][T17907] Bluetooth: hci0: sending frame failed (-49) [ 682.550681][T10840] Bluetooth: hci0: command 0x1009 tx timeout 11:49:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x80000, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 11:49:38 executing program 2 (fault-call:3 fault-nth:3): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:49:38 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(0x0, 0x0) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0xfffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x101180, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001400)={0x164, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x404}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf444}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xcb1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x84}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100000}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb0a2}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}]}, 0x164}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x56e02) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 11:49:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:49:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8000000040400200) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010100fcffffffffffffff00000005000100e460cf7d"], 0x1c}}, 0x0) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 11:49:38 executing program 1: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x1000, 0x2, &(0x7f0000000080)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}, {&(0x7f0000000180)="0bb3800e90dd5d91c4614248b0361b96239ebe6332b4bc2f193e2f30adee1ff152c5c1fa54af880ba0fe6a22765a63e93a138c82c438e9714141bbac844eba95f371ad06eb7855152eee07dfb12c00000004acaba888f554c3305d1fc09f9f50e9d834f4769f09a3f4b9c87501b4cb8c8d20ec254db7f98732c5a4f9a230f22be91a6c1e1e326ed1784239d954963ff9bad2150fe7a07b6c7c1e191d884b88fd1ed8bf6095cefd718f1de57faec4a7f8ef67b2b3debd7c8e1feee1f920e6a8492773140cdd0f000000000000000000000000005e9a", 0xd5, 0x800}], 0x40000, 0x0) [ 687.083780][T18345] FAULT_INJECTION: forcing a failure. [ 687.083780][T18345] name failslab, interval 1, probability 0, space 0, times 0 [ 687.096802][T18345] CPU: 0 PID: 18345 Comm: syz-executor.2 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 687.106706][T18345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 687.116780][T18345] Call Trace: [ 687.120099][T18345] dump_stack+0x197/0x210 [ 687.124474][T18345] should_fail.cold+0x5/0xf [ 687.129011][T18345] ? setup_fault_attr+0x1f0/0x1f0 [ 687.135136][T18345] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 687.141680][T18345] __should_failslab+0xb7/0x100 [ 687.146566][T18345] should_failslab+0x9/0x14 [ 687.151107][T18345] kmem_cache_alloc+0x47/0x710 [ 687.155945][T18345] xas_alloc+0x346/0x460 [ 687.160224][T18345] xas_create+0x2cd/0x1060 [ 687.164705][T18345] xas_store+0x9a/0x1a00 [ 687.168966][T18345] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 687.175229][T18345] ? xas_start+0x166/0x560 [ 687.179678][T18345] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 687.185932][T18345] ? xas_load+0x67/0x150 [ 687.190202][T18345] __xa_insert+0x17b/0x2a0 [ 687.194643][T18345] ? __xa_cmpxchg+0x2f0/0x2f0 [ 687.199368][T18345] cma_alloc_port+0xb9/0x1b0 [ 687.204080][T18345] rdma_bind_addr+0x1bc5/0x1f80 [ 687.208935][T18345] ? find_held_lock+0x35/0x130 [ 687.213713][T18345] ? ucma_get_ctx+0x80/0x160 [ 687.218330][T18345] ? cma_ndev_work_handler+0x190/0x190 [ 687.223800][T18345] ? lock_downgrade+0x920/0x920 [ 687.228676][T18345] ? rwlock_bug.part.0+0x90/0x90 [ 687.233645][T18345] rdma_listen+0xa3/0x970 [ 687.238000][T18345] ? _raw_spin_unlock+0x28/0x40 [ 687.242885][T18345] ucma_listen+0x14d/0x1c0 [ 687.247327][T18345] ? ucma_notify+0x190/0x190 [ 687.251944][T18345] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 687.258240][T18345] ? _copy_from_user+0x12c/0x1a0 [ 687.263214][T18345] ucma_write+0x2d7/0x3c0 [ 687.267568][T18345] ? ucma_notify+0x190/0x190 [ 687.272177][T18345] ? ucma_open+0x290/0x290 [ 687.276762][T18345] ? apparmor_file_permission+0x27/0x30 [ 687.282331][T18345] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 687.288606][T18345] ? security_file_permission+0x8f/0x380 [ 687.294368][T18345] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 687.299678][T18345] __vfs_write+0x8a/0x110 [ 687.304023][T18345] ? ucma_open+0x290/0x290 [ 687.308451][T18345] vfs_write+0x268/0x5d0 [ 687.312718][T18345] ksys_write+0x220/0x290 [ 687.317064][T18345] ? __ia32_sys_read+0xb0/0xb0 [ 687.321843][T18345] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 687.327337][T18345] ? do_syscall_64+0x26/0x790 [ 687.332032][T18345] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 687.338113][T18345] ? do_syscall_64+0x26/0x790 [ 687.343077][T18345] __x64_sys_write+0x73/0xb0 [ 687.347683][T18345] do_syscall_64+0xfa/0x790 [ 687.352210][T18345] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 687.358125][T18345] RIP: 0033:0x45c479 [ 687.362028][T18345] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 11:49:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') getsockopt$rose(r4, 0x104, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 687.381642][T18345] RSP: 002b:00007f08fde00c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 687.390107][T18345] RAX: ffffffffffffffda RBX: 00007f08fde016d4 RCX: 000000000045c479 [ 687.398097][T18345] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000003 [ 687.406086][T18345] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 687.414107][T18345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 687.422094][T18345] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000003 11:49:38 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = socket(0x2, 0x803, 0xff) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x800fe) sendfile(r2, r3, 0x0, 0x8000fffffffe) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) rt_sigreturn() [ 687.505894][T18356] Bluetooth: hci0: Frame reassembly failed (-84) [ 687.514046][ T7] Bluetooth: hci0: Frame reassembly failed (-84) 11:49:38 executing program 4: socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xffffffffffffffff) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x540, 0x0) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x1, 0x1, 0x6, 0x4, 0x6, "5a07d5139cf87c11c67d3a4e3b5bb9cd00bc1dd532b3818580c90f2437f8abf16cde8be92a414871df9e6bf7fd48bc0d3130b84ba9087da30926c31376db0a", 0xe}, 0x60) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x169) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000000)={0x4, 0x1, 0x5}) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0x5, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x800, 0x5, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) 11:49:38 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r1 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0x10000, 0xa, 0x4, 0x4, 0x10000, {0x0, 0x2710}, {0x3, 0x2, 0x6, 0xff, 0x3, 0x9, "cf428d9a"}, 0x5, 0x1, @planes=&(0x7f0000000000)={0x6, 0xe742, @mem_offset=0xf9e, 0x7}, 0x2c, 0x0, r1}) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000800010063627300cc8e02001800010000000000070000000500000000feff000017590578003f91160e12e5cab38ea6d14b05d0df915a3f958c489677563000"/87], 0x48}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) r7 = getpgid(0x0) lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='system.advise\x00', &(0x7f0000000300)='self,/#\x00', 0x8, 0x3) sched_getscheduler(r7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ipvlan0\x00', r5}) 11:49:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f00000002c0)) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) vmsplice(r2, &(0x7f0000000940)=[{&(0x7f0000000540)="a157109a053e816d3e18da77179484db8bd77463f9c9770e6b2bd3e458adec806568b2b33ce791e9a46d52b380d2ce66f47ac661471048d4322a5d5de4db79409567c1bb6b6b5ea2e3f65876d7edbc562de512fb8471ff087aac2f389197fab21131398d959678e7b027b41255d1c5ac245db7fce7ab692fa21484b0273b189f9bc707adfdbd5a06f863b4f14ee7b3e71f7710dc87628e2c29b1265cb7e4dc4eaab319ddc0efdd2fa740417295ab9bbb0bedc2200574a35b2b690605451aa85ef4ce102f33", 0xc5}, {&(0x7f0000000700)="e28477b59ef3050900000096b1091f71d06ace0e689679dbcbc2f93c2c4b10547d713f477b8db1776e260fe52d2a983eb9ef70922f931a7a9c6ce1594d71ad62d0d0d587033e5f033e22f2e5df465bb67b88ddd6a8c8a7e26b73c4a6de9d68a6ecab84b77ec2f3b1705cbc6a68f310c777b53e5017900ffe915a182951ea26fc7baa46635442bcce6951cf73be76f552303c19378f28dcfa6dc9739af25c27541483fde88dd75b6273b7c09fb8efd302b2a4ad6d94c88f4cf5b855b160777314bb5d4a35dfa6e5db55", 0xc9}, {&(0x7f0000000800)="207c4516e17e45b8c112cbcb080f108f9ce489d1521a693fde1670c8a052f497cabd74cd5b4522840647c34e80c577cde2aff3ee04c634c1b588", 0x3a}, {&(0x7f0000000840)="88de411cda6123c8a6e9a3994cdd774dfe32b7f5cf368748261e", 0x1a}, {&(0x7f0000000880)="3df11ee8fa18bbc281dd95c6e3cefe71727fac8f78a3a568dd4994f557ec489f7c974e06c8aadf07", 0x28}, {&(0x7f00000008c0)="ecd5b13fe3336a0ab331cb140367574265cf89edf513a09d103ea7594ad90293553ef7f55866918fe0f1021a25e6d6eeb55c9446bdc002b840ffaf57be445c19c20bdede8c4bb2612d6d6949274b49c4fe392e84c0520ef8af4e09810d73a5f04d354f67bbb3d958bfc3658e3b71537051980ce0a3b6cfe2fa", 0x79}], 0x6, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r5, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, r5, 0x0, 0x5, &(0x7f0000000000)='eth0\x00'}, 0x30) ptrace$setregs(0xf, r6, 0xfffffffffffffffd, &(0x7f0000000180)="be32c79a8237b0cae43daca93074d49c4d0a4b2aa37d976815ec9f121312d474052d5356f9a15afc4ac39d566da017011fcbd8a09fc1ac3e9b2e496826cb6f5c984dc36add5210c25fc0522a60c2ac973ea5c18d7cf258764fa746a2e925b84cd483578242e71ce3d6fc74211999b5420b8754508060d48a29c8e05b3aaf96b8b80e6c95d723") ptrace$cont(0x20, r0, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$netlink(0x10, 0x3, 0x15) syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x1, 0x2) write$binfmt_misc(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) ioctl$FICLONE(r7, 0x40049409, r8) [ 687.729671][ T27] audit: type=1804 audit(1583322578.800:9484): pid=18366 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir421263001/syzkaller.uiSVE6/255/bus" dev="sda1" ino=16603 res=1 [ 687.901174][T18377] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. 11:49:39 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000180)='l', 0x1}], 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x41040}, 0x20000800) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xa, &(0x7f0000000100), 0x5) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x810, r2, 0x5) [ 687.994082][T18377] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 11:49:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r2, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x46004}, 0x4) [ 688.099594][T18383] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. [ 688.182078][T18377] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 688.266821][T18394] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 688.336128][T18394] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.1'. [ 688.358503][T18394] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 688.367645][T18398] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.1'. [ 689.580872][T10628] Bluetooth: hci0: command 0x1003 tx timeout [ 689.588457][T17907] Bluetooth: hci0: sending frame failed (-49) [ 691.660682][ T9816] Bluetooth: hci0: command 0x1001 tx timeout [ 691.667763][T17907] Bluetooth: hci0: sending frame failed (-49) [ 693.740553][ T2996] Bluetooth: hci0: command 0x1009 tx timeout [ 694.624158][ T0] NOHZ: local_softirq_pending 08 11:49:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 11:49:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0xd0, 0x10, 0x100, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x2a372}, [@IFLA_AF_SPEC={0xb0, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET6={0x24, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x80}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x78}]}, @AF_MPLS={0x4}, @AF_INET={0x38, 0x2, 0x0, 0x1, {0x34, 0x1, 0x0, 0x1, [{0x8, 0x11, 0x0, 0x0, 0xf2}, {0x8, 0x17, 0x0, 0x0, 0x4}, {0x8, 0x8, 0x0, 0x0, 0x9b}, {0x8, 0x6, 0x0, 0x0, 0x3}, {0x8, 0x1e, 0x0, 0x0, 0x2}, {0x8, 0x0, 0x0, 0x0, 0x4}]}}, @AF_INET={0x48, 0x2, 0x0, 0x1, {0x44, 0x1, 0x0, 0x1, [{0x8, 0x18, 0x0, 0x0, 0x6}, {0x8, 0x9, 0x0, 0x0, 0x1000}, {0x8, 0x14, 0x0, 0x0, 0x5}, {0x8, 0x0, 0x0, 0x0, 0x8}, {0x8, 0x15, 0x0, 0x0, 0x10}, {0x8, 0x1d, 0x0, 0x0, 0x40}, {0x8, 0xa, 0x0, 0x0, 0x6}, {0x8, 0x1e, 0x0, 0x0, 0x8d18}]}}]}]}, 0xd0}}, 0x0) 11:49:48 executing program 2 (fault-call:3 fault-nth:4): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:49:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x305400, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r2 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r5, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r5, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000024002908000000000000000005000000450011803285d0c290a83db1ac04bde168aa466ef3d27572fd9c448deab722afda6a7dd3137f310b2ff9e15f41d715563fb5ee02d183be25342cf0947b7051510a55c63d6900000010399105c79e83d94b523b61caab3fa2e4"], 0x5c}, 0x1, 0xffffff7f0e000000}, 0x0) 11:49:48 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@session={'session', 0x3d, 0x100000001}}]}) arch_prctl$ARCH_GET_CPUID(0x1011) 11:49:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r10, r11, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) [ 697.904643][T18413] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. [ 697.911254][T18408] hfs: session requires an argument [ 697.928666][T18408] hfs: unable to parse mount options 11:49:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:49:49 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x6d, &(0x7f0000000a00)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010200000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d18ad181867514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70227bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c247f195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27ad2a986e0e244bd117252e47ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db269971210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee452e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd644b4a44b807c9765cc7ef43c3cc0a6ad3d3976656d475dd2ed789004be03884e042acd2e35f09c7a1f97f9561f62837e1d38eab98e6a7285bb0c6c190b9abc4b5705eb1073fe63e88f6ff7e510c2795288a69aa52ff32a89c9bd496d5d61d02cd952aa6226b3098ec9215fcf5becbfd7b53b4c65b74873ae66ba6d7376bc7354c34a49c042125d49ac436ffe132d9c1a6387e727f033a1c826c168fa5af31afa37d533a71b70a3fa9a264a9f32802f68343d4272d11e557a9419461864a0043b6121646cf2e2a7709fea8c226444cdccb045fe8015d399dbde39f6b3294bec68ddbb1eb12d48bdace9b339bc89f2274ae621edefca16fbbb75d53b1097ab1f8bcf81e7b949ef7e5b24639f4bbe0c9854cf403bd90e81b4cf87938e1a7c0efc690af72961c3366c5dc70a6df2a4b00"/877], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x7, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x1800000000000060, 0xe80, 0xfffffffffffffe64, &(0x7f0000000100)="000e003f0000007e5bc5795eca00000800ffffffba000000ffff08", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x0, 0x0, 0x0, 0xf}, 0x40) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) socket$kcm(0xa, 0x0, 0x11) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x8008330e, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) [ 697.970917][T18413] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. [ 698.039145][T18418] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. [ 698.091218][T18408] hfs: session requires an argument [ 698.129808][T18408] hfs: unable to parse mount options 11:49:49 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x224, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r3 = socket$netlink(0x10, 0x3, 0x15) rt_sigtimedwait(&(0x7f0000000080), 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x8) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000040)={r0, r3, 0xf5f1}) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendto(r4, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(r4, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xb6c}}], 0x34, 0xac0, 0x0) [ 698.203008][T11108] Bluetooth: hci0: Frame reassembly failed (-84) [ 698.210606][T18427] Bluetooth: hci0: Frame reassembly failed (-84) 11:49:49 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x6}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) accept4$rose(r3, &(0x7f0000000000)=@short={0xb, @dev, @default, 0x1, @null}, &(0x7f0000000040)=0x1c, 0x800) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 11:49:49 executing program 4: r0 = gettid() waitid(0x83b895581628fca4, r0, &(0x7f0000000040), 0x0, 0x0) r1 = gettid() writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}], 0x1) kcmp(r1, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xbc}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000280300000000000098010000000000009801000098010000900200009002000090020000900200009002000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000300198010000000000000000000000000000000000000000c000737472696e67000000000000000000000000000000000000000000000001000000006b6d7000000000000000000000000000ea7c5e89c8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b865bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcde83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c92ba1ab99ffcfc1dc61f8027030000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000007070747000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000000000000000000600053455400000000000000001c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f3d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00000000"], 0x388) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x0, &(0x7f0000000000)="75d3115f1f1aa7e0087ea6a4226bfdc1f42358c519c057df0b6f2280e86b") wait4(0x0, 0x0, 0x0, 0x0) getpeername$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 698.438170][T18448] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. 11:49:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x8, 0x8, 0xfa00, {r1}}, 0x10) [ 699.219948][T18448] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. [ 700.220507][T10628] Bluetooth: hci0: command 0x1003 tx timeout [ 700.227728][T17907] Bluetooth: hci0: sending frame failed (-49) [ 702.300578][T10628] Bluetooth: hci0: command 0x1001 tx timeout [ 702.307383][T17907] Bluetooth: hci0: sending frame failed (-49) [ 704.390530][ T2996] Bluetooth: hci0: command 0x1009 tx timeout 11:49:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 11:49:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="78010000170095020000000000000000fe8000000000000000000000000000bb0000000000000000ac141400000000000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000a00"/34, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fe8000000000000000000000000000bb000000002b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015000000000000000000"], 0x178}}, 0x0) 11:49:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x6000, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, 0x0, 0x20c1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYRES16], 0x1}}, 0x0) r3 = open(0x0, 0x141042, 0x0) dup(r0) clone3(0x0, 0x0) r4 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000004c0)={0x1, @vbi}) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x4000000000001c2, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) msgget(0x0, 0x700) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback, 0x111a}, {0x2, 0x0, 0xffffffc1, @dev={0xfe, 0x80, [], 0x1d}}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r3, 0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x73) 11:49:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0xa, 0x8, 0xfa00, {r1}}, 0x10) 11:49:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r10, r11, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:49:59 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000080)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) fallocate(r0, 0x11, 0x0, 0x100000001) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100636273001c0002001800010000000000070000000500000000feff0000000000000000a2e387d63e7217590578003f91160e12e5cab38ea6d14b05d0df915a3f958c4896775630"], 0x48}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) connect$packet(r3, &(0x7f0000000000)={0x11, 0x8, r6, 0x1, 0x5, 0x6, @multicast}, 0x14) 11:49:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x10, 0x8, 0xfa00, {r1}}, 0x10) [ 708.866833][T18488] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. [ 708.879648][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x1000800 phys_seg 0 prio class 0 11:50:00 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0x405e7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000040)=0x28f) 11:50:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 11:50:00 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x16, 0x8, 0xfa00, {r1}}, 0x10) 11:50:00 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400012) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff8001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x13, &(0x7f0000000980)=ANY=[@ANYBLOB="ed624ef6dec4eb69b9f55d9d2b25c41f423c749105c4c6ecd00f24677cfabd5a22c3664f85204ded8dc5400962775d87c62eb72832740344ed25d30c7c053c7ed8c88c72d2daf60f2e9ff152b4a19f1fc9c3ae31726c7d195cb751d25e75989971b0fe4da6022bfdc79a27280806a76fb5131bd92ab0063fd8d928259a9ac752fc49e0547947f1389e93d27ba258ac46805447ba07000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r0, r1, 0x0, 0x16, &(0x7f00000005c0)='cpuset.effective_mems\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_user\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x400c00) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r3, 0x800454d2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r4, 0x800454d2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x400c00) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000001200)=0x80000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000001200)=0x80000000) r8 = openat$cgroup_ro(r7, &(0x7f0000000300)='rdma.current\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r8, 0x800454d2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r9, 0x800454d2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0x400c00) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r11 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r12, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfffffffffffffffc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) gettid() r13 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000280)={&(0x7f0000000040)=@generic={0x1f, "4bc80c3bd55387360c25a6442784bfcf336523e113dd4a564df785b842c6acdc2e5ac21fc7ea852671c7eae8a490cd6c1b099834277a28f05f151180858a0523ffaba9dc37affc0b1cae5738b3fe19f6799d57f246b257bd727f694ed026ced9d4c6805d94a8a4a8d50b46a1ffb2202360419d00"}, 0x80, 0x0, 0x430}, 0x0) r14 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r15 = socket$kcm(0x11, 0x7, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r12, 0x9, 0x0, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffcf) socket$kcm(0xa, 0x6, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) sendmsg(r13, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r16, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r18 = gettid() perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}, 0x4, 0x0, 0x0, 0x8, 0x0, 0x4, 0x80}, r18, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000a40), 0x16}}, r18, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) r19 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r19, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r20 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r21 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r21, 0x1, 0x3e, &(0x7f00000002c0)=r20, 0x4) r22 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"/707], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r22, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f088a81fffffff00004000630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0xffffffffffffff50, 0xfffffffffffffe09}, 0xd) r23 = getpid() sched_setscheduler(r23, 0x5, &(0x7f0000000380)) r24 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0xea, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext}, r23, 0x0, 0xffffffffffffffff, 0x0) close(r24) ioctl$PERF_EVENT_IOC_SET_FILTER(r24, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r24, 0x89a1, &(0x7f0000000680)='&@[\x00') r25 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20a0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r25) ioctl$PERF_EVENT_IOC_SET_FILTER(r25, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r25, 0x89a1, &(0x7f0000000680)='&@[\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r26, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$kcm(r26, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)='l', 0x1}], 0x1}, 0x0) r27 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x4, &(0x7f0000001a80)=ANY=[@ANYRES16=r26, @ANYPTR64=&(0x7f0000000a80)=ANY=[@ANYRESOCT, @ANYRES32, @ANYPTR64, @ANYRESOCT=r17, @ANYRES16=r24, @ANYRESHEX=r14, @ANYPTR=&(0x7f0000000700)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000880)=ANY=[@ANYRES32=r25, @ANYRES64=r20, @ANYRES32, @ANYPTR64=&(0x7f0000000800)=ANY=[@ANYRES16=r3, @ANYPTR, @ANYRESHEX=0x0], @ANYBLOB="00d5a8d5e7e1d0789c75ef05dafc3d8c4a2403186499f59fc5ec6565413272c7c25f6a5b8a27f25a56f42400000000cacc0700000000000000b6515b648a99ed88f80233bb592b32726dbc9eb2c992450d45c0c6dbc6cfd01d8f2dd10980629eec8bdc73bfc729c4b4339cf2cab23848a7525cf6fa71a747b1b019ca3ad74a75a45d67a3f569a24e8f227fa368eaa401000d0f56a07f34e6c8a3ae7a5122260b5a9c1e6cda697fb36d2efd01099afc3a8a7a9b546d9a2434f8c8d297ebbe3307cd01493dc87a47f79050445efdfe76e1"], @ANYRESOCT=r20], @ANYPTR64=&(0x7f0000000740)=ANY=[]], @ANYRESOCT=r11, @ANYRES32=r15], &(0x7f00000002c0)='syzkaller\x00', 0xa8f, 0x0, 0x0, 0x41000, 0x8, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xc, 0x80, 0x4}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r17, 0x89e0, &(0x7f0000000500)={r15, r27}) [ 709.480985][T18510] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 709.602296][T18510] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. 11:50:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 11:50:00 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x3, 0xfa00, {r1}}, 0x10) 11:50:00 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001600)=""/4096, 0x1c80}], 0x1}, 0x40012100) r1 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000280)="f1", 0x1, r2) add_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="75d8934b2af62e42a88e805b187946bb4797a841c1db49c955ef175807abfa33ad377c53bee16c680fa225c08bd6796731f0f83f85ba403345a46bee827f988f7ef059080760ad3ba3768585a52461", 0x4f, r2) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES32=r3]], 0x8) 11:50:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 709.904641][T18525] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. [ 710.009937][T18525] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 710.023763][T18538] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 710.050211][T18538] encrypted_key: insufficient parameters specified [ 710.078364][T18538] netlink: 50527 bytes leftover after parsing attributes in process `syz-executor.5'. 11:50:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 11:50:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r10, r11, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:50:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x10, 0xfa00, {r1}}, 0x10) 11:50:01 executing program 3: 11:50:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 710.517520][T18523] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. [ 710.536836][T18523] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 11:50:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x80000000, 0x2, &(0x7f00000002c0)=[{&(0x7f00000001c0)="800000001010000019000300e60100006c0000000000000001000000010000000000000000006d5ebe5a0000ffff53ef", 0x30, 0x3314b15}, {&(0x7f0000000480)="368f6a2a6f7046e51e595eb3dcc1cb4cbd69af2747d0746e7e0c0b5735e6cbed6432442d1df8145261c9f26959c902173a240b5c4c4261f075f6e8d51b37dbc75d304a75c4a8be13053cfb11bcde2a107e4134b7cd941ecae73744a1824872fc899a7a9c91459e1748e2d3197af44ae535d10bfa1a09b44269c539259831d835f13acea1756a72d0c230d1463d9adf923f9dda3e535915940df7e82e241054488d770c4b60b1b07a52acffe36da45a8189d2ec7c08d51707b97366eab121e826a699cc9c27cb1c39b3077ccff18d93babe026237f3019cb38297b2f4981688cbe418fe696131", 0xe6, 0x38}], 0x842003, 0x0) 11:50:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x14, 0xfa00, {r1}}, 0x10) [ 710.689587][T18561] netlink: 50527 bytes leftover after parsing attributes in process `syz-executor.5'. [ 710.762295][T18562] netlink: 50527 bytes leftover after parsing attributes in process `syz-executor.5'. 11:50:01 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x101000}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000028000/0xc000)=nil, 0xc000, 0x1000003, 0x12, 0xffffffffffffffff, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x3c, 0x0, 0x0, 0x401, 0x0, 0x20000000fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x10000, 0x285e11}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df", 0x20) r6 = accept$alg(r5, 0x0, 0x0) r7 = dup(r6) recvmsg$can_raw(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1}, 0x10002) r8 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, &(0x7f0000000280)={'bridge_slave_0\x00', {0x2, 0x4e23, @local}}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/25, 0x10}], 0x1}, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 11:50:01 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 11:50:02 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa02, {r1}}, 0x10) 11:50:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000040)="9adc01ce", 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000f7ef006afc020000000012b0000000"], 0x20}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11:50:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x0, 0x30, 0x8, 0x4}, &(0x7f00000003c0)=0x18) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, r4, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev}]}, 0x30}}, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x20000, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc8, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x3c}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="3750f2077d66112d08de646a472f9bff"}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r7 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000400)=0x4, 0x4) accept4$inet(r7, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$DRM_IOCTL_SET_VERSION(r7, 0xc0106407, &(0x7f0000000040)={0x2e, 0x400, 0x3, 0x7}) 11:50:02 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) [ 711.668773][T18580] netlink: 63755 bytes leftover after parsing attributes in process `syz-executor.4'. 11:50:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r10, r11, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:50:02 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa04, {r1}}, 0x10) 11:50:02 executing program 3: semget$private(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x3, 0x3, 0x4, 0x1000, 0x6, {}, {0x1, 0x8, 0x8, 0x4, 0x40, 0x3f, "05a07729"}, 0x800, 0x3, @offset=0x4, 0x8, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_INFO(r2, 0x81204101, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r0, &(0x7f0000000180)={@void, @val={0x0, 0x0, 0x0, 0x0, 0x2}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "f426e6", 0x0, "3237fb"}}}}}, 0xfdef) 11:50:02 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 11:50:02 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") semget$private(0x0, 0x3, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 711.937428][T18617] IPVS: ftp: loaded support on port[0] = 21 11:50:03 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="020000000200ffff0a0008000a0001006261736963000000200002001c00024494f3f77c8c5c8900100002800300000000000400000000015c446dfa84e9c475f21f6eacf95094ffc7bf9140765c6741fe92d061a5390272820968d5e6df69e8c8dec6202556e0ae27a3c417ec670ac050efef23bf59b7d383e46e31cf6183050722273b9a5242d25c1874ad2eb37b3baca320a913d48bc308efd1844bfabe71f3bfa5fc"], 0x50}}, 0x0) r0 = socket(0x1000000010, 0x80003, 0x0) sendmmsg$alg(r0, &(0x7f0000000100), 0x492492492492711, 0x0) 11:50:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 11:50:03 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa06, {r1}}, 0x10) 11:50:03 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0xa}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000540)={{0x2, 0x4e24, @multicast2}, {0x1, @local}, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 'geneve1\x00'}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x805f, 0x0, 0xa) getsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000200)=""/122, &(0x7f0000000100)=0x7a) r2 = syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendmsg$kcm(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000600)="04", 0x1}, {&(0x7f0000000640)="7e85be7fd4fa92636b30d1b536964194974898990d0e81e833b5a0bad69ffabb2c71da4707bb30d68865437ba64b6661e5f6d124f4a943d8a74f66ec0670df3d3010c8cdb583e941c2b4143a0c732fcf3acd0a3a6fccdd89d9a14fe8f93d679327975e4a5f704013f45bd5ab8667dff87f7c2629ba9dce521688e865d06488913b718f9338f0b65e6e8b203d2db7816c96dec7f27a6823271f39f308f8d5808cc0ff1c66eaa5c3d6ca6d9ab06a58e42eef39f31856b619c5ef8c6e", 0xbb}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="06f17ce4559bf6f129963df0b5ba07b4", 0x10}], 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x138}, 0x4008005) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x805f, 0x0, 0xa) sendto$inet(r5, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x805f, 0x0, 0xa) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f00000005c0)={'sit0\x00', 0x9}) semop(0x0, &(0x7f0000000140)=[{0x0, 0x3}], 0x1) r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000280)={r6, 0x84, 0xc9}, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)="19c96d5f4aa6df1431132050367430ad1bcd95ea42fca76f1e731667b7f46289d5aa5e35c6394e2ade36bc7f43840116f6ee04aa40ca87fb289b89cf35845d0a59681571da7a965cc4a56ef4017c9e83363437852028b6b0a9a1b3ec9936a7d70e917adc287c06b4afe160dba3247572351e37a892acc81d8e9c003c4c74e9b0e376d097", &(0x7f0000000440)=""/201) keyctl$clear(0x7, r6) r7 = syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) ioctl$VIDIOC_S_STD(r8, 0x40085618, &(0x7f0000001900)=0x800) set_mempolicy(0x8000, &(0x7f0000000040)=0x800, 0x7) 11:50:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 11:50:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 11:50:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 712.963546][T18654] device bridge0 left promiscuous mode [ 713.050051][T18625] IPVS: ftp: loaded support on port[0] = 21 [ 713.069756][T18654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 713.131957][T18617] netdevsim0 speed is unknown, defaulting to 1000 11:50:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r10, r11, &(0x7f0000000240)=0x202, 0x4000000000dc) 11:50:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 11:50:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20}) 11:50:05 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa08, {r1}}, 0x10) [ 714.041186][ T9861] tipc: TX() has been purged, node left! 11:50:06 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="68000000100005070000f9bbc798eb53eb4000002233e0d3d0e9800e9cca49541086e126fdd575116fcee861b809cab2412ba2ed04000000000000008807b92cc10cf0ce0968a3776764900da75024adbb82b46e4dc9a5afb18b177f8e439d5b2af7c002aaf3d8f7e632dad614c2aac92fa4ab75beed0a4715091989c4e6a71882c2f0f30cffcf54b700", @ANYRES32=0x0, @ANYBLOB="251002fffff000103400120009000100766c616e000000002400020006000100040000000c00020000000000000800000c000200090000000a0000000a0005000f0000000000000008000a0059bc40db1e"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x10000) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x10080, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000080)={0x35b, 0xe0, 0x20}) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x1f, 0x4) 11:50:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 11:50:06 executing program 4: add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) pipe(0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a2) 11:50:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r10, r11, &(0x7f0000000240)=0x202, 0x4000000000dc) 11:50:06 executing program 3: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffff11, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="d57f00000000ffffffff12"], 0x3}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1b4, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x79}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x47}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7a25}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd1b6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x33b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x82}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x43e2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdbb}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4040001}, 0x40800) r2 = syz_open_procfs(0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x64600) socket$alg(0x26, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) lseek(r3, 0x100000001, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xcb, 0xfa00, {0x2, &(0x7f00000000c0)}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r4 = getpid() r5 = getpid() getpid() rt_tgsigqueueinfo(0xffffffffffffffff, r5, 0x13, &(0x7f0000000000)={0x0, 0x0, 0xa}) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0xb8) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) 11:50:06 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa0c, {r1}}, 0x10) [ 715.334042][T18691] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. 11:50:06 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0xff02007a, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000008000001201", 0x2e}], 0x1}, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 715.412960][T18691] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 11:50:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 715.496052][T18703] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 715.564231][T18703] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 11:50:06 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000002010200005d000000000000000000002c0002801000028005000100000000001400018008000100ac1414aa08000200ac1414aa01000381040001"], 0x40}}, 0x0) [ 715.643503][T18709] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 11:50:06 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa12, {r1}}, 0x10) 11:50:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 11:50:06 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@ccm_128={{0x303}, "34307cea824871ff", "58f099cfea38a2a04d905d6d86e0b557", '8QtW', "57485849934bb7c0"}, 0x28) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="ba4c0100", @ANYRES16=r1, @ANYBLOB="6cec6197b59bd6cda1afe80c00000000000080fa9993ab8f00"/36], 0x3}, 0x1, 0x0, 0x0, 0x20040004}, 0x4040000) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x28}}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x48815) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000040)=0xe9) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000040)) [ 715.824975][T18720] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 715.900315][T18709] team0: Device ipvlan1 failed to register rx_handler 11:50:07 executing program 3: syz_open_dev$video(0x0, 0x0, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rename(0x0, &(0x7f0000000300)='./file0\x00') lstat(0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fsopen(&(0x7f0000000200)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001580)='./file0\x00', 0xffffffffffffffff) r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x10000, 0x4040) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000007c0)={@l2tp={0x2, 0x0, @loopback}, {&(0x7f0000000700)=""/109, 0x6d}, &(0x7f0000000780), 0x49}, 0xa0) fcntl$getownex(r2, 0x10, &(0x7f0000000400)) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r4 = accept4(r1, 0x0, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r4, r5, 0x0, 0x10000000000443) ioctl$SOUND_MIXER_READ_CAPS(r5, 0x80044dfc, &(0x7f00000002c0)) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81}}, {{@in6=@mcast2, 0x4d6}, 0x0, @in=@local, 0x0, 0x0, 0x1}}, 0xe8) syz_genetlink_get_family_id$batadv(0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') r6 = socket$inet6(0xa, 0x800000000000002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x20) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000006d00)=[{{0x0, 0x1000000, 0x0}}], 0xc6, 0x24000000) recvfrom$l2tp(r5, &(0x7f0000000140)=""/118, 0x76, 0x10000, 0x0, 0x0) 11:50:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 11:50:07 executing program 5: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x8}, 0x293, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000600000000000000160a20000000000a01000000000004000000000000000900010073797a300000000070006128c6298d4c299e46a20000120a0100001000000000000000000000040084800910020007797a30000000000900010073797a300000000008000340020000000900020073797a30000000000400848004000480080003400000000a140004800c0001af9cff03fec97a4b054ca199c9c89e2efa108901c17205f22b8dabdd096eeffcd9464c21790d97f99947bb49d25550b88b2e9a726374027a3027de96d5d696ac329d090437955e53"], 0x1}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x241, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 11:50:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r10, r11, &(0x7f0000000240)=0x202, 0x4000000000dc) 11:50:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 11:50:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 716.841380][T18716] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 716.922403][T18716] team0: Device ipvlan1 failed to register rx_handler 11:50:08 executing program 4: socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x7, 0x2]) open$dir(0x0, 0x100, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000a0020000000050010000080200000802000008020000080200000802000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e800500100000000000000000000000000000000000000002000736f636b6574000000000000000000007c01bed7672f498b54ca999e1b00000000000000000000000000005800686173686c696d69740000000000000000000000000000000000000000016772657061703000000000000000000020000000f9c80000000000000000000000000000060000000500000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000031e1f8b58d6d712331911ba2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000b80000000000000000000000000000000000000000004800435400000300000000000000000000000000000000000000000000000000000000000000000000000000736e6d705f7472617000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00"/793], 0x300) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x8, 0x5, 0x64, 0x0, 0x4, 0x4880e, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000000, 0x0, @perf_config_ext={0xe5, 0x6}, 0x40c00, 0x3f, 0x0, 0x5, 0x9b0d, 0x8, 0xf505}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xd) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) 11:50:08 executing program 3: socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000180)={@dev, @dev}, &(0x7f0000000200)=0xc) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x5, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008}, 0x30008031) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x38) 11:50:08 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r4 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r5 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x2, 0xb2, &(0x7f0000000400)=""/178, 0x0, 0x0, [], 0x0, 0xe, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0xa}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xf, 0x0, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x78) 11:50:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 11:50:08 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa18, {r1}}, 0x10) 11:50:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) [ 717.591281][T18774] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 717.621725][T18774] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. 11:50:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 717.752346][T18774] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 717.805193][T18774] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. 11:50:08 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) [ 717.896819][T18790] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. 11:50:09 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:50:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 717.971205][T18774] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. 11:50:09 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) eventfd2(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) [ 718.148227][T18794] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem 11:50:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 718.217036][T18794] EXT4-fs (loop4): bad geometry: block count 1080 exceeds size of device (1 blocks) 11:50:09 executing program 4: socket$netlink(0x10, 0x3, 0x7) eventfd2(0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getpid() perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init() sendmsg$alg(0xffffffffffffffff, 0x0, 0x4) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r2, 0x1) recvmsg(r2, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x2c, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) sendto$l2tp(r2, &(0x7f00000003c0)="d8b738c83ef165439fff50a0241f2b6a4dbad8d8e4abf1bab3d96b76431aef52d26e99c4b94d8b25cb5a26ca74a068d479418e0236b4f86d0d2761823e13cb51f798ccb22332d6aea952940d6efc720c8e6a67e6e01252bd9592ea84ef0f63e53add4e6530b0b0d52169365394c22b634a5041f1f8f225eb064e3ec6ce1e15acefeb2c737289eb032d927caf468d1207b94f23a287b7d69d75b45b0e9ebc886e234215f486ef87aa8db31010d7c612766268ea45d442799b25f27620146d3e6eb2400655dbdabe4eca5b5cf7fe", 0xcd, 0x20000004, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) dup2(0xffffffffffffffff, r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) getpid() syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x4, 0xb, 0x4, 0x2, 0x9, {0x77359400}, {0x2, 0x8, 0x80, 0x8, 0x6, 0x86, "ba7066be"}, 0x0, 0xf, @offset=0x4, 0x9, 0x0, r1}) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="01100000666061dc9411da5e49daacf921e79b0c35ae40f6d062999b329f39df7c3028d4256769042905ecebb1599f86139a37b5f8a8c0482445919901f637b9e8e1acbeae19eaadfaf5403648456e37ba7dddf1eac23a5f7c026fd72eee27191988e2a89622d662b5c4be65636a976e5c858033", @ANYRES32], &(0x7f000095dffc)=0x2) 11:50:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x54}}, 0x0) 11:50:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 11:50:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000010501"], 0x1}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) splice(r1, 0x0, r2, 0x0, 0x80000000, 0x0) 11:50:10 executing program 5: syz_open_dev$loop(0x0, 0x400, 0x0) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f0000000000), 0x8, 0x0, 0x10000000) r0 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) flock(0xffffffffffffffff, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x0) pwritev(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000440)='syz0\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') lseek(r2, 0xf989, 0x0) getdents64(r2, 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000400)=0x1) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000300)={0x0, 0x9}) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) dup3(0xffffffffffffffff, r4, 0x80000) syz_open_procfs(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES16=r5, @ANYBLOB="2d09206d78e22eab95df07a0cc87f2ac9abd0132061456ab22766f18aecc4d798545"], 0x2}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r6 = socket$inet6(0xa, 0x2, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000), 0x4) socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x80003, 0xff) [ 718.942077][T17907] Bluetooth: hci0: sending frame failed (-49) 11:50:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x2}}, 0x10) 11:50:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:50:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) r1 = syz_open_procfs(0x0, 0x0) writev(r1, &(0x7f0000000080), 0x5b) getpid() r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r4 = dup(r3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r5, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r6 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r6, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000000)=r6) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x10000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 11:50:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x4}}, 0x10) [ 719.420268][T18851] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. 11:50:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x6}}, 0x10) 11:50:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x401, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000100)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000140)={0x1, 0x6, 0x8000, 0xe49, '\x00', 0x3}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r3, 0x0, 0x7}, 0xc) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any='access=any'}]}}) [ 719.654632][T18851] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 719.743751][T18851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 719.870739][T18851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 11:50:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x40}, &(0x7f00000002c0)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet(r0, &(0x7f0000007a40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000c00)="b3", 0x1}], 0x1, 0x0, 0x0, 0x80b50000}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000007c0)="d6", 0x1}, {&(0x7f00000000c0)="edc01105eb1e995917ee69f56dcb57e2c2ad3cd9704ff2eabcb6ed2469b7db9acccf5794b73e40af8968ae76dafb346620010b1c96d648e7016c4766dcbf27bbcdb54688cb3c12ca09454428f78353484ecca09a3b03d7b62b5a4145ca9b8a7c506f5981a91d2527e60521b9d04e2ed1d4222d8c7b00aa", 0x77}], 0x2}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000a80)='V', 0x1}, {&(0x7f0000000ac0)='C', 0x1}, {&(0x7f0000001c00)="16", 0x1}, {&(0x7f0000000b40)="d6", 0x1}, {&(0x7f0000001cc0)="e4", 0x1}, {&(0x7f0000001d80)="9b", 0x1}, {&(0x7f0000001e80)="c5", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f00000021c0)='Q', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002340)="1a", 0x1}, {&(0x7f0000002380)='k', 0x1}, {&(0x7f0000002440)="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", 0xbc1}, {&(0x7f0000000480)="80bb9e6861a4da38cd2b700cb121db64646b75d3b39aef5c66dad5e25613ed0f0948c837a36731f7706b73d3da08ed34e46cbce8c31e3434df562caaf1e727a916e6f7ef1a15df89cde0f93b7a4e914043de11d117fb77cd04e5f719ba7c1a3c6602c295ee9beace7cd11417688c4d50bd91f400f154529ac966e0a1d7b10ff098d01b61b42e0713c8e8581de357ed3b6e232f94cb62070d07e086564d1106605888415786df1dfe38e0c7983098a5ad01007a579414f26db26107eb3b0374aa2a3d07ddc9cc", 0xc6}, {&(0x7f0000000180)="762ede34691e302a14fc8068540f99ac2cc55d7ae3c59b42daa5c212032584a5c7f69968fc1d938f88aa532e56bd3410afe8d412512b7d6fddb07f41c0d838183f3edfa7bb177ecb2d9787a6a903e8bf6e7751bd91f8266a0533373b4179e589a99fa87e83b6bd877e4f2e7a9f643601197d235e7015e6b6f435df1f3e57013b1efd3f33fa7534f73651e47ab66b76360ea53719b5b93513f8274b616e0013405a9c633caa9424c65e5886a02c582db4e92447a1370ac06c099742d358f58d143b3f486db75a4eb6d6e331b3", 0xcc}, {&(0x7f0000003500)="dd", 0x1}, {&(0x7f0000000000)="c173cf00"/14, 0xe}, {&(0x7f0000003640)='\x00', 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000005e00)=[{&(0x7f00000037c0)='U', 0x1}], 0x1}}], 0x6, 0x6041054) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000300)=0xfffffff7) [ 720.125065][T18877] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. 11:50:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) [ 720.232696][T18851] infiniband syz2: set active [ 720.255555][T18877] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 720.318315][T18877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 720.330084][T18877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 11:50:11 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x10280, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400c3575f0aa48975ff0228dc68082f0000430008000000170e0000000000000000100006800c000500ff0f0000c74de19bb2eaaf35411910b6b7000000000c00080401000100000000000c0006800800"], 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x20000004) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={r2, 0x77, "f51f235c9420eeaa36eeef867325f67881dcfa9c158e14e925fd9c211c5e0da99d8526b2061ee7b2840cedbe652e31d2bd209760df309b3f47ad997e806d50f6a5162a4141cd88f16baa097c0bed225568b3020d86838fbfe3a6061f1478c544c93b96f0d1c25fc0d77dcedacb2eb30beffcd33aef3a15"}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="1ba000001b001d0d89fdc5cbdd045798707bed4dca14a7960f0f8ec8da78031c7660b08f515e", 0xff3b, 0x0, 0x0, 0x147) [ 720.435988][T18877] infiniband syz2: set active [ 720.445157][ T9817] netdevsim0 speed is unknown, defaulting to 1000 [ 720.457582][T10840] netdevsim0 speed is unknown, defaulting to 1000 [ 720.621779][T18891] netlink: 25583 bytes leftover after parsing attributes in process `syz-executor.4'. [ 720.679484][T18893] netlink: 25583 bytes leftover after parsing attributes in process `syz-executor.4'. [ 721.025278][ T2996] Bluetooth: hci0: command 0x1003 tx timeout [ 721.032728][T17907] Bluetooth: hci0: sending frame failed (-49) [ 723.100522][ T9816] Bluetooth: hci0: command 0x1001 tx timeout [ 723.107753][T17907] Bluetooth: hci0: sending frame failed (-49) [ 725.180571][ T2996] Bluetooth: hci0: command 0x1009 tx timeout 11:50:20 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x8}}, 0x10) 11:50:20 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) r1 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00009d2150af7d555f0451c60976"], 0xfdef) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x50, 0xc, 0x4, 0x10000, 0x5, {0x77359400}, {0x4, 0x2, 0xff, 0xc9, 0x8, 0x54, "24081af5"}, 0x8000, 0x1, @planes=&(0x7f0000000040)={0x3ff, 0x4, @mem_offset=0x3, 0x1}, 0x9, 0x0, r1}) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x200, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x2, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x200080, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x8200, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r8, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r9 = openat$cgroup_ro(r8, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x202, 0x0) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000002c0)={0x0, 0x7, [{r3, 0x0, 0x1000, 0x1000000000000}, {r4, 0x0, 0xfffffffffffff000, 0xfffffffffffff000}, {r5, 0x0, 0x1000000000000, 0x4000}, {r6, 0x0, 0x0, 0xfffffffffffff000}, {r7, 0x0, 0xfffffffff0000000, 0x4000}, {r9, 0x0, 0x1000, 0xfffff000}, {r10, 0x0, 0x10000, 0x4000}]}) r11 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) dup2(r12, r11) 11:50:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 11:50:20 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) mq_unlink(&(0x7f00000000c0)='/dev/sequencer\x00') write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r3) 11:50:20 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x4ff0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xb5, 0x81, 0x81, 0xfe, 0x0, 0x100000001, 0x4068, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000300)}, 0x4800, 0x7f, 0x5, 0x8, 0xfffffffffffffff8, 0xffffffff, 0x3}, r2, 0xa, r0, 0x1) connect$rxrpc(r1, &(0x7f0000000400)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24) sendmmsg(r1, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="195dae6f05002d2099141811b60472dd52570c9afa83fe5ca0abd3ee628f17bc69"], 0x18}}], 0x1, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000003e80), 0x1, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x4800, 0x1000, 0x8}, 0x20) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg(r6, &(0x7f0000003e80), 0x400000000000173, 0x1) r7 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "9687c55709825c6c99559494278800"}) r8 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$inet_sctp(r8, &(0x7f0000001a40)={&(0x7f00000001c0)=@in={0x2, 0x4e23, @local}, 0x10, 0x0}, 0x2e749e73384943a3) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205649, &(0x7f00000001c0)={0x980000, 0x1, 0x0, r8, 0x0, &(0x7f0000000180)={0x990a68, 0x0, [], @value64=0x1}}) ioctl$BLKRAGET(r9, 0x1263, &(0x7f0000000200)) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x40, 0x0) pwrite64(r10, &(0x7f0000000580)="c157529050f8510c82239517f1f4ff5af368b0c8aeda1161159ab19d9d45695048cda6ce974da81e63bce6558651d1d3ce617e0817de19f7e4260981719f7b2caefc2ea9545619cba4e7caeb86b03ab6a0c5405398a99eb08746933da8e651602a6f52a4a55b65008086ff6edd969c8b2b483c2922b588f0927b809822363d43c8ff3604d042b3b8f2ff277d1cbd47f7ac8e3b1f4181b4569295ce505c867b6aae4bd0aba5cdb5f233d96e2d7ba7a35793147aa4c08c5ee03e0da44716471691a9fb96ab032af8752c05d9e2ecfb4133e3d97171b179c3506caa80", 0xdb, 0xff) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r11 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) dup2(r11, 0xffffffffffffffff) socket$inet(0x2, 0x4000000805, 0x0) r12 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x0, @remote}], 0x20) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r12, &(0x7f00003cef9f)='7', 0x1, 0x40, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="02001f00", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7a, &(0x7f000059aff8)={r13}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000480)={r13, 0xca}, 0x8) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000080)=0x2) 11:50:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) [ 729.315651][T18908] [U]  11:50:20 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ptrace$setregs(0xd, r5, 0x7, 0x0) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random}, 0x14) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0xfe46) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010800009200000000000000000099c10ca4", @ANYRES32=r6, @ANYBLOB="d300050000000000acf7920d5180ac0c0c000762f12a393988814400140014006d6163767461703000000000000000009c59e547257266eb57f1160ea1bf47e2d746c416ae09081a66faa1f1b36011669092e37038"], 0x3}}, 0x0) 11:50:20 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0xc}}, 0x10) [ 729.406316][T18913] [U]  [ 729.422076][T13855] Bluetooth: hci0: Frame reassembly failed (-84) 11:50:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x905, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000040)) 11:50:20 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x12}}, 0x10) 11:50:20 executing program 5: r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) memfd_create(&(0x7f0000000a80)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x10\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{\xdc\x9cg]J4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\x8eZ3I\xf5\xc8efk\x9d\xc4\xc9\x90\xc2`\xc2\xf5r5>kv8\xdc\x00u\xafWV\xa4\x19=6\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9\x00\x00\x00\x00\x00\x00\x00\x00R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) geteuid() accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) shmget(0x2, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ptrace$getenv(0x4201, r2, 0xba, 0x0) r3 = socket(0x34, 0x3, 0x6) connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @any, 0x8}, 0xa) bind$inet6(r3, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}}}, &(0x7f0000000540)=0xff1f) r4 = socket(0xa, 0x802, 0x0) getsockopt$inet6_mtu(r4, 0x29, 0x12, 0x0, &(0x7f00000006c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000000c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f00000000c0)='./file0\x00') r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r8, &(0x7f0000000180)='./file0\x00', r7, &(0x7f0000000640)='./file0\x00', 0x0) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000180)='./file0\x00', r9, &(0x7f0000000640)='./file0/file0\x00', 0x0) 11:50:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000840) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000480)='x', 0x1, 0xfffffffffffffffe) r1 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="effd00001101ab1a0b640077708c8fc0388de9416a"], 0xfdef) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x24200, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f00000006c0)={0x6, 0x1}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="04002dbd7000fddbdf250900000011000700bfe23cfed93cc7051df3ab6d610000000a0006005ca110c49c83000004000b0054005080ec0009000200000009000100c3f72068a5000000110f010013463050699c5d7163fac620a0000000200008800400020004000100040002000400020004000200040001000400020005000200030000007689bc33ebdc0cf1a8450d4c29807abb9f49e70b3d4290a435eafc19e12d06fac5b7fe85cd052c90aa3ea31e809afe167faa2691ca94a665008857b73eb70827218e0445b012fcc58bbc01f773683603396b06b006ef18487a41b92cb0c0c4bb502cdbdf5bbbba66b1e26fb9aab7f7778784c503ccfb68c8c7633071a5b4eeb198a67c20d8e57cf31a02e260b012d12550cc890d9ee325d50ffa6f92bd8cb764128ace25e86be14baa6ac09461a6299fe9c816a57c21b24fc3782123abc59f3f0eeb550d9349c4d95bb638b968e8c3b1baf8c20156f29601e915d9ad37cb09754662a982edfa17f5b5000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x24}, 0x20040080) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r4, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000740)) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000280)="f1", 0x1, r5) r6 = add_key(&(0x7f00000005c0)='id_legacy\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)="d84b919116932c6debe640ff28bf2133c434c2d265ef728cd3f535b5573a337fcee23401cab017caff9144b4632539355381e833d12f2a0cc008923cb8262f0b62506d270d5a52a3b4db6ffcfca4c0d37e9da1582f53ae23c5409324dea96d6e9c978e36e0e2089450", 0x69, r5) r7 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000004c0)="0ff03fe989178d5f6df12a00e71c1515759515918c9d6c71ab6f3c452e4ecd8a1baeff7c80ba01ad265ae46673d856ec62c90c9c1e9fb49c0e71ce20d3257c282cc1c0e99af407dbe408824fb11e474fa6c58708c17c716f6aaec21ec63070c25ac630c2ef5d26ef35e9d85af3f2e115506e8a0dd63f9465a6691a0664ff0b6349e34814b60a4fcf09ff85f508ffe1da12774e2263c776fa6d6c02214c1a7d52df20eeeb4b5c6cce4bb4b240ad775c082af9388e30b4646e2a78a92aa63e560a41c95f5f57f41030dc3cdcff1d50c96bfba6e93d332ab361c4b14923376ba98cf7829cfea2b3f9db908738d847c7f8027d214e5f34", 0xf5, r6) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r7, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'md4-generic\x00'}}) 11:50:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:50:21 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x18}}, 0x10) [ 730.122347][T18943] encrypted_key: insufficient parameters specified [ 731.510509][ T9817] Bluetooth: hci0: command 0x1003 tx timeout [ 731.518358][T17907] Bluetooth: hci0: sending frame failed (-49) [ 733.580567][T10840] Bluetooth: hci0: command 0x1001 tx timeout [ 733.588054][T17907] Bluetooth: hci0: sending frame failed (-49) [ 735.660584][ T9817] Bluetooth: hci0: command 0x1009 tx timeout 11:50:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 11:50:30 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x600}}, 0x10) 11:50:30 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000d40)={0xffffffffffffffff}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) fstat(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_client='access=client'}, {@access_uid={'access', 0x3d, r4}}]}}) 11:50:30 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3}}, 0x10) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r5, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x2, 0x3c}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000200)={r6, @in={{0x2, 0x4e24, @local}}}, &(0x7f00000002c0)=0x84) accept4$inet(r4, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r3, r4}}, 0x18) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x4080000, 0x200000002}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 11:50:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:50:30 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @null, @null]}, 0x48) listen(r1, 0x0) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x40, 0x2a9, 0x0, 0x5, 0x38, 0x0, 0x903a, 0x81, 0x101}, [{0x60000000, 0x3, 0x0, 0x0, 0x0, 0x100000001}], "", [[]]}, 0x178) r3 = socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) dup3(r3, r0, 0x0) r5 = msgget$private(0x0, 0xf0) msgrcv(r5, &(0x7f00000000c0)={0x0, ""/187}, 0xc3, 0x1, 0x2000) getuid() shmget(0x2, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) [ 739.550105][T18975] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. [ 739.562295][T18975] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. [ 739.676010][T18972] IPVS: ftp: loaded support on port[0] = 21 [ 739.754499][T18972] netdevsim0 speed is unknown, defaulting to 1000 11:50:31 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0xc00}}, 0x10) 11:50:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) [ 740.287015][T18986] IPVS: ftp: loaded support on port[0] = 21 [ 740.308575][T18986] netdevsim0 speed is unknown, defaulting to 1000 [ 740.310593][T18975] netlink: 50899 bytes leftover after parsing attributes in process `syz-executor.3'. 11:50:31 executing program 5: capset(&(0x7f0000000800)={0x20080522}, &(0x7f0000000840)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_procfs(r0, &(0x7f0000000040)='sched\x00') [ 740.415080][T18998] netlink: 50899 bytes leftover after parsing attributes in process `syz-executor.3'. 11:50:31 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x3, @remote}}, 0x1e) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000400)={0x9b0000, 0xffff0a67, 0x34fa, r1, 0x0, &(0x7f00000003c0)={0x9a091d, 0x53b75cc5, [], @string=&(0x7f0000000300)=0x2}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x1000000000, 0x8, 0x8000, 0x1, 0x3, 0x8000000000000, 0x5, 0xf54a, 0x6, 0xff, 0x2, 0x9, 0x100000000, 0x400, 0x4, 0x10001], 0x100000, 0x40000}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x23c040, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r5, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$SOUND_MIXER_READ_STEREODEVS(r5, 0x80044dfb, &(0x7f0000000280)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000ffff00009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02008b5e5a076d31e33dd29c034055b67dafe6c8dc3d5d78c07f34e4d5b318e2ec0efd49897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a2d7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ed0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a17e3c184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd31a08b32808b8020000000000d27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117ae589ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c9727808700146000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r8, &(0x7f0000000540)={0x10, 0xfffffffffffffffe, 0x7}, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000024001705d21b80788c63940d0424fc60100011400a2f0000051982c1375b3e37096b088000f01700d1bd", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f088471fffffff0000400a638877fbac141426e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) r9 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r9, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) openat$cgroup_procs(r9, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) [ 740.580749][T13855] tipc: TX() has been purged, node left! 11:50:31 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x1200}}, 0x10) 11:50:31 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7505, 0x145800) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000040)=0x4000) r1 = socket$netlink(0x10, 0x3, 0x15) r2 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r4 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r5 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r6 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r7 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r8 = socket$netlink(0x10, 0x3, 0x15) r9 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r9, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) sendto$inet6(r9, &(0x7f00000001c0)="ba132b25b2e785223ea5af8125aff9896969483035439ae73a0c237b75f703debfb3c28c951c0e92000eed3e33ca77127226796b6f92284fd4ca2485a384d6099d868f737fca7fc762b868e3103c526608c21c4261eb278c3d11665ec3258f4599ee99ea9b434ff98ffe66af1e62", 0x6e, 0x4001, &(0x7f0000000240)={0xa, 0x4e22, 0x9, @rand_addr="2f73074375a741d049cfd39a938176cd", 0xffffffff}, 0x1c) write$binfmt_misc(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r10 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) write$binfmt_misc(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d", @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYBLOB="2b2e5cf01e9eeb25b4941c7ed705f40c5d3eb1112bcc04a719b33365ee8e98979bf0d04fb8778230d40e6f21b0294dbbf561f12fe2a99bb20ad68e8863003f700fa2a8b1014661be2c71840062db29dd4326df4edbf8bcfcb396ce942191c9f94c5037846ca8e79c788b94963cdc96436dd823cade5bd1b4e67aa5df1a04532de8aa45603d7d2cf26162f5b39372dadd90ec3b8a70dbe0c0c57fb98552ececa8343f7af4027e3b009f2686bc8a45b8d6f23ba9db6d4d354ed61be311dcec3e3c89334fcad0a897eb0d2df13e4e0fc3ceedeb48cdbadc5072908541308c5b0d60b62ddc5e8996ca7cd3ca8cd854a8dd2cc87151ebdf", @ANYBLOB="cf392d6ce9275435e89b6bab3a1b69e6eaae0dadda7ffa5d1256f093ca51d1e806db155d768ae19197dad68b9e89bf5c9847c2", @ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRESHEX=r2, @ANYBLOB="dc1358d8e4a7dd324130a382e72b2806df0679b99b443bc3881068e295b3c948a1f0491f2af4d47a6cb99435b3accd26e0e76d5049a85500b47f2119331af099ac491bc41be9037e5ec026a26a8c18394c12825aa3c9890873928d94aac3f34920bd0fbf29df722c72c6fa406ad704df1c838e0af1095a7c0252b3e124b62ae84184d04529556fa450", @ANYRESDEC=0x0, @ANYRES16=r3, @ANYRESOCT=r0, @ANYRESDEC, @ANYRES16=r4, @ANYRES32=r5], @ANYRESOCT, @ANYBLOB="ec54fdaa8570a1d44b4a7f318848d60b9860acf41b7b13e98b47a200670074ad1659fd6f45bde5052791", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESDEC=0x0, @ANYPTR64, @ANYPTR64, @ANYBLOB="3ba7ae9352677d09bee015024eeee0ad7bd01e7701084d000765a914a9edcd9e69de47fcda0487667a08100921ca0c411d4e19f7db0899c22d6ed6d87674f024742b2117c1c1798549354e4b86fd503596a124332b191ca247d743910fa0c4388848a45cdffa3db084456ff2e6d947711133aca8be1984876a9d424672ae884ec35d2115f73168084f1a51ae5130e63182170227552d7d7570ccf3931f93d8e695838a7fab07a4afe4711bfe63c4193744f752fa6be491206d1be765081ba749dd773e55e40fceb566d21d245146c491", @ANYRESDEC, @ANYPTR, @ANYRES16=r0], @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRESOCT=r6, @ANYRES32=r0, @ANYRES64=0x0, @ANYPTR64, @ANYRES16=r7, @ANYPTR64, @ANYRESDEC=r8, @ANYPTR, @ANYRESOCT, @ANYRES64], @ANYRES64=r10, @ANYBLOB="b63fa638c8bb17de85e24666b676bed1d54c969f29c0e2001c5fe4475c1c9e43ec32ed70bf739ef49372b8f347b879cc53232313f36ef402adf3f1878f3a352d3275490c8a78905251a83e596726ebeac97103fd3f871759df2d5c1ae920881d54b5edcbaf9696aba8b85ed454d3dd9353b6a641f677326fcd6571909fb708dd4d3408b78f4d6c5d5f26d9c23894414600950e3ddc415760156e3248776b98019fc9"], @ANYRESDEC=r2, @ANYRESDEC=r8], 0x40) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000000e06030000000000000000000a00fffe05000100070000000002797a3000000000fcff0100070000000500000100070000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40c4}, 0x34a2c62695c34cde) [ 740.881488][T19015] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 740.967559][T19015] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 741.001379][T19015] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 741.047344][T19015] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 741.105402][T19018] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 741.135271][T19015] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 741.660675][ T9817] Bluetooth: hci0: command 0x1003 tx timeout [ 741.666929][T17907] Bluetooth: hci0: sending frame failed (-49) [ 743.740511][ T9817] Bluetooth: hci0: command 0x1001 tx timeout [ 743.748692][T17907] Bluetooth: hci0: sending frame failed (-49) [ 745.820632][ T9817] Bluetooth: hci0: command 0x1009 tx timeout 11:50:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, 0x0) 11:50:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:50:40 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_kd=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000000580), 0xefee) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r1) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x2, {0x7, 0x1b, 0x0, 0x154d5493}}, 0x50) 11:50:40 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x1800}}, 0x10) 11:50:40 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0xc29, &(0x7f0000000080)={0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = io_uring_setup(0xc29, &(0x7f0000000080)={0x0, 0x0, 0x3}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000300", @ANYRES32=0x0, @ANYBLOB="08e10200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB="10000000000000002000000000000000"], 0x64, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)) socket(0x10, 0x2, 0x0) dup2(r0, r1) 11:50:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180)=r1, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@remote, @in=@dev}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) lstat(0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) socket$caif_stream(0x25, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000940)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r7, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) getsockopt$rose(r7, 0x104, 0x3, &(0x7f0000000100), &(0x7f00000001c0)=0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x1c0}]) [ 749.751826][T19031] fuse: Unknown parameter 'group_kd' [ 749.823514][T19045] fuse: Unknown parameter 'group_kd' 11:50:41 executing program 5: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'veth1_macvtap\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff0f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) [ 749.872625][ T9815] Bluetooth: hci0: Frame reassembly failed (-84) [ 749.896827][T19049] FAT-fs (loop4): bogus number of reserved sectors [ 749.910720][T19049] FAT-fs (loop4): Can't find a valid FAT filesystem [ 750.059077][T19062] __nla_validate_parse: 6 callbacks suppressed [ 750.059090][T19062] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. 11:50:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/hwrng\x00', 0x520081, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000600)={r5, @in6={{0xa, 0x4e21, 0x3ff, @remote, 0x5}}, 0xfffffff4, 0x4, 0x7, 0x1f, 0x6, 0x7, 0xfb}, &(0x7f00000006c0)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000700)={r6, @in={{0x2, 0x4e20, @broadcast}}, 0x7b8, 0x671}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}]}, 0x3c}}, 0x0) [ 750.202140][T19066] device batadv0 entered promiscuous mode [ 750.231873][T19041] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. [ 750.272331][T19067] Dev loop4: unable to read RDB block 1 [ 750.278549][T19066] device macvtap1 entered promiscuous mode [ 750.296624][T19067] loop4: unable to read partition table 11:50:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) [ 750.322887][T19067] loop4: partition table beyond EOD, truncated [ 750.336380][T19067] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 750.345470][T19066] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 750.406067][T19066] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 750.488069][T19076] device macvtap2 entered promiscuous mode 11:50:41 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x3f00}}, 0x10) [ 750.559433][T19076] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 750.590746][T19067] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. 11:50:41 executing program 5: add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000300)='4', 0x1, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, 0x0) creat(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000100)=0x17, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/46, 0x15092e2a1832a052) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) read(r1, &(0x7f0000000140)=""/135, 0x87) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xfffffffe}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x10}, 0x8}}, {{0xa, 0x4e21, 0x0, @ipv4={[], [], @broadcast}}}}, 0x108) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(0x0) open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0) [ 750.697690][T19049] FAT-fs (loop4): bogus number of reserved sectors 11:50:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/hwrng\x00', 0x520081, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000600)={r5, @in6={{0xa, 0x4e21, 0x3ff, @remote, 0x5}}, 0xfffffff4, 0x4, 0x7, 0x1f, 0x6, 0x7, 0xfb}, &(0x7f00000006c0)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000700)={r6, @in={{0x2, 0x4e20, @broadcast}}, 0x7b8, 0x671}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}]}, 0x3c}}, 0x0) [ 750.763737][T19049] FAT-fs (loop4): Can't find a valid FAT filesystem [ 750.976929][T19100] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 751.902634][ T9803] Bluetooth: hci0: command 0x1003 tx timeout [ 751.910009][T17907] Bluetooth: hci0: sending frame failed (-49) [ 753.980677][T10841] Bluetooth: hci0: command 0x1001 tx timeout [ 753.987520][T17907] Bluetooth: hci0: sending frame failed (-49) [ 756.060598][T10841] Bluetooth: hci0: command 0x1009 tx timeout 11:50:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, 0x0) 11:50:51 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x1000000}}, 0x10) 11:50:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400012) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = gettid() r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000040)=@ipx={0x4, 0x1, 0x101, "2b04ec665b4b", 0xff}, 0x80, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x7, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r6, 0xb) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) r7 = openat$cgroup(r6, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r7, 0xa9bff5772b9e2466, 0x0, 0x4, 0x0}, 0xfffffe14) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x57) socket$kcm(0xa, 0x6, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000240)) sendmsg(r4, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=r3, 0xfffffffffffffec6) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x23, 0x16, &(0x7f0000000200)="dab7655af780f6dd2dd38c7f2848ba7e2f182b349ca6fa76a8921aed6c98c7806280b0", &(0x7f0000000240)=""/22, 0x2, 0x0, 0x95, 0x8b, &(0x7f00000002c0)="c796e54990825cd5827330223fd2a4714c0a01cc294d4c0df4ab4961230462093d0fd5d6fc0d555ada36d3a5123b057f76378740b3a8a8161e46d6841581e001bec0f45baf423101cee8ef1dcdd65a8c45ccb11f51c3331dfcd74a785c2b905293e6410d00392c1ee4736de7dcd9048f2f449c7ce7f89937a67b9c250e0a668b8b7a0325eb3f3d804a4a334fec96f88500810ae818", &(0x7f00000003c0)="da9325d2b248c00bb44445e87018e97ba8df06a7e4838d008fea53681452f21c4cf7cbece2d4f038e93f67db3616ae6510efb236a21e7e94d40869b74e648adfa94bd398b982e56d242f36b5280bf9e1d5aaf805c3437de6f0ac3c64862bb0e706f0bc2019858a6f47f4b5e823b770501bc948f4a9bb49b750cd9a92154f099a063c55e083182a22ab9764"}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, 0x0, 0x9, 0x9c, &(0x7f0000000580)="a6c9157cced850156b", &(0x7f0000001700)="6aa93d208d67bc734dce75854727883cac958a7d556aae64087a306e60490859b3c8f71d36727995b0a5a340affef72c334adaec120563d610157d7a110b67c4de3ab98224cc7f7e7f25d72a20d3cc8330681741d13103b43947a6bcdc68f212808144c1199784e49980dabad6df98bdb13bdb6aba4469b60ba2c16bd62fc4146277907cb9cf49bb09f8f26a08e172c89a8c9ebce43e576ab0b54716"}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r10 = gettid() perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x20a04, 0x40, 0x8, 0x8, 0xff, 0x3, 0x80}, r10, 0x40000002, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, r10, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r13 = socket$kcm(0x2, 0x4, 0x0) setsockopt$sock_attach_bpf(r13, 0x1, 0x3e, &(0x7f00000002c0)=r12, 0x28e) openat$cgroup_ro(r12, &(0x7f00000006c0)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000500)={r5}) 11:50:51 executing program 3: syz_open_dev$usbmon(0x0, 0x0, 0x48000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xff, 0x2200) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) io_submit(0x0, 0x0, &(0x7f0000000600)) io_submit(0x0, 0x0, &(0x7f0000000600)) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0) 11:50:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000840)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2f42f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000240)={0xfffffffa, "156b6cd8893e950b24b0f49d551abe38bffae7d8d2fdd6834b7f2603333c3a04", 0x5, 0x20, 0x1f, 0x827, 0x0, 0x2, 0x7, 0x7fffffff}) r6 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r6, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_GET_NR_MMU_PAGES(r6, 0xae45, 0x2) r7 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r7, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$VIDIOC_QUERYBUF(r7, 0xc0585609, &(0x7f0000000140)={0x240, 0x4, 0x4, 0x200000, 0x3, {0x0, 0x7530}, {0x4, 0x0, 0x20, 0x3, 0x3, 0x7, "aa56d024"}, 0x34815555, 0x4, @userptr=0x1, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0xa) 11:50:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r6, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r6, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r8, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) [ 760.109814][T13855] Bluetooth: hci0: Frame reassembly failed (-84) 11:50:51 executing program 3: perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x80000000, 0x2000) pread64(r1, &(0x7f0000000040)=""/154, 0x9a, 0x6) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x16}}}}, 0x48) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x218100) ioctl$SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0) [ 760.186167][T19131] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. [ 760.371943][T19131] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 11:50:51 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x2000000}}, 0x10) [ 760.569121][T19135] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 11:50:51 executing program 3: mkdir(&(0x7f0000000740)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=', @ANYRES16]) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75907065728c1fa9702e2f6275732c6c6f7765726469723d2e2f6628db5ae8885948a865315c00"]) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000040)={0x64}) [ 760.632551][T19135] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 11:50:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r6, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r6, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r8, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:50:51 executing program 4: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r1, &(0x7f0000000080), 0x10c2) r2 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r2, &(0x7f0000000080), 0x10c2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="4500030000000000af4c9f76030000000005007400000000000000280000000000d4e34ba67f6ebb028ca7afe0009a9fe97e451a22dec4c83108206691fb94c9f8933881ff43ba0c2b77d8689288e04d070051b7780c50a90d78c71bda27c729dd5e448ad12a1ebb51a42093eb3d7f7746e8eefa7eae21bf460be085c86d383a06a08a69dfe58719f20b858e0261cd4ea312ba66db4ce4943cd34a60d47ea071bed057e0b14c8287b2e951c55be27f86259f15a2ccd327ef128240eb689162949f0e102d00000000010000cc89f96b015827dc46c796b1fea49f43bbcb124e302da39ffb6bc66b4393f19dda517d616b07cd24b1be985e5041ab7e256e2294e9aca2279ab5a706b091e519e084d604b1194133d0ab255e879e4f1e4bcf40e4aa91fa679145155ac5974bfe84c17d231ace2d35b5d0a1e06dcdc65020d6df5043525305681a32b6f8ceca6427ddbfdcf430a5c6d6850f5d452885828b7b45c0e8fee4210a3488238ae82eaba75926a82550642b3db488c92c048684b1a440985cddebae7f43ed8c11cd091409a9dd6b7ade273792ef1271c048dc6d3580ea7af940cf9931e6b1d28570ccee2aa6833f755cdf35f76bbc488c7efee69e795a1f1fc4e56a0abb501421eb4662ee7cc30667eb109160deb8a957541324363aca5e97cc97899738914fe39bdf1eb344b23309a63b86d4fbfbff99fa39804d57cbfb5ab9a034f10c5c56afd4db156a715560f9084d71c41c389f0b00a2ea2d5e6aa4af6e3c499f320cddb54c369d8667e3525b0a50255681174864d87d2033aaba4afeae49fe4f6280727f6561f38a35bfabd52c2c89b238d4fdde47d9dc229498c1a0c1d7592ad273c5b5519ba391a411bee2754af5c325e0892224399700a09a22385e01f21a57d38220e0b5085f399c2de5c6fdec59d71c330376a24b22e184067eee759d5f967fd56abb25280f281cdb92f8563ae45279539c759c1e84a2e5a8fc861a56839c91686ded76264e117abbf5cd8739bcea88223d8f401851236fa85662e50d71e5790076cc0187d315a317c21d44fe89a144b781d2c170ade4da3b726bb4545f5b13321cfe21b8dacc8f815c632753d639bfc3b3d0b91f6fcac0037b9cead377282aa1c3a0b1c321ca40b93ded76f5c66d0151dfd9c99d0601312f09bae9349066d868a462c842aadc6b1feae54ac7da70d4d5af016e12b26b6574a5836c17bab7920120c54ef83d"], 0x1c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10) 11:50:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x3e9, 0x200, 0x70bd25, 0x25dfdbfe, {0x2, 0x1, 0x2, r3, 0x845a, 0x9fb, 0xfffff000, 0x0, 0x6}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004840}, 0x44) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r6, r5, 0x0, 0x100000001) [ 760.898664][T19155] overlayfs: unrecognized mount option "uperŒ©p./bus" or missing value [ 760.972566][T19152] overlayfs: failed to resolve 'ÿÿ': -2 [ 761.021805][T19152] overlayfs: failed to resolve 'ÿÿ': -2 [ 761.028495][T19160] overlayfs: unrecognized mount option "uperŒ©p./bus" or missing value [ 761.067022][T19162] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 761.371785][ T27] audit: type=1804 audit(1583322652.440:9485): pid=19162 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir695721566/syzkaller.EIQNmt/284/cgroup.controllers" dev="sda1" ino=16768 res=1 [ 761.928666][ T27] audit: type=1804 audit(1583322653.000:9486): pid=19168 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir695721566/syzkaller.EIQNmt/284/cgroup.controllers" dev="sda1" ino=16768 res=1 [ 762.150538][T10841] Bluetooth: hci0: command 0x1003 tx timeout [ 762.158071][T17907] Bluetooth: hci0: sending frame failed (-49) [ 764.220601][ T9817] Bluetooth: hci0: command 0x1001 tx timeout [ 764.227739][T17907] Bluetooth: hci0: sending frame failed (-49) [ 766.300526][T10841] Bluetooth: hci0: command 0x1009 tx timeout 11:51:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, 0x0) 11:51:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x4000000}}, 0x10) 11:51:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="726f6469b02a0e835e29efa30d14afe6c874d830722c00"]) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000100)={0x90, 0xfffffffffffffff5, 0x4, [{0x0, 0x1, 0x27, 0x8, 'ppp0&${(userposix_acl_access(-selfself^'}, {0x3, 0x3, 0x5, 0x9, 'rodir'}, {0x5, 0x7, 0x5, 0x4, 'vfat\x00'}]}, 0x90) 11:51:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2710}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x0, 0x0) exit(0x0) r2 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000300)=""/215) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/vlan1\x00') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f00000000c0)={0x8900000000000000, 0x100000, 0x3f, 0x5, 0x20}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) 11:51:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r6, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r6, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r8, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:51:01 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x80cca, &(0x7f00000002c0)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'upperdir'}}]}) [ 770.259540][T19182] FAT-fs (loop3): Unrecognized mount option "rodi°*ƒ^)ï£ ¯æÈtØ0r" or missing value [ 770.343157][T19182] FAT-fs (loop3): Unrecognized mount option "rodi°*ƒ^)ï£ ¯æÈtØ0r" or missing value 11:51:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x6000000}}, 0x10) 11:51:01 executing program 5: r0 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930206000000a84308910000000400080008001e0000dc13382d0005009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x4005) 11:51:01 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write$P9_RREAD(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='r'], 0x1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4800) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000200)='/dev/cachefiles\x00') fallocate(r1, 0x0, 0x40000, 0x4) fallocate(r0, 0x0, 0x0, 0x10fffe) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) fdatasync(r1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0x0, 0x8, 0x10}) 11:51:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a80)=[{0x590, 0x29, 0x4, "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"}], 0x590}}], 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'ipvlan0\x00', {}, 0x4}) 11:51:02 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x8000000}}, 0x10) 11:51:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0)="800000003804000019000300e60100006c000000000000000000004d0d000000004000000040014f37be5a0000ffff53ef000000f670540f6a513304a42e3ac9d6735ea8df158dd0a127c52df3195184c60bf8bc7ce3ef8b56860b59c123d479b9844c71d01a8bacba9d685bb2", 0x6d, 0x87ffc}], 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "ca827e26880aab88", "3d373b79ee15c094b34a5ca1ab09ceaf", "6a728e2e", "8f5bf6acce6d707f"}, 0x28) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x101600, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000500)=0x1, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000280)={[], 0x8, 0x4, 0xff, 0x0, 0x1, 0x2000, 0xf000, [], 0x5c05}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000100)=0xf0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000440)={'filter\x00', 0x68, "08a556d64c51bee2bf483fe027e0a31ce11df59bb561ae319a374316692aa978ebc8bbb018b2e291ccf4db0da6beba351859875e4423a9e5eadcc48b23bfd01809f80dfa7d8da1e07b79212b5712e9b3c6e6c2003a02084f9c53b00a91c14e94f0133e2237f6a88d"}, &(0x7f00000000c0)=0x8c) [ 771.185451][ T27] audit: type=1800 audit(1583322662.260:9487): pid=19211 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=16787 res=0 [ 771.314202][T19230] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 771.384981][T19230] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 772.380637][ T9803] Bluetooth: hci0: command 0x1003 tx timeout [ 772.388461][T17907] Bluetooth: hci0: sending frame failed (-49) [ 774.460870][T10841] Bluetooth: hci0: command 0x1001 tx timeout [ 774.469017][T17907] Bluetooth: hci0: sending frame failed (-49) [ 776.540657][ T9803] Bluetooth: hci0: command 0x1009 tx timeout 11:51:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0xfffffffffffff000}, 0x0) 11:51:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x401, 0x400000008d}, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x3]}, 0x8) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7400000086ca38afed743f9f9f44d6", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',access=any,\x00']) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x4) socket$can_bcm(0x1d, 0x2, 0x2) 11:51:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r6, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r6, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r8, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) write$P9_RREADLINK(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:51:11 executing program 5: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setreuid(0x0, r1) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x374) setuid(r3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) write$uinput_user_dev(r5, &(0x7f0000000d40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x81, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77d0c77e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x635, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 11:51:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0xc000000}}, 0x10) 11:51:11 executing program 0 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 11:51:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x12000000}}, 0x10) [ 780.770725][T19260] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 780.845037][T19260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 780.852769][T19260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 780.877162][T19260] infiniband syz2: set active [ 780.884513][ T9816] netdevsim0 speed is unknown, defaulting to 1000 11:51:12 executing program 3: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000000004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a3a, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xa0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) socket(0xb, 0x2, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000840)={'gre0\x00', @ifru_flags=0x1}) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) socket(0x10, 0x80002, 0x2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)="2e00000022008146e01f8002009d0edc2976d153b4", 0x15}, {&(0x7f0000000540)="edd00a5376a01eedd2352d7be58e47081f5e41fa65b110825fb37e976a6d5f68ec583a2520102d2c969a7796129399d6b52137534e4c4a8d96f8da0fa4598c64b88360972477c91afd8446958a9529c7fdec8ab88f7aa8cc55c72de27c713afa38556b3257e5c6c072a0a1aa157943ec5d8183643b6d400f7e0ff1dd2188d1898bce946306a89b3d0f73c3ce9ac8d78ef530c7c3da98b2151a13777d091a5440d4fbae24a6c1ca1f0352d53efd4a55195b940a7049f449fed56a10b6c91ad4761cfb91584d58d3a3b7d0223680dc727a0a40b5da", 0xd4}, {&(0x7f0000000640)="2880674de595dd8239a13fc7c7cad17fb56c25050e23d58b289be15ce0fafc3b25a4a4e2a75ba3b8acd588c51486631ea0546978ac2f7a44fea62c09b67e6b77ad5f21ce4a94c8c3f6e57f383ef405f48f739c66dbdeba21f89ebc5230055f9632e6193b338ebdf8491fa2d927b662837b7c281bf82a66a0e2cd70eaa5d2975312e0631dc13a5621da9ff646436640274611d2777d149b4c29cd2d30c6ef8d1bb7095e26920160963fcc750c48072b3c8f0d8fb0713dbbdecdfbfa2cd06694bd090e82fba1b742003fb183d86f33c85d70", 0xd1}, {&(0x7f0000000740)="470275dbf037716957ecc0eda0dd1e3bd09e5b11d994090a27132bba0d6a7d5e2df152e9b7e171502c527124ecb08143602cef5565a6af06a5ca1e3e8fd0aa032b3b889c4f756e7210d80c07db65fc8b660bd3459806a68fde", 0x59}], 0x4}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b0011002f004c00000020140e00090002009d0edc2976d153b4", 0x235}], 0x1}, 0x0) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r6 = socket(0x10, 0x80002, 0x7) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r7 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r8 = dup2(r7, r6) r9 = socket$rxrpc(0x21, 0x2, 0xa) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') bind$rxrpc(r9, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/ptmx\x00', 0x572ee3215d6e2cb4, 0x0) preadv(r7, &(0x7f0000000d00)=[{&(0x7f0000001080)=""/166}, {&(0x7f0000001140)=""/83}, {&(0x7f00000011c0)=""/167}], 0xa, 0xfffffffffd0b8c85) listen(r9, 0x9) r10 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r10, 0x0, 0x0, 0x1000f4) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000002c0)={r10}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) get_thread_area(&(0x7f0000000080)={0x9d5, 0x20000800, 0x4000, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1}) r11 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r11, &(0x7f0000f50f90), 0x0, 0x81003) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0, r11}, 0x68) r12 = inotify_init1(0x0) r13 = creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x169, 0x2) r14 = socket$inet6(0xa, 0x2, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r15, r16) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r16, 0x10e, 0x4, 0x0, 0x0) bind$inet6(r16, &(0x7f0000000800)={0xa, 0x4e1d, 0x0, @remote, 0x6}, 0x1c) setsockopt$inet6_int(r14, 0x29, 0x31, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r14, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r14, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) fallocate(r13, 0x0, 0x0, 0x1000f4) setsockopt$inet_group_source_req(r13, 0x0, 0x2b, &(0x7f0000000400)={0x80000000, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e21, @local}}}, 0x108) fcntl$setown(r12, 0x8, 0xffffffffffffffff) fcntl$getownex(r12, 0x10, &(0x7f0000000100)={0x0, 0x0}) r18 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r18, 0x401054d6, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r17, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) 11:51:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 11:51:12 executing program 4: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25={{0x3, @bcast}, [@rose, @netrom, @remote, @null, @null, @default, @rose, @default]}, &(0x7f0000000080)=0x80, 0x80800) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x234, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_ZONE={0x6}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x200}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x3c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x3f}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0xff}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x13}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xc0}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x3b}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x71}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x8}]}}, @CTA_TUPLE_MASTER={0x74, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}]}, @CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}, @CTA_NAT_SRC={0x58, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x19}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xd87f}]}}, @CTA_TUPLE_ORIG={0x70, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c27affbfe452ad561e7c75899af36645"}, {0x14, 0x4, @mcast1}}}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x5}, 0x4000015) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14, 0x1000) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000004c0)) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000500)=0x2) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540)='/dev/bsg\x00', 0x10040, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1c8, r4, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xc0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xe8, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe8b2f2ce57782cd5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x10}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4010}, 0x8010) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0xb, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0xc, 0x1, '@,>[-&]\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f00000009c0)={'icmp\x00'}, &(0x7f0000000a00)=0x1e) getsockopt$inet6_dccp_buf(r3, 0x21, 0x2, &(0x7f0000000a40)=""/234, &(0x7f0000000b40)=0xea) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000bc0)={0x9d0000, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x0, 0x7ff, [], @value=0x7}}) ioctl$IOC_PR_PREEMPT(r6, 0x401870cb, &(0x7f0000000c00)={0x20, 0x200, 0x5, 0x8000}) r7 = syz_open_dev$vcsu(&(0x7f0000000c40)='/dev/vcsu#\x00', 0xffffffff, 0x2) ioctl$TCGETS2(r7, 0x802c542a, &(0x7f0000000c80)) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/vga_arbiter\x00', 0x400000, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000d00)=0x8, 0x4) r9 = syz_open_procfs(0x0, &(0x7f0000000d40)='net/snmp\x00') r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f0000001080)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001040)={&(0x7f0000000e00)={0x218, r10, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x58}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x118, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x33e4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x771a00a1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x948b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x124}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x614}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff000}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$SCSI_IOCTL_SYNC(r9, 0x4) r11 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002380)='/dev/cachefiles\x00', 0x20000, 0x0) connect$bt_rfcomm(r11, &(0x7f00000023c0)={0x1f, @fixed={[], 0x11}, 0xfc}, 0xa) ioctl$SIOCPNGETOBJECT(r9, 0x89e0, &(0x7f0000002400)=0x7) clock_gettime(0x0, &(0x7f00000035c0)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000003640)={0x0, 0x3, 0x4, 0x4000000, 0x8, {r12, r13/1000+30000}, {0x1, 0x8, 0x9, 0xda, 0x9, 0x1, "848c43bd"}, 0xfc8, 0x1, @planes=&(0x7f0000003600)={0x400, 0x200, @mem_offset=0x4, 0x8}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SIOCRSACCEPT(r14, 0x89e3) [ 781.347994][ T9861] Bluetooth: hci0: Frame reassembly failed (-84) 11:51:12 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x18000000}}, 0x10) [ 781.482699][T19276] Bluetooth: hci0: Frame reassembly failed (-84) 11:51:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) getpeername$netlink(r2, &(0x7f0000000080), &(0x7f0000000100)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x3c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11:51:12 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000006ffc), 0x26d) getpgid(0x0) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x840, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r4, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x820, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x805) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffef8, &(0x7f0000000000)='\x00'}, 0x30) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x60, 0x2000077a, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x1) ioctl$PIO_UNISCRNMAP(r6, 0x4b6a, &(0x7f0000000400)) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084) r8 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r8, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) 11:51:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) sched_setscheduler(0x0, 0x0, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f8}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc0000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004010}, 0x80) [ 781.761898][T19298] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 781.781944][T19296] ptrace attach of "/root/syz-executor.3"[9811] was attempted by "/root/syz-executor.3"[19296] 11:51:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r6, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r6, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r8, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) write$P9_RREADLINK(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:51:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x60001, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "2ce3e409498281ca", "ee223e530eac1ac4a2013229971146db", "098a155d", "f2b2227d1ac4b006"}, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000180)={{0x1, 0x0, @descriptor="b5fc0d5b14e98141"}, 0x24, [], "6e452a5dbff88cc5b32226eb13566c4912d79df560c04303c83a4cda7d84fe34a1668bcb"}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0x6dc, 0x2, 0x4, 0x20, 0x1f, {}, {0x3, 0x8, 0xff, 0x9, 0x40, 0xe1, "f126b14e"}, 0x3f, 0x2, @planes=&(0x7f0000000080)={0xe4, 0x6c, @mem_offset=0x2, 0x66999296}, 0x9, 0x0, 0xffffffffffffffff}) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000140)={0x10001, 0x8}) [ 781.987231][T19307] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. 11:51:13 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x3f000000}}, 0x10) 11:51:13 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) mkdirat(r0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0xfffffc, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x0, 0x0) 11:51:13 executing program 3: r0 = socket$inet(0x2, 0x800, 0xd9) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000200)=""/229) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 782.492125][T19323] attempt to access beyond end of device [ 782.502278][T19323] loop5: rw=4096, want=32768, limit=32767 [ 782.510780][T19323] XFS (loop5): last sector read failed 11:51:13 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0xfeffffff}}, 0x10) [ 783.249658][T19341] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. [ 783.420466][ T9803] Bluetooth: hci0: command 0x1003 tx timeout [ 783.426910][T17907] Bluetooth: hci0: sending frame failed (-49) [ 785.500499][T10840] Bluetooth: hci0: command 0x1001 tx timeout [ 785.508963][T17907] Bluetooth: hci0: sending frame failed (-49) [ 787.580501][T10840] Bluetooth: hci0: command 0x1009 tx timeout 11:51:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x2, &(0x7f0000000000)) 11:51:23 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="b524001fbbec4fa900000015a910a39ac8d0215207bb87e7b712"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000240)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r8, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) 11:51:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r6, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r6, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r8, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) write$P9_RREADLINK(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:51:23 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaabbbbbbbbbbbbbb0805030827e44773ea5244824a56da8b6e1ad9fe39c0000000000000007c413234f81062cfd01ce390113dd1e903550210115592c84aab47e9bf6f2a3d17f4266996c0590f810ba9c8d8f9329fc9cc2f6a023b2b822698147ef2871a54d9c18b5fa1000c0b94"], &(0x7f0000000100)={0x0, 0x3, [0xd47, 0xf84, 0x4d1, 0x414]}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@remote={[], 0x0}, 0x0, 'macvlan1\x00'}) msgget$private(0x0, 0x400) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x3, 0x2], 0x2) msgget(0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xf17) unshare(0x40040400) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000280)=@add_del={0x2, 0x0}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) gettid() 11:51:23 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0xfffffffe}}, 0x10) 11:51:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000200)={0x0, 0x1, &(0x7f0000000100)=[0xaf], 0x0, &(0x7f0000000180)=[0xfff], &(0x7f00000001c0)=[0x0]}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000440)=0x10001, 0x4) r2 = fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c891}, 0x40000) listen(r0, 0x20000000) r3 = socket$inet6(0xa, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="ba4c0100", @ANYRES16=r4, @ANYBLOB="6cec6197b59bd6cda1afe80c00000000000080fa9993ab8f00"/36], 0x3}, 0x1, 0x0, 0x0, 0x20040004}, 0x4040000) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c99fb00b825ae0cc0b64d8ade0f43d70895765565e0f39d5abce6a987e0f571078485c379deede794d9cdc2ddb7873318581673283ea231018d9b5634564214ff81f266", @ANYRES16=r4, @ANYBLOB="952b29bd7000fbdbdf251d00000024002380060003002800000006000a0009000000060001005400000005000600db0000002400238005000f000200000006000d00ff00000006001800010100000600100000040000"], 0x5c}}, 0x24000000) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @local}, 0x2}, 0x1c) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x202500, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000240)={{0x2, 0x6, 0x3, 0x1ff, '\x00', 0x8}, 0x1, 0x2, 0x8000, r2, 0x4, 0x7, 'syz1\x00', &(0x7f00000000c0)=['cpusetcgroup\x00', '{wlan0trusted()eth1\x00', '.-@\x00', 'vboxnet1\x00'], 0x2e, [], [0x1, 0x0, 0x8, 0x1ff]}) sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40), 0x0, 0xbfffffff}}, {{&(0x7f0000002300)=@nl, 0x28f, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 791.990877][T19366] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 792.110165][T19378] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. [ 792.165705][ T7] Bluetooth: hci0: Frame reassembly failed (-84) 11:51:23 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x7) [ 792.212490][T19373] team0: Port device veth9 added [ 792.297838][T19373] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. [ 792.484128][T19375] IPVS: ftp: loaded support on port[0] = 21 11:51:23 executing program 4: r0 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000480)) userfaultfd(0x80000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(0xffffffffffffffff, r2) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000240)='fdinfo/4\x00') preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(0xffffffffffffffff, 0x0, 0x1) ioctl$RTC_WIE_OFF(r5, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='auxv\x00') r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="f4eed3f63ec990449b112954861243e5744509a9f70280c3cc95568b917631e3fbf5e48a52354d66a8a6c70770046a239b05b2e842cababb6d2ba5319d493b799c1ee36bd303f47952ae50321e9ad20815a642e22ec5fcd963b6fbca933076feebebcc1f4f4785153b25594619a5976f32f2b006de84cca5536ebe22e954ec16fcc081af9e71f246d7842616a66cd549779d55f9c2e740159dc5a42ea59823b96ca900df7fda4949975fb4de659e40a1b8a61c10a506592523a876976dedc9000000000000003980a50a98f8e83148b88d2c4c00000000000000000000000004000000"]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) [ 792.562620][T19375] netdevsim0 speed is unknown, defaulting to 1000 11:51:23 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0xf) [ 792.904204][T19393] IPVS: ftp: loaded support on port[0] = 21 11:51:24 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) fsetxattr$security_evm(r0, &(0x7f0000000740)='security.evm\x00', &(0x7f0000000340)=@sha1={0x1, "0e646c4c9537acc079f8a7baef021879e0f69d19"}, 0x15, 0x2) write$binfmt_misc(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="ef0d01001100a7400400000000000000ada96b571142c68183d88cbd47582706ac73a37ae8cdb6c21cb73b2deae7fc34ea7440b8e1bb7695cc524c3695ecaa195196091fc4a4a7c418fa78a5e0a99c7a643b815d562a3f0000000000000000009b8daea212e6513a4fc0f26c87"], 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x3000002, 0x10010, 0xffffffffffffffff, 0x82000000) r2 = dup(0xffffffffffffffff) llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/207, 0xcf) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000780)) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) r4 = accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) syz_mount_image$gfs2(&(0x7f00000003c0)='gfs2\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, &(0x7f00000018c0), 0x0, &(0x7f0000001880)=ANY=[@ANYRES16=r4]) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x4c4880, 0x13f) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000300)) 11:51:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:51:24 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x14) [ 793.078545][T19386] fuse: Bad value for 'fd' [ 793.273317][T19407] gfs2: Unknown parameter 'ÿÿ' [ 793.338007][T19393] netdevsim0 speed is unknown, defaulting to 1000 [ 793.544086][T19386] fuse: Bad value for 'fd' [ 793.589340][T19407] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 793.613489][T19407] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 793.677623][T19407] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 793.690607][T19407] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 793.739498][T19407] EXT4-fs (loop3): mounting with "discard" option, but the device does not support discard [ 793.798251][T19407] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 794.050705][ T9815] tipc: TX() has been purged, node left! [ 794.220658][T10840] Bluetooth: hci0: command 0x1003 tx timeout [ 794.227266][T17907] Bluetooth: hci0: sending frame failed (-49) [ 796.300514][T10840] Bluetooth: hci0: command 0x1001 tx timeout [ 796.308215][T17907] Bluetooth: hci0: sending frame failed (-49) [ 798.380543][ T9803] Bluetooth: hci0: command 0x1009 tx timeout 11:51:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x10, &(0x7f0000000000)) 11:51:33 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x20000050) 11:51:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 11:51:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:51:33 executing program 4: open(&(0x7f00009e1000)='./file0\x00', 0x109044, 0x0) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3d90", 0x3}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="646f733178666c6f70700209fae61ee5d5bf7374616c655f726f2c00"]) 11:51:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x200, 0x24) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bond0\x00', 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x140) write$cgroup_pid(r2, &(0x7f0000000080)=0xffffffffffffffff, 0x12) 11:51:34 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = getuid() syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0/../file0\x00', 0x9, 0x1, &(0x7f0000000500)=[{&(0x7f0000000440)="5f3b9eb7f1598c0df0391f68f4db9a4ceb4f9bfebf1b43935647ab5362062c6de95e936a5309a55647aa54620b955e361dc85a38bfc1fa22fc58b0291c2598b31ef5ffb2169598eab23fd0bde91d789397eef6314c98d7e33f6ccd8da7bcfab231a2ecaf151a4e98e0fd3795e3831bdcce41d46c685df006259612250146271f0e100d19b0ee4ccfbd7010500d1651a723a62eca3b5f9b57a28f7ce95807", 0x9e, 0x81}], 0x0, &(0x7f0000000540)={[{@nobarrier='nobarrier'}, {@errors_continue='errors=continue'}], [{@subj_role={'subj_role', 0x3d, 'overlay\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fsname={'fsname', 0x3d, ',eth1)'}}, {@fsname={'fsname'}}, {@euid_lt={'euid<', r0}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@seclabel='seclabel'}]}) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c6c6f720000f5fbffffffffffff000000"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14, 0x1800) lsetxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='trusted.overlay.origin\x00', &(0x7f0000000380)='y\x00', 0x2, 0x3) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000280), &(0x7f00000002c0)=0x10) chdir(&(0x7f0000000080)='./file0\x00') r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r6, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$TIOCGPTLCK(r6, 0x80045439, &(0x7f0000000140)) [ 802.928662][T19442] FAT-fs (loop4): Unrecognized mount option "dos1xflopp úæåÕ¿stale_ro" or missing value 11:51:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) fstat(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, r4) r6 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x0, r6}) sendto$inet6(r0, &(0x7f0000000080)='F', 0x18000, 0x20000013, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) [ 803.223498][T19455] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 803.255024][T19459] overlayfs: unrecognized mount option "lor" or missing value [ 803.298721][T19461] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. [ 803.314920][T19461] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. [ 803.327721][T19459] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 803.346858][T19464] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. [ 803.357774][T19464] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. [ 803.385184][T19459] overlayfs: unrecognized mount option "lor" or missing value 11:51:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x127b, &(0x7f0000000000)) 11:51:34 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:51:34 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) write$evdev(r0, &(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000007910900000000000630048000000000095000000000000005bf41d97b11699d101ec897ec8b526d542f83ba5c159c6e4d3e68fc4cca59f435784ae7a833b65ef22f9ab38e931b8f6c7bf3a45dd6cef36f418ca9956f5a971aa57bd609ed962ab68b691599419e84ff0b1cd0a1eb6a73fa2e12aeac41d5ec9dc77d092d3383614a59649e0c2bf609feb30833c86f511bafe18a0d25150f6713257b73ac3351b32f6c2c58bc49e6673901afbc03c11fa08127ad876"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) 11:51:34 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x2, 0xae1d1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x80000000}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200047ff, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0x0) [ 803.759429][ T9861] Bluetooth: hci0: Frame reassembly failed (-84) 11:51:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f00000000c0)=0x4) bind$l2tp(r1, &(0x7f0000000140)={0x2, 0x0, @multicast1, 0x2}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x5c}, [@ldst={0x4, 0x0, 0x4, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x16a, 0x10, &(0x7f0000000000), 0x3}, 0x48) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000080)) [ 803.924347][T19487] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. 11:51:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:51:35 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x981, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000002c0), &(0x7f0000000300)=0x40) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x401, 0x2, 0x4, 0x1000, 0x9548, {r2, r3/1000+30000}, {0x2, 0xc, 0x2, 0x3, 0x1, 0xb2, "a7f77632"}, 0xee, 0x4, @userptr=0xb6, 0x7fffffff, 0x0, r4}) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000000240)=[0xffffffff, 0xabf]) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e1d, 0x0, @mcast2}, {0xa, 0x0, 0x8000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r6}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r6}}, 0x10) r7 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r7, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc028ae92, &(0x7f00000000c0)={0x401, 0x7fff}) 11:51:35 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000003ac0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/74, 0x4a}, {&(0x7f0000000540)=""/157, 0x9d}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/8, 0x8}, {&(0x7f00000006c0)=""/66, 0x42}], 0x8, &(0x7f00000007c0)=""/127, 0x7f}, 0x6}, {{&(0x7f0000000840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000640)=[{&(0x7f00000008c0)=""/201, 0xc9}, {&(0x7f00000009c0)=""/76, 0x4c}, {&(0x7f0000000a40)=""/208, 0xd0}], 0x3, &(0x7f0000000b40)=""/24, 0x18}, 0x8}, {{&(0x7f0000000b80)=@tipc=@id, 0x80, &(0x7f0000000c80)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/110, 0x6e}], 0x2, &(0x7f0000000cc0)=""/64, 0x40}, 0x8c8}, {{&(0x7f0000000d00)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000d80)=""/46, 0x2e}, {&(0x7f0000000dc0)=""/26, 0x1a}, {&(0x7f0000000e00)=""/180, 0xb4}, {&(0x7f0000000ec0)=""/7, 0x7}, {&(0x7f0000000f00)=""/100, 0x64}, {&(0x7f0000000f80)=""/10, 0xa}, {&(0x7f0000000fc0)=""/224, 0xe0}], 0x7}, 0x8ec}, {{&(0x7f0000001140)=@can, 0x80, &(0x7f00000034c0)=[{&(0x7f00000011c0)=""/212, 0xd4}, {&(0x7f00000012c0)}, {&(0x7f0000001300)=""/251, 0xfb}, {&(0x7f0000001400)=""/121, 0x79}], 0x4, &(0x7f0000003500)=""/27, 0x1b}, 0x6}, {{&(0x7f0000003540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000038c0)=[{&(0x7f00000035c0)=""/112, 0x70}, {&(0x7f0000003640)=""/34, 0x22}, {&(0x7f0000003680)=""/122, 0x7a}, {&(0x7f0000003700)=""/53, 0x35}, {&(0x7f0000003740)=""/120, 0x78}, {&(0x7f00000037c0)=""/156, 0x9c}, {&(0x7f0000003880)=""/23, 0x17}], 0x7}, 0xfff}], 0x6, 0x10040, &(0x7f0000003b00)={r2, r3+10000000}) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0x20000000000000, 0xffffffffffffffff, 0x0) close(r4) socket$kcm(0xa, 0x2, 0x11) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000000)='&@[\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000018d80)='cpuacct.usage_percpu\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x2, @perf_config_ext={0x0, 0x10000}, 0x2, 0x3, 0x0, 0x3, 0x3, 0x7, 0x7f}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000003b40)="0f92dc6cb67a0c1920e550fd870f66d26a74d8f4046826e8ad89775919dde42a8c156e95f0d08989f394de3db89bb93194470b7928b2f75fb1c51d230de7344c2a051129378b573bdfa4d4ff586e631e711d2f6b59c52880b5bb006b658b119dbcb890eb2a29d82460bf8e5e5e094a321e6b15845519ec5d47d79c6ab0d738a8b0253ba8f10ba4b89260d5ce584caec7b5a7e216060d4ab3820f62f795ca97cdbebf73218bf7fe1bc147d63c7ee24c1b930a681810b762f072ab2ac380960abb32eafaace9fdedf4eb11d05b1a2eb7400511b0fcb923375fb3990280e2b06b24d8c3e8f1ae6abf086f017726cf257b74a5b018029d7996cdb3115210ed2b96a9e5421cc617b294122954f9c4719b4bd6033cf9677cb67a6b44fafc75875146d4c7970d9de47afd16eccab0cf43815d8aa591fa6abf7e0c3c9acd4655f6a6ccb47f750ae3399689838d173e142ab147abdf238a6ff415d859e792afed8c24f9a287ed98708184c15b2a3c94fa26f85a17906bdbfe44d786d9dfe6801675e39485881f4ffdcc0ebb225371f1b891045aa2813a9ac938144e15066ccaaba6d0afcf832213cf7fe2e842377945cf3a21ef56381ac64c86bc766c2719eeb2f12d66cbaf3535c4004c399e9d6a8cdedcbde21467a89317a2a42ae52d413c4dc4bab91b5c60c441fb31b4fa00891945dba07a650340a35f3aaac09a0bd5b3a2894ba0891b6eee99f9e943df8733e7c9fe425d92e528b575f2894c6227ba9e1a192531516e0291d376255238767d04c0a84fa4c2a41e1d0cd9f30fadf1b3242ec6a05843886c32325e331dcebba9818f22d946a5000254e639d591bdc5d17a076978eb573ebc8f41ea002ff83f389037fcf3f6641760e19dd9a76c6fe5a296add70a22e62cff01cccece61796dbe2338b22f1528cc949878b0c36e6de77095ff9fc55085a79264d25490502eb9db6b221a0aee21ecb28e6c95a8639dfd37e5aa5a4bbfab0fc905f1755ee0d62cb5784dbb3b5f8537c5ba8bdeeca981753ad43cb515669339a2508422465dbc450210959a72826ec23e76cb4f46e5360a6280ae0f736d382576622e5638c581e2e1113185d56634948487fe505bdab58ab1f6676008fd907ce0d49e73df7d3874f815b848d06537631fff4af6ae8505d179fde67113737c858c0fcb7799fc7eaf69daf4534215fef3a16fcfabf500d1e00dba6ebbb9832ce71dc96c99cee8bb12bf96eba3b54fef9338230cf7656c74f33bad178842c7befc24fec618d6be59399671da2f3594c8782769c04bdb0afb47b41319df7ee4949ed778d10e3a46fc852685c0b0e7712fa8320258e72de937c068c8f84614ad760e85230ff057048eda91320ba3b4625017eac74ac8fb37bfbcadcced314fc0e8a486c2869a990efcf367f2654010b8e7ced46b8999705c63290faeb7654a410591d50ef6ae38881db04f32bacfffc9a652ebc2e8eacca5ed9bd094035feca1166ac949874a89fa781f178fd325431c643810f777439ec5aa79b146da7301ebc2972861fb7caaa9868feabed886eb7977bd28eb497637340754620c6340f4cb316ce13a68b9eed48704c7d7b8b1184b69559c93bcf5e5300f75b1d9af10d507bef2250b9a324a9de2f1f7fc55662d046bdc1931d7b92884af0d5ec4387b87781c35ab5ac8f468a9c5a4c84436f32623e597f2beb1a6a0f80ccdff2eef399c3eafeb3773ed591726287050a0c4eb3d79c4d6ef23fcb65dc7ea30713f0915c59b8f4f18b696182975a57ee0e67e1d46788d7d3cff734a0907f66d8866912b9095607a32a6c019e99e153f9431c9c2546c2eb71f42a49f11d6855595fa8c068faad87058dd3847cba3d2a3131d4f3fbf71d8db24552773f30b70b2f45345e88bd6560688951abea05b0aad8a47e04cf570ae010ef4b04161e0b3e91098cd4bf4239eee205641823cb816e866949138a6295fb5f3e08ac493a45f39fa2f37c0aea9c84a2a3b069c731ea5078b69217f760c6addf1700148b74f6f5befdd6d69daaa89f8ece4a871b5a73319e753187a90866bbea47a05bdf43989d35e37ffef77520b02605e577f8f5b0acb63ebd1a4888bd2e70f446b52c58b19641e672907b3fb75e9d4b63bd374b60080a24b6f3eaa8e14b7b9d901712325bc5992f9c5fd02db1764f50e0dad91058c1df24816789cc03d927d8a8eee02215f7e088d78dd6fca7ab3db2f33fca39fb11787a19d4168dfc1c338a2a5337f8b607f70014e9f00a8155f9eabf0c182f0fed7a45a9455a173a42a72112f8b1a0484195b41ac2b8efa02841005a2e8c97f91031bcb68cc159b758ab109410e282954e77c6af47dd9bd9329fe7b2b14be0bc476c9cd547add13e1d942a17fa5611e98574e65dd236b39a4923eecedabf13ede5919c86458e35268b2e4365be0a5bcfc95254a930c46c2f24df80d33f4927c3d51aa16e8183be0a7a8951c543cb09ed0bba412fca7ac467df7f2a977b5f0a77c116074ce560c1fd88f1bac6f645724c35f44dac7f7b6c7c3bf1181cd6a1be8c9859dc9eceb21e7730922a6b5aea59dd28b4be182b2b74bac75066ae4a5142b92af1ecd78b65733a06ad6d7e590c38dd0225791b763ddf82fda7acebbcfa925094065ef1f95188d25525e11f5f9c8795e863d368525ea01eed7d1332b19293043194b24030097bdb221c7b4a4b4bf4fd426fda8d1f777ee0bcd67e9500cb1facc6705cca9b3efb298b87f26ee1f1f2ebdb9ca0eb6e051331a6a6e5c5f1f006bcb229e2fb2d2941a3ab387ef2e4f8ca427eff2e713587b8140880925b99799bba5622ab7833a36a677e62e83d2c799f1b53880e2d797c1032ad1e39cb9c75b55a65c25c59273b416246f68f3f22f055f036beecddda9019617c474c41d250b8a3daab25d55577d2285673a173fc1a3a5bc28bc9db8633e2cead3687a264409b06836761d860a3e8933bbb971bda9302e8fb01747d42cb1cc1d752012ab5a47c40d726ec6cf61f1f2b0e8b37b40dff4657f9b392bec21712ff21b606cbe87ff549650cf54ae22e527946b625f212d3b88ae4ca6c30272ca12718d50fbb1475370665bc89bea3ad739b143700d1dd09711793d69546caa5c0512366370e771101d0662135e645754f55d8c7c9ee77a24858426644a5a40cc969f4ab829d8f7ce1da842ba5bb429f3f00cf2914a34e1c0eda322cd1e345df7c9d07661599790d25e677f05d55cb4aaa2dc6d7262411ae5f3acf4c102e9feac58a9635c559fe36de4b91c335225c0fb6948fbfbcfa4c3e2072063f5466a9b1a706f7e756d0cd13de1f6673ea5b5f444e5d47ff0bdb6d6e2da6b0c4973c53251bc8125653026ad51ad3fef24e59ee04b8a5b38229076027f0b23524d35be8628b4b1c26980e65cc8beeb1d6426170d08e43915c2161a6424d2dfe2325107666d929c9ad646053659cd38cd191f795aa66b7c4765368c74d52493bdec7fffc73206132b122cddc6f6a052df2c88e9843882577147586aafeb6ea4449899834e5942cd2fbfa7b711aa689ecf4b674bf1fe7fb766ff5cdd9746a244a6ea8b532c17ffbe73dce256e6db8d54a8ee77d2240f90814f9d5078b7bf9017318ebcb6ade7c40d4bc9d2824285b1164a2373d47d18e60b30538aa42c8894d3ac0447aba0423cf25121b4663d7f876a4b1a7880a04191579d014734a5c2f3197749163c76f86fb7b81ca984122b893690d2dce67949752be919585f2b0d54192ebd018f9f77624fcffc40b5828dbcb5d6b0a28d3ca8ae1cebd9a841890184e6a8ba1d8a553af2b8a28fe85a24148d085600b95c45efa04e560b93f03565e87d5014ed4b2b26c4e19d5a1090d339e3960184bce0f1b9e3eec7a7530bd22c753c8c0b18a95ab42a9db8dd06df690482bf739847bb6976edae2f8ee1d5f29a59b445924eda15036f0c0861b0a43108adfe0c41d5c52a66c9422e81f9b2eef754cabdfc5b212e2922c6e5c084c288d4c6f22b90f2140aa3455189e9b14da6c809d77a957eb4a113b731c45a2b82724a30d78d08b8719f914e2e839c5595272a22a937694fd5786a1108b9f799d807042a731f4da6cae719d4dc291a5ec36a05d87ef893bbdb92d1f3d9883eb93ccc0fc7704d81e2c28a09bf5d4a9fa103978aae20ab1d1a3da7ac182c9259e6797f6bf8eb254d6f12ce3b0e72a95f46be3dfe7f9952cac5ebad0170c6b386324141e3a5d8a235b3ce96b582fc032dd1120fde5d36e337434209a56ba558478dafd3901892a1b22226b13eed405fcef86a043be364f1c59fad29fb1387847694182ec0d326cd640ca8818180b7713eee257a559b6beb8c419cf83079f4555b5fc0a98f4a34f646e6e059b081930e3e2b34adf7790a8bc413416d4c71741030a1c3f70e67d923e1e06fb221cb1e302038c3c8158fd7c2185be4889e4fc20a66f23b70b47fca98ae3b73e508ec61a5096f5097981b5c01dc0353b2ab2620a6fc9da1491b1b23a16b6838f379dd242c13e3e5c461e27474952d8304c6fc117ffe05de821ff5f93a239dba7f3904b52ed98e8c3c738570353b8ae60a3df2c68e52e458eac635106c2fb03e35232d59df0be65e4f95fcd396a4c55345f90552f943e254a0cc9433e686c57febb8c2577f008917b15877c04cbf3d7860a4f78fd047291c7f91443a65aa21e59cca4969931866ca7d173e233bbbb037cf45631d1182cfc15e5dec9df0a86c3256db1f419ca86631ed1eccd63f0fef4094844d3a70151e94382fb6eda2d27f7cb75afaa003f205935d51c3ac6c72bcf673212dd380e0c56acc75149c1897dd854a51e17e440419e133c57f3dc7f4d06a9d07cfd1222accf8255d8b46ecf3f00ef7f7fcb00a574a446953f396b92020094cabaaa17e58955630f538707c2d06cc1453f580add5942c09a4c92c6289f816259042bdacc7b1969067e6a5bddb067100df1a1ce1ed164e5ec2442da3280a431028fcb5989847b36e16054a5578664f5d05574ff29a477ade4eec3f5100c36d2c03e455b0657a0983a9439d0dbcd10bb46f16a0ee1705661bff2b97042b96cee60c90fcf0c559a7ad22f0e059ee8946ed5242664be395dfa0bb93d0d433eb76d8c28177882a573ac205b06d896235a07f82c4ad09687f22d01c94a8b24280a977cae27f16970a335430779011781a3d78f4d89f126e053fc067e1ff285a33d6b6c44636d9a3c4c2707ef97683add4291a1e9add0f4d5e79f09e68160a00345d5a696c0de0ab1b4253d02c17779990d22a17cadac2b71c5e6bbfccfa88d7128f6a641600e6a01004e1886f61db9efdde1e11f2e8c71c18492eabc4e881c12fb81d27ffc0197f8e606a7ae6e6990b61febcee4d29c87c7e0c15508b7adf82fb6b165916d64ef778c999d3472763efbb42a630b9132e3ff1b77d081a78d897a3db49a635a5f3d370ef2c500f98c6b56acbf214667008d724a83caaf686841e42cf40f2a53baa2e3735ac35ef79569ab3d62e9b190078114108923ac5fd2dc6da9644761195f43285feb41457fa52d4271c73c03476977c61884a9253b34bc1b0ea83db12ea21e230649cac04d1a8958c8ab1d505e2df3fd5b1e03c54398672ee68ad68590bf22de197a9a68b0ae98a7decb855096f00e53f7893167d9889349004f458ea4abb8721e8d4805be591665d5ce04ce25a05008144ca61c53655ab089ae5eee3141293153da7b9f2b0db71cf27af1ad7091863c3f8b35e109f06b915ada9668fcb825ed2ae024dc107a8e54e10be0cd9c3abe224816e6200aab05c05e0d3e9ee66", 0x1000}, {&(0x7f0000004b40)="811e64add854df08a4ba63c217920921ceb2717eb3c0d0f87af4efc9ff08508a92bf42f44bfeeb6d9fd4974297d5f1a81683997540791a07e0da13f0ca65f31bc4b2d6d7d2bafed28e055b1600acfa98a0fedfab5c25e9a30e2903bd243bf1240fab3a72aca2d5089e3cc5425dceb6c1d11f2f7dd904930b644c324d8e0c367997b791aade9bbc136dea721562747250b2b33e4e3e4c6933f4b79bd520070b1993a90aa68e11a47208f8cdf8fdb9c1c6e250b57f8440c53c14212782bbfdcac2f2c2c4d749e32ad422b880cbf261710c05dc0fd0fc", 0xd5}, {&(0x7f0000004c40)="2a901b28b8b533a516c8df758839978c40c4734151839ebc3e6ecf4849dfba74b974d40cc064bce7060addc4dc48ad3a24f1c5d1b583f32a032de24c2e99839726cbba24dc96216a8c48985817bf21ceb4684118927b875d9fe34abdd3cdfa5684f9eb6d908f4ebb42eacbc0d82f345cae1193261e0956aa98cdcc4eb06a5dda1b353b0009d31ceac5f10d7772118fb595229073c6fb609a60b9a1c1f7cae4a44890e200ed8b05ec6e060ea9d373b86a39ff6632c5a04e3f0cd17c8fd7a4755258e4fc070994f97104c60b38a11274", 0xcf}, {&(0x7f0000004d40)="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", 0x1000}], 0x4, &(0x7f0000005d40)=[{0x88, 0x103, 0x3a3, "0dea4415d0c56f82cff4d9207830e887fa0cd6b57d93bb1f32e9b27d24c8904cb4f5d18f55e8f5071027b1388065c0d8f7c1c83c3657f568b664a712e082d5f3885b93e4b984512838cafc371a8e8a479376f3a827cc21a76703e200dcaf5876d7315dc69c211e84fa5e32dcb52fda87cb"}, {0xb8, 0x29, 0x0, "776284146f227b454f52c1f7f9de27c64824fe485fd44729c032cf9b575233aa1be57b1ad77093b27aa79fa5485b6d92be417fedec0045bf999da40a78669d47a320e9c730a756f40fbae34bd0c95ab2535ab26d01f7af8c4e725dc04e8db3b9e3888b3f20b8a3d078801549accdadd9e445cc20d76db7a14623befa1618b661c052b567e44c5ca4b228ad72f013514a882f5db2bcab0a6ca5f58e6d9daaddb53279fe87dafc05e7"}, {0x1010, 0x108, 0x0, "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"}], 0x1150}, 0x1) socket$kcm(0x29, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000006ec0), 0x2}, 0x0, 0x1f}, r8, 0xd, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r1, 0xfffffffffffffffe, &(0x7f0000000200)=""/126}, 0x20) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r9, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) accept4$x25(r9, &(0x7f0000006f00)={0x9, @remote}, &(0x7f0000000300)=0x12, 0x800) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) ioprio_set$pid(0x1, r10, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r11 = socket$kcm(0x10, 0x2, 0x10) r12 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r12, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(r11, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)}, 0x0) [ 804.459647][T19502] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. 11:51:35 executing program 5: sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x4, 0xf3, 0xf3470, r1, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002600)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') r5 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x458db49eaf6a7660, 0x70bd2c, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x8011) sendfile(r2, r4, 0x0, 0x7ffff000) [ 804.616314][T19490] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. 11:51:35 executing program 3: sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0xefa, 0x400000e2, 0xffffffffffffffff, 0xe87, 0x9}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100005070800008000000000000001b8", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c0002800600020030000000"], 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f00000000c0)={0x7507, 0x2, 0x0, 0x8, &(0x7f0000000000)=[{0x4, 0xd0e0, 0x2, 0x7}, {0x6, 0x8, 0x1, 0x60}, {0x2d4a, 0x400, 0xd0, 0x2}, {0x100, 0xe792, 0xf996, 0xfffd}, {0x40, 0x7, 0x0, 0x1}, {0xe5, 0x3d, 0x7, 0x1}, {0xffe3, 0x9, 0x7}, {0x0, 0x4c80, 0xf79a, 0xa5}]}) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r4 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400}, 0x4000004) sendmsg$IPVS_CMD_SET_CONFIG(r3, 0x0, 0x20000000) socket(0xa, 0xa, 0x6) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x0) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000380)=0x5, &(0x7f00000003c0)=0x2) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x804e18e69fde35f0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000440)={0x0, 0x0, 0x81, 0x2a, 0x0, "9fe8dea362630567481d01000000c0b0608bf1", 0x7f, 0x8e}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-control\x00', 0x400100, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x804e18e69fde35f0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x804e18e69fde35f0, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) socketpair(0xc, 0x3, 0x5, &(0x7f0000000500)={0xffffffffffffffff}) getsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f0000000380)=0x5, &(0x7f0000000540)=0x2) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r2, 0x25}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x4000) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ubi_ctrl\x00', 0x20100, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r9, 0x54a2) [ 804.770157][T19502] netlink: 11579 bytes leftover after parsing attributes in process `syz-executor.2'. 11:51:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) [ 804.914804][T19512] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. 11:51:36 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x16}]}) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) dup2(r2, r0) [ 805.089795][T19519] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. [ 805.821357][T10841] Bluetooth: hci0: command 0x1003 tx timeout [ 805.827521][T17907] Bluetooth: hci0: sending frame failed (-49) [ 807.900653][T10841] Bluetooth: hci0: command 0x1001 tx timeout [ 807.908504][T17907] Bluetooth: hci0: sending frame failed (-49) [ 809.980516][ T2996] Bluetooth: hci0: command 0x1009 tx timeout [ 813.023743][ T0] NOHZ: local_softirq_pending 08 11:51:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x2402, &(0x7f0000000000)) 11:51:45 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r4 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r5 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r6 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r7 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r8 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r9 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r10 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) write$binfmt_misc(r2, &(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYBLOB="a552c1fc2804adc61dc4793864ba6543a8994bd97f53649b75bf8ae5cb93228e461ee8aa82b8d307d6bca6807e975a59243c37370ba4b7ab76e3adf9af1c30e375e4764ccb5283f59485057918bcf2d18d72f960cce07e52efc0309be8f2986aad28f5c366f4be7ce6d4f1f1d51b6c5ff0bcff2211e9d63b5c61782eb2b78a7d10a7a2974a8e06385301d821cae1d18ccbb86f94d09479243f9be66287837d57815f2d78ff566f15ed8f43149fcd26ad1d9829043002103aee89607e4a0c91e4f9c8d7d97318f82ab2cc1eb1ad8356b7032465fa91ca3475456bfa4c19", @ANYRES32=r0, @ANYBLOB="407e3747c70e0f37a23aadd20dbbfaac311a26450bcf68c5baa59691b8a16f5b75089ff752476ede18a9a55b5194843a5d7b2f4522ed3f7cb28440498c07fbd6", @ANYPTR, @ANYRESOCT=r5, @ANYBLOB="37e24f0f0b29b32aeb863c3985572423a9235141769b64", @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRES64=r8, @ANYRES64=r9, @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES64=r10, @ANYRESHEX, @ANYRES64=0x0, @ANYPTR, @ANYRESDEC=0x0, @ANYRES32=r2], @ANYRES16=0x0, @ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES32], @ANYPTR64=&(0x7f0000000740)=ANY=[@ANYPTR64, @ANYPTR64, @ANYPTR64], @ANYRES16=r0, @ANYRES64, @ANYRESDEC], @ANYRES64=r6, @ANYRES16=r7]], 0x8) r11 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r11, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r11, 0xc0585609, &(0x7f00000003c0)={0xeb, 0xb, 0x4, 0x0, 0x400, {r12, r13/1000+10000}, {0x227ff5778253e9c2, 0x8, 0x80, 0x2, 0x8, 0xe0, "4556d4b5"}, 0x4, 0x4, @offset=0x3, 0x7fe0000, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r14, &(0x7f0000000440)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xccd, @mcast2, 0x80}, r1}}, 0x30) r15 = accept4(r2, &(0x7f0000000180)=@l2tp, &(0x7f00000000c0)=0x80, 0x400) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r15, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r16, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5eee6a2ecb"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "115ea4df481c3dff9958dee3d4"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d054b6ce83fba5581db18fe218"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:51:45 executing program 3: mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r3, 0x5}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 11:51:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3, 0x9}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000040)) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000580)=[@in6={0xa, 0x4e21, 0x1, @loopback, 0x6}, @in6={0xa, 0x4e21, 0x40, @dev={0xfe, 0x80, [], 0x39}}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0x6, @remote, 0x3}, @in6={0xa, 0x4e23, 0x7a4c, @empty, 0x1}], 0x80) close(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000c28645fa4d1796811a600000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x40, 0x401}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ocfs2_control\x00', 0x600041, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r7, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000640)=r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r5}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={r5}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="0000ffffffff0000000009fc01006866a6fb4ec1e0ef924dd63cf07363000000"], 0x38}}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r11 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$EVIOCGABS20(r11, 0x80184560, &(0x7f00000002c0)=""/230) 11:51:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:51:45 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80202, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400202) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000000)={0x1, 0x2, 0x7}) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r4 = accept(r3, 0x0, 0x0) r5 = accept$inet6(r4, 0x0, 0x0) dup3(r0, r5, 0x0) [ 814.435088][T19550] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. [ 814.489612][T19545] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 814.507011][T19555] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. [ 814.567677][T19560] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 11:51:45 executing program 5: mount(&(0x7f0000000080)=@md0='/dev/md0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='hfsplus\x00', 0x80000, &(0x7f0000000200)='md5sum\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)}, 0x40) openat$cgroup(r1, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x3600000000000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305828, &(0x7f0000000040)) [ 814.625199][T19556] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. [ 814.690482][T19562] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. [ 814.700519][T19555] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. [ 814.775855][T19552] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. 11:51:45 executing program 4: r0 = socket$inet6_sctp(0xa, 0x4, 0x84) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @multicast2}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r4, 0xff}, 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="f1e67a55cdcb1f429921a6a7379d7167", 0x10) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x117, 0x2, '\x00'}], 0x18}}], 0x2, 0x0) [ 814.837861][T19555] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. [ 814.908441][T19563] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. 11:51:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000003f40)='/dev/zero\x00', 0x400480, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000003f80)) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x8a) 11:51:46 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x100, 0x4) 11:51:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r2 = accept(r1, 0x0, &(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r4 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) socket$kcm(0x29, 0x5, 0x0) getresgid(&(0x7f0000000640)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) r7 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000700)={0x0}, &(0x7f0000000740)=0xc) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000000980)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000140)="e53a3c0623b7f228a37f83a63ec6037e52aebffcd6ce9fe1a733c15ce02283ba20fb9e9100d102f52a23a55d395f3b2e665f5b23ef0bd74bb5932e268547511c4c3854c70f918fd1b7227fe360c04fd63f7ee0ce30989e696312ffe91ed3531e1ab25ff1c3cedf13daed60b032d066fe96934b3fcbff55f2c348acd9bbb573210359271bf5337df988104d3ccb63ccaab58ae6ac3b3c94d8ad738e38b0d19651d0247d76e86caff80dde7e396c58c04091b5147276109172cf1609f43b", 0xbd}, {&(0x7f0000000200)="b9ed944ef50cb7309aa3286e28483101e23468d65c8a626f11c8ec1cae12eefe154ab5a4e8bf43eea7d3664330bc4767ebb3a72d98a95ddd3d920c44ee8d20e6eaa49f7a1400690e0c2b9d1317e153bcae22724d692885c701ff12d3d97fdf43e9d571a36792ade395c00ee1234e739780608c54c26c20f1d1ac28cf9b9b5d6950833ca83a8128f335cdc75cc69adb15bd337d65524f61bfb8942b9865", 0x9d}, {&(0x7f00000002c0)="e0ac91cdd63ceb9fbce814ad72fb42184dd7eadc8dae9d9bc831be537bafeb4305897e7e07490161d09648774c777e7b0f9692b0", 0x34}, {&(0x7f0000000300)="f4dbe088dce900aa9c03ff073a9edb5194fa8dbfe6bccc7adb", 0x19}, {&(0x7f0000000340)="0d2c0576e8affaaf6de7d7c7fd68fade3108179a5b28367a95a426fd8c6854098706d7fbe1fcc4ad49fad5851566b4d979ff48e24c81e46625f50cf241dbe57a2a7ad4469180b04e7790c1e5e107b1c03ce64346287b59bd02e18dea4b055ef020af957db9084e1c8dffc51cf0e264f305eed1571a6123a243ed4143d329ee40ab", 0x81}, {&(0x7f0000000400)="8468af4eda513229e6dcd8d142064ab5cbcaedd3f58a354959f35996845e95a086f2071341d10a58c150f939a11d4477053e3b3a695e695d67e2a0a9679c751d92d37d44f4cff5b56314eb69eaad8fa4c8bf6e8ef8b3b6de52a360ad6d89df95b7f5ffbdcdbf9e93cbb3635da142903cd1175ac3e99c39d7e91be4cd38d2", 0x7e}, {&(0x7f0000000480)="a7fa77deb910ea958d2dd045dc0b1851d60faae23d4ed55e91b339a9315d0a5da3d510364a174701e58f70febb83d183f14a0178acc7803aa04c6015b5932090c0101d17f78b5ec265595c629729cc536fffeabbcf500277961c23364d77b5153e854ef8db6b2aa43999ace62d67c5185d30bd45d531c6fe244a3a4f90504169e24d3f5155dc40591dde93296ae6122557cff37e97999a149a830569eb6328f35ed632c183ab1c33fd93d3ab84c8a3adb18f1a2b", 0xb4}], 0x7, &(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="00ef2483fc000000000000000100000002000020bcdf2fefdc43ad147b64bc826abe5d3f9c79165d5a8e2cb15bd6f44005007d02d077ea45e952d09c951e97b6d5d2d8a6da59", @ANYRES32=r5, @ANYRES32, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x20040841}, 0x4004000) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa}}) 11:51:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) [ 816.710650][ T9803] Bluetooth: hci0: command 0x1003 tx timeout [ 816.718354][T17907] Bluetooth: hci0: sending frame failed (-49) [ 818.791302][T10841] Bluetooth: hci0: command 0x1001 tx timeout [ 818.797571][T17907] Bluetooth: hci0: sending frame failed (-49) [ 820.860583][ T9816] Bluetooth: hci0: command 0x1009 tx timeout 11:51:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x2405, &(0x7f0000000000)) 11:51:56 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video36\x00', 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x3220, 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r4, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 11:51:56 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) r2 = accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r4 = socket$inet(0x2, 0x4000000805, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000001180)=@v1={0x0, @adiantum, 0x0, "e25a5129f7bf6b1c"}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002800)='./file0\x00', &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) syz_mount_image$hfs(&(0x7f0000001340)='hfs\x00', &(0x7f0000001380)='./file0\x00', 0x9, 0x7, &(0x7f0000002740)=[{&(0x7f00000013c0)="c834817c5d1fecb7a8d7fded314400649fda59907bda7a1a98fe9c14a3be69e357cb517652527234088f5607e041454557091c76c958c5ef535fe01183454315a790521bc0f940f172f1cc08e50f0738048839130280e87daa4667e08e939b4061898d456bdea98b12b119ab3bc4", 0x6e, 0x7ff}, {&(0x7f0000001440)="4fa2b54bbc91d27fc88b9fe81dd565f6917f3287e982dd8e832e403b16c4aa80ac2880951aee1c0d664b9698", 0x2c, 0x614b378e}, {&(0x7f0000001480)="1963c15a5a98b8bcbea92e774d6f8e05404fff8c54f4d03546a996", 0x1b}, {&(0x7f00000014c0)="ed26ce07028da81a9b4dec733eaba89ca02e7f4aed858c7bd4b9949bbf422b584e68f51d25b48c0f08c5bb6a40d8a6d982c19893d2670ca03cdc5c8110222b52d09b337cb238cd0e1554de71c63bdfdcaf123846a2cfbd9304bc1631df2c70d41106e82a1dbc368acfa44730db1f02f37d5b53c78884342837bda279869270d52da1ccdc8c318d83082b6f006670f81b297d2c8506d4938ca94a278673ab8e16051cfa999b74c379d8a2b5e0dbffeef43d8fb3e40886b1d96f24a6615d4d1d500e6dfa3947cd2561ae6348cba647ab1ddb6089177fd5e593", 0xd8, 0x9e}, {&(0x7f00000015c0)="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", 0xfb, 0x7}, {&(0x7f00000016c0)="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", 0x1000, 0x3f}, {&(0x7f00000026c0)="43cf6b2052f47d39b9b9fa50d68dd25778468c4f520d1b5a9a9d3eec1037cef04bbc775cd906acd2931af5cd682c5ed4863e150be0c19959e0469eb2d2652ecbb658d4f6a9e06e1fcad8dce22b65f163ec3f4c2c0a85", 0x56, 0x2}], 0x80480, &(0x7f00000028c0)={[{@quiet='quiet'}, {@gid={'gid', 0x3d, r7}}, {@file_umask={'file_umask', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@type={'type', 0x3d, "12e0f918"}}, {@dir_umask={'dir_umask', 0x3d, 0x3}}, {@creator={'creator', 0x3d, "6379b7d8"}}, {@umask={'umask', 0x3d, 0x6}}, {@creator={'creator', 0x3d, "0b78bde8"}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/dlm-control\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="b282fa79", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7c, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/dlm-control\x00', 0x101000, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r9, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x74, 0x1, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_PKTS={0xc}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x898f}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x157a}, @NFACCT_FLAGS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008040}, 0x800) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r8, 0x8001, 0x10}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)={r10, 0x1000, "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"}, &(0x7f00000000c0)=0x1008) 11:51:56 executing program 4: openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000200), 0x0) 11:51:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:51:56 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/240, 0xd932}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x8}, 0xb) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x4001, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000440)={0x2a, 0x3, 0x0, {0x3, 0x9, 0x0, '{vboxnet0'}}, 0x2a) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0\x00', 0x8, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 11:51:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000080)=0x2) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x5, 0x5, 0x4, 0x200000, 0x7, {0x77359400}, {0x3, 0x0, 0x5, 0x5, 0xe, 0x5, "984b747a"}, 0x2, 0x2, @userptr=0xfffffffffffffffa, 0x6, 0x0, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e21, 0x9, @remote, 0x8}, {0xa, 0x4e20, 0x7400, @dev={0xfe, 0x80, [], 0x41}, 0x6}, 0x2, [0x20, 0xcd4, 0x6, 0x1, 0x4, 0x9, 0x7, 0x9]}, 0x5c) read$rfkill(r3, &(0x7f0000000000), 0x8) 11:51:56 executing program 5: mknod(&(0x7f0000000000)='./bus\x00', 0x8, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ocfs2_control\x00', 0x501000, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r2 = accept4$netrom(r1, &(0x7f0000001500)={{}, [@bcast, @null, @netrom, @null, @remote, @bcast, @null, @default]}, &(0x7f0000001580)=0x48, 0x80800) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f00000001c0)={0x6, 0xd0}) splice(r0, &(0x7f0000000480)=0x7e, r2, &(0x7f00000015c0)=0x41, 0x101, 0x0) lsetxattr$security_capability(&(0x7f0000000280)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x800, 0x8000}]}, 0xc, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000200)=0x5) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000100), 0x10) setreuid(0xee00, 0x0) r6 = getuid() setreuid(0xee00, r6) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000300)={0x990000, 0x8, 0x6, r7, 0x0, &(0x7f00000002c0)={0x98091d, 0xda, [], @ptr=0x101}}) execve(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) getuid() 11:51:56 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x208000, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x3f, 0x0, 0x0, 0x2, 0x0, 0x8, 0x40000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x199c18e80a5571c3, @perf_config_ext={0x3}, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x3ff}, 0x0, 0x0, r0, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe43) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0xff02007a, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000008000001201", 0x2e}], 0x1}, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) 11:51:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b2000000005e"], 0x48}}, 0x0) pipe(0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x161a80, 0x0) accept$netrom(r5, &(0x7f0000000300)={{0x3, @null}, [@null, @remote, @remote, @rose, @netrom, @default, @null]}, &(0x7f0000000380)=0x48) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}]}}]}, 0x3c}}, 0x4) [ 825.929857][T19649] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:51:57 executing program 5: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x9f0004, 0x9889, 0xfff, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98091e, 0xdbfa, [], @ptr=0x81}}) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="1dd2a0747d10434bf02c0bd232b88273d2814640d2448e89add280302011679c60ed904410d0f3d9dd89beb7615c7daf7c", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r4, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}}, 0xba, 0xba}, 0x90) r5 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x3) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x102, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r8, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$EVIOCGSW(r8, 0x8040451b, &(0x7f0000000340)=""/229) accept4$inet(r7, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000140)={0x1, 0x7, 0x2}) ioctl$SIOCX25SCALLUSERDATA(r6, 0x89e5, &(0x7f0000000040)={0x73, "0a8adac4cbeb52bd112a23780fce3faf4ff4d76e50a060da41189795347e44f36f7a9d02f263f8989c1dee96c46cf625c8b8d1524e35c530ec337ffe85844633344f424dd2b751cbd7589efb0f973cca4481565e9d522756b6f3015bf1c2aa819cf1becc9088d14da9b0be8bf162711566aed3acdcd01cf343edd51be651cfa7"}) io_setup(0x805, &(0x7f0000000100)=0x0) io_submit(r9, 0x0, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000002c0)="1243637254fcd00399eeed0b3075af88c47b95c4d674cf0727c4ee75c6fa", 0x1e) [ 826.068379][T19649] team0: Device ipvlan1 failed to register rx_handler 11:51:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="ef8d"], 0xfdef) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{0x303}, "2539c6e0214f8aab", "c1008dc66a266cbb02c698cdc55f13d2ab0e7bb17a3bd1ea349e64212af9634b", "e6df6c91", "2b9bd0bbedbada5f"}, 0x38) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) [ 826.647704][T19655] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 826.694494][T19655] team0: Device ipvlan1 failed to register rx_handler [ 827.420621][T10841] Bluetooth: hci0: command 0x1003 tx timeout [ 827.426802][T17907] Bluetooth: hci0: sending frame failed (-49) [ 829.506650][ T9803] Bluetooth: hci0: command 0x1001 tx timeout [ 829.515602][T17907] Bluetooth: hci0: sending frame failed (-49) [ 831.580585][T10841] Bluetooth: hci0: command 0x1009 tx timeout 11:52:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x4b36, &(0x7f0000000000)) 11:52:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:52:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:52:06 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)) 11:52:06 executing program 3: r0 = socket(0x11, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth0_macvtap\x00', 0x10) ioctl$SIOCSIFMTU(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d989575682677e151dd2f898fbf0e49e938c80ef5fb31726cc78bb4efeb1d74997d21b4dccd246a5471e2211a649f0cca0f35c3a836269f585e37b1fb2600285eefd983d0b8d1d83bd66c48319fca5409bb7b903e5f1c8e294c3f9f1f40aef3bd2ad323dac6fef5e69db8ce8109f5c5614bc74a0e4cbf9a8a760fa10d5d8e60c1460fd9edbf7005749499527fffdc36095303af765d188437db446dc952541a4c4f472c2f26345e120129cd937afd5ecf55d116bee9a2bd39ce2b7a6dde1eb5ac95307706be26628b6586e551983bf79ba08b5cdfbb9170e5cd12eb00"/248], 0xfdef) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = socket(0x11, 0x3, 0x0) ioctl$SIOCSIFMTU(r3, 0x8914, &(0x7f0000000000)={'hsr0\x00', 0x5dd}) 11:52:06 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x408480, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) r3 = fsopen(&(0x7f0000000100)='fuseblk\x00', 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000040)=[0x4, 0x7], 0x2, 0x40400, r2, r3}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000180)={r2}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="effd00001900a740671e84a88d218f2e31d9fd7aefbbcbb3ea08c9cda72b190d76db49ab3788f584c949b27d6e473db37b143235df8fce1abfb8d9f5996e65643572e8fe15efbef02fd70aefb02debcee0e6263436dbc0ff1795777c580a5b1c64d9e06c087b9cff6a8ee922fb940a02577ac9029251a0d9fd6dcaf3e1b157f007216c6453576bdc3b75259e678a7f750aa0c28e0f0c34b7f9295b7b256b161b8a922499e4dc04eb188f92b0a084d04a25d499958a4345e7413aae7dc92227b8af513c1339323a59cf651226563a4912ed6e748c093debae0000000000000000"], 0xfdef) lseek(r6, 0x0, 0x3) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r5}}, 0x10) ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f00000000c0)) [ 835.525554][T19688] __nla_validate_parse: 18 callbacks suppressed [ 835.525566][T19688] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. [ 835.692603][T19696] netlink: 29039 bytes leftover after parsing attributes in process `syz-executor.3'. 11:52:06 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000240)={0xd0, 0x4}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x84380, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001800)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000024001705d21b80788c63940d0424fc60100011400a2f0000051982c1375b3e37096b088000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 835.826174][T19704] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 836.095251][T19701] device hsr0 entered promiscuous mode [ 836.121898][T19701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 11:52:07 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x10, 0x0, [0xffffffff, 0x81, 0x80, 0x5, 0x0, 0x5, 0x5, 0x7, 0x0, 0xe7c, 0x80000000, 0x1ff, 0x6, 0xb59e, 0x40, 0x2]}, {0x24, 0x0, [0x5, 0xffff, 0x1, 0x7fe0000, 0xffff6a86, 0x80000000, 0x7645, 0x7, 0x765a999d, 0x3, 0x0, 0x6, 0x9, 0x7, 0x9, 0x9]}, {0x30, 0x0, [0xfffffff9, 0x7fffffff, 0x5, 0x4, 0x1, 0x1, 0x40, 0x10000, 0xfffff79f, 0x3, 0x7, 0x6, 0x823d, 0x10001, 0x100, 0xfffffffd]}], r1, 0x1, 0x1, 0xd8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x7fc, @rand_addr="000000a600"}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x20e, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:52:07 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r1 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r1}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x3, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1000}]}, @CTA_ID={0x8}, @CTA_LABELS_MASK={0x14, 0x17, [0x45d9, 0x0, 0x3, 0x3]}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, [], 0x2f}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffe00}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0xb0}}, 0x4000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r4, 0x4}}, 0x48) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000000c0)=0x4, 0x2) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 11:52:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) [ 836.612432][T19714] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. 11:52:07 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000080)=0x80) bind(r0, &(0x7f00000000c0)=@xdp={0x2c, 0x1, r1, 0x14}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'\x00', 0x2a02}) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$alg(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="08ab23bb4210a409a4fa1e31d225fbd6b90d395d7637251d587e063fc5109bcbc7510dad732c1701fa2bd2796d0f0c03a41e74f59baa61204693e0fed4bfc31edf9f8efa86bee7304e0f01236143c8b4b16af259dcf3657194e11ee33bebc6a3b7b8490dd3f821993504d1a7a3ec34de864e490800cea5f260e8c6f691b953b75fd3c4c47e890a42c44cfcc4dc61a0198b668ea256a75ced5e84073e952ec93efcce690bfa983f6ee5bb43b87bfabf6bd7f0fcec38dee956cb600ebe15b272a107ce3b2a76b3923099c51246a420faaf31e6ca30cc", 0xd5}, {&(0x7f0000002280)="51be31f2fc09c91ddbd41d7274d8475aca89677d6dfd742ca45c8dec12e472cf51d20eb4ac76f3b62da85f038a7df371732dba69d196765560e20748f3826b42cb84518e0ae3b01d5ef20c664a3b167f32554d1c5bc0888e91b78fdb102742758b177bc380a971ea3dc0c7bdaf24fc21af8d843e28146cae6402e171e034fe060141c91e9eabacecf1c7dbd93384a8a38b165d781427ad5a0810a48056ebf8c94d295cff48eddb44a30f31357abf06c238d3ead3", 0xb4}], 0x4, &(0x7f0000002380)=[@assoc={0x18, 0x117, 0x4, 0x1ff}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7da6}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0xf8, 0x117, 0x2, 0xdd, "28e3051f5f2b8aa35ad54a1220e7875ac9cb72d6d731df11fa760a3b74e143a90c5aebd65ee852f6cf7dd86971dcc47656387972437a3501c799b921272c6bf8216abb5b4839760859185df2301b73b8ed316dbc37d203c4f85e518de70a4b2c677f17961b23168c7a62e3b5c7263cac099d9dd9aa4d964972a853365fa8dc6301efed453a200403f26a3fa2f3f843456bc8a40c21696701a9dbd736fbcfc2808b97714f4af5a811ea755a88be2382853da2001f729c439a8266f92a24521059a1002192562289aff275ac15be17ad6eecf3f41fa2ca0f55f180631704"}], 0x188, 0x40000}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002580)='/dev/vcs\x00', 0x8840, 0x0) ioctl$SIOCAX25NOUID(r3, 0x89e3, &(0x7f00000025c0)=0x1) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000002600)=0xff) clone(0x20000100, &(0x7f0000002640)="5a4acefff26a4eecd1a7e89a3a49f3105ae4660bc8842063b5bd80b0d9a8fe40c368222d22c4ab660625fe13c433367331085ade69f95c0eb9927c7a4d857565ff2d8cb85ebede5c014529ddc044113cac49ade593ef72615a5bcfcba7575f664d7c70a8d48123becc7954c2a81e792f97c7cd8f05ddb515bc9ab3c0cedf5ab7d7843639854db5f2ffc42cb81b8b1f664a5861d0b1a5edc8082751ae7d7ff3b7e15906916f8d26d8d4556fafb1e3113e842d3cf1ce3fefe4770a6fe2237381402e402ad5b3f1dcfd90", &(0x7f0000002740), &(0x7f0000002780), &(0x7f00000027c0)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000002800)=@req3={0x1b, 0x800, 0x3, 0x1, 0x1, 0x7, 0x100}, 0x1c) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000002840)=0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002880)='/dev/nullb0\x00', 0x84000, 0x0) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f00000028c0)=0x8) syz_open_dev$dri(&(0x7f0000002900)='/dev/dri/card#\x00', 0xcc19, 0xa0900) r6 = syz_open_dev$mouse(&(0x7f0000002940)='/dev/input/mouse#\x00', 0x401, 0x2) ioctl$LOOP_GET_STATUS(r6, 0x4c03, &(0x7f0000002980)) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002a40)='/dev/vga_arbiter\x00', 0x101000, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000002ac0)='fou\x00') sendmsg$FOU_CMD_GET(r7, &(0x7f0000002bc0)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)={0x64, r8, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x14}]}, 0x64}, 0x1, 0x0, 0x0, 0x34}, 0x4008) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002c00)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r9, 0x40046205, &(0x7f0000002c40)=0x4b8b) r10 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendto$inet(r10, &(0x7f0000002c80)="70408a12b3a1abbd93517d33ec58f0a404b972d3ab8b3898b9914aaf6dc094d897a302dab9558683764b7643ec89415de96e2f535e49f79311edddba5cd2988d27da363f3b94d84af49ce03172dd5b22c76e737b20830eca6dfb675b7d78f2ffe9e261429cc561bf33a9b3783a86c17024a99ae66861e25fcb8379fff31f0a39f9d8e6951ecaff640eb67a3373a094e0e4b2cbf7e5b3777fc00ae736ac7af6a42d3e177bc08c3190915a8f1adc38ae2ce56d434bb72511eb2a67523c45fab8a5dcf5e14e9ec1474d267c389b97405b1f7108cd54508d254dd86996aa", 0xdc, 0x0, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000002d80)={0x5, 0x4, 0x4, 0x80000000, 0xb945, {0x0, 0x2710}, {0x3, 0x8, 0x7f, 0x8, 0x1, 0x1, "f52a8d43"}, 0x8, 0x4, @offset=0x81, 0x3, 0x0, 0xffffffffffffffff}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e40)='nl80211\x00') sendmsg$NL80211_CMD_SET_MPATH(r11, &(0x7f0000002f40)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x50000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x50, r12, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0) ioctl$GIO_CMAP(r7, 0x4b70, &(0x7f0000002f80)) r13 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0)='/dev/vcsa\x00', 0x84040, 0x0) bind$bt_rfcomm(r13, &(0x7f0000003000)={0x1f, @fixed={[], 0x11}, 0x9}, 0xa) [ 836.762109][T19720] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. 11:52:08 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() pipe(0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b1a, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000100)={{0xff, 0x3}, {0x9}, 0x0, 0x0, 0x1}) [ 837.090609][T19696] device hsr0 left promiscuous mode [ 837.091168][T19720] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. [ 837.137877][T19701] netlink: 29039 bytes leftover after parsing attributes in process `syz-executor.3'. [ 837.177652][T19740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 837.244863][T19743] xt_CT: You must specify a L4 protocol and not use inversions on it [ 837.740518][T10841] Bluetooth: hci0: command 0x1003 tx timeout [ 837.746702][T17907] Bluetooth: hci0: sending frame failed (-49) [ 837.984467][ T0] NOHZ: local_softirq_pending 08 [ 839.820648][T10840] Bluetooth: hci0: command 0x1001 tx timeout [ 839.828284][T17907] Bluetooth: hci0: sending frame failed (-49) [ 841.900661][T10841] Bluetooth: hci0: command 0x1009 tx timeout 11:52:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x4c00, &(0x7f0000000000)) 11:52:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={&(0x7f00000003c0)="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", &(0x7f0000000080)=""/135, &(0x7f00000001c0)="bc3a9f89e9f3ba944720480fdf07ecd505baec697b2214f32fb36e77d62c95035ce5043d1b6ae8dad850511beaf44b40d95e2dfe6cbc50f4e49dd79106e37fd6ab337763a35cae12b78028944b168295d638c6604a5159ab956a8d8952c1bfb8bed7064b0c037e1e8a5eac8a35fdc8b7b962c85cca5711b3aaa3db0824d970d5264af28e798c84bb818d8c023d9c19399d84b8a545da7056227404a6232d18d75788d776dfa32850790685eb9248d4a16751a67a3c0188c010124bcb8b376d0d8e13a312216c2eb00d5ae22734ba122e4d81cd3ca61207b9a507e8da125b2a81ec170dd9631274f19b68f51dabd4294e", &(0x7f0000000000)="d9c8267b04a1bdd7397e422d783f05fccfd59103cb7c4f22008f9005419a5cb5bb96e29794fb859347945dd2a04dc8914f7b24bc1369a0cadb9e4564e3", 0x82, r1}, 0x38) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0xe, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000007060101000000000e1ab75fcc2ee8490500010006000000c8e482adcc43acdec804dd72cabf53c6c5754bc7c308a80f4aed50ca83891cc57a1cf8aa45c157d3060200fb159b1214f49c7ecde8251984e3e256050aeea3cd8105553e74efcd52ddd10a1e6c25674c45eeb66fc701201efa235718b37a29f449718bf00af13094a2bd1cfc600a5efe6bd4269c21da8238cac896f34da3c91fe3737fa2026ae848656219669a3aaf52503566f2000000000005000065c07994000000000000"], 0x1c}}, 0x0) 11:52:17 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x20000, @empty, 0xffffffff}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:52:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) sendfile(r7, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r8, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:52:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x20}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f00000001c0)="04", 0x1, 0xfffffffffffffffd) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"/278, @ANYRES32=r3, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000500030000000800040000000000"], 0x58}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100636273001c0002001800010000000000070000000500000000feff0000000000000000a2e387d63e7217590578003f91160e12e5cab38ea6d14b05d0df915a3f958c4896775630"], 0x48}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x60, r4, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c021}, 0x8800) r9 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r9, r0, r9}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={'sha384-generic\x00\n\x00'}}) 11:52:17 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000080)={0x7, {0x81, 0x8, 0x4, 0x5}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x6, @local}, @in6={0xa, 0x4e20, 0x5, @remote, 0xa7}, @in6={0xa, 0x4e22, 0x1ff, @empty, 0xffffffff}], 0x54) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x3, 0x200) r3 = socket(0x22, 0x3, 0x0) r4 = socket(0x22, 0x3, 0x0) dup2(r3, r4) socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x40000000) [ 846.441078][T19753] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 11:52:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) syz_open_dev$audion(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x2e}, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x80011, r2, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r4, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000200)={0x8, 0xcc, "edbf409ee2551edb7040960d3c6fbbd4b3f8d02c4534bdbf7655cf26133be5a5c046bb65d8d7d433f9995a746fb16df20c228ab8735a237e601be353654dccf84318c8cedb99aa1019fb2e108404ac4e2b115574bee1035db27d86549439b50896a0061d502611a87a74a4aeac94cd227a896f48e471e39f0b87fe7a78d0450de3cf8bb64e52cfb4d7c314826572234a954ad60cf67418711770f03d10ac660a8a9afca536b9db1b5198f8c5904f08d3a56502dbf5bb7aa8ef94d43ca70cde57568869a19a4761a5f42270fe"}) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpu.stat\x00', 0x275a, 0x0) fallocate(r6, 0x0, 0x0, 0x110001) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f0000000180)={0x1, 0x0, 0x92e7237, 0x9, 0x1, [0x2, 0x800, 0x5, 0x1], [0xfffff3a8, 0x3fd, 0xef, 0x79], [0x0, 0x7, 0x8001, 0x4], [0x8, 0x1, 0x5, 0x2]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x5caad999, 0x0, 0x0, 0x362) setrlimit(0x0, &(0x7f0000000000)={0x7, 0xfffffffffffffffd}) 11:52:17 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x57) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 846.615366][T11108] Bluetooth: hci0: Frame reassembly failed (-84) [ 846.627440][T19755] IPVS: ftp: loaded support on port[0] = 21 [ 846.872958][T19777] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 846.908649][T19755] netdevsim0 speed is unknown, defaulting to 1000 11:52:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000240)={0x28, r1, 0x301, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x400000000000000, 0x0, 0x800}, 0x0) 11:52:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) sendfile(r7, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r8, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:52:18 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 847.363017][T19791] IPVS: ftp: loaded support on port[0] = 21 11:52:18 executing program 3: io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75d908c9205ed3b71ea13952fe4cbe6fe94815d4296f6e66de94f42cfa66862535188bc73114cc5b7e45adbc96ada2c96fcdf56ac7d8c5df0ddf462e7b21af76c2dd85cfd2af275132f78a7a2a40784f2c848cfe3e120ea0124ee07fabe1ab5d1da3792ed03734c9d2311b8c492141e49bbd12988425f3e6416d98397d0c772f66625b0984a41111e8655de4c87c3ffc5a612004b19158174c2f52680b3bf2e418bc4e9b4a0b873e7f6926102d5cc7e6eebb2a8407b684607e441ca52eabfeca04025ed87b627de25f8e6899de161d19946800"/244], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) r4 = socket$inet(0x2, 0x6, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) [ 847.732389][T19791] netdevsim0 speed is unknown, defaulting to 1000 [ 847.990487][T11108] tipc: TX() has been purged, node left! [ 848.630539][ T9838] Bluetooth: hci0: command 0x1003 tx timeout [ 848.636866][T17907] Bluetooth: hci0: sending frame failed (-49) [ 850.700598][T10628] Bluetooth: hci0: command 0x1001 tx timeout [ 850.708241][T17907] Bluetooth: hci0: sending frame failed (-49) [ 851.690560][T11108] tipc: TX() has been purged, node left! [ 852.780743][T10628] Bluetooth: hci0: command 0x1009 tx timeout [ 853.982407][ T0] NOHZ: local_softirq_pending 08 11:52:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x4c01, &(0x7f0000000000)) 11:52:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6000) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000100)={0x9, 0x1, 0xffff, 0x640}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000140)={0x0, 0xe, 0x1}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x13}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) 11:52:28 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0xfffffffe}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:52:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) sendfile(r7, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r8, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:52:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x248000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0xffffff1f) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40200, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 11:52:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xd7e0ce5d01a5091b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x100000}]}}, &(0x7f0000000180)=""/221, 0x26, 0xdd, 0x8}, 0x20) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) lsetxattr$security_ima(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000100)=@sha1={0x1, "aff898b71b47c24774032c15d2ddf6aef9d102b6"}, 0x15, 0x1) fsync(r2) ftruncate(r2, 0x48280) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) connect$l2tp(r2, &(0x7f00000001c0)={0x2, 0x0, @local, 0x1}, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000200)={{r4}, 0xffffffffffffff81, 0x2, 0x80000001}) socketpair(0x11, 0x80000, 0x7, &(0x7f0000000000)) read(r4, &(0x7f0000000180)=""/19, 0xfffffffffffffd6d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2f000000, 0x2200, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 857.374870][T19823] BPF:[1] PTR (anon) [ 857.392727][T19823] BPF:type_id=1048576 [ 857.397464][T19823] BPF: [ 857.402584][T19823] BPF:Invalid type_id [ 857.422995][T19823] BPF: [ 857.422995][T19823] 11:52:28 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x9, 0x101, 0x5, 0x5}, 0x14) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x40800, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000001c0)={[{0x6, 0x1, 0x0, 0xef, 0x2, 0x0, 0x3, 0x3f, 0x4, 0x0, 0x1, 0x7, 0xce57}, {0x1ffe0, 0x2, 0x6, 0x0, 0x3f, 0x1, 0x8, 0x2a, 0x1, 0x3, 0x40, 0x3, 0x3a2}, {0x2, 0x3, 0x1, 0xfc, 0x4, 0x6, 0x4, 0x2, 0x2, 0x5, 0x2, 0x7, 0x5}], 0x20ddd712}) 11:52:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xff0f, 0x72, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="7400000024000b0500000000000000edffffff00", @ANYRES32=r3, @ANYBLOB="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"/821], 0x74}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xf, &(0x7f0000000100)}], 0x492492492492642, 0x0) r4 = eventfd(0x30c8) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r5, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r8 = mq_open(&(0x7f00000002c0)='\xa1cgroup-wlan0\\ppp1&.}(trusted+,bdevvmnet0\x00', 0x2, 0x8, &(0x7f0000000340)={0x914b, 0x5, 0x100000000, 0x1}) r9 = dup3(r8, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="420000006179263916c50d12adfec101ec3cccc0c010d9", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) r11 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r11, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x7c, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x8) r12 = socket$inet(0x2, 0x4000000805, 0x0) r13 = dup3(r12, 0xffffffffffffffff, 0x0) r14 = openat(r5, 0xfffffffffffffffe, 0x424000, 0x1) ioctl$KVM_SIGNAL_MSI(r14, 0x4020aea5, &(0x7f00000000c0)={0x2000, 0x4, 0x3, 0x2, 0xff}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r13, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x7c, &(0x7f000059aff8)={r15}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r15}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x36c, 0x20}, 0xc) [ 857.967701][T19843] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. 11:52:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:52:29 executing program 3: syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000000c0)='./file0\x00', 0x100, 0x3, &(0x7f0000000300)=[{&(0x7f0000000100)="bb0b9af64ae8a5be6291f70618d6351ae0f819f452d16635b21f64ae36b34e08cf3e62be96079b03241079023b7e463f5788c212afc67c6c80", 0x39}, {&(0x7f0000000140)="31f236c34bc3d2c0227a75162263acb50f30ea6e2fdddb4facf69a5f81d04460622f875d8fa63fafa9c27c85fd57a438b8b16576ac35fe260fcd08f5384db3591dc3fbe3161abea9b09b530cfa0b46b87469a2d9199e99e4e17db57a3adeb036b14bfe69bdd4507ebb0c86af865a1cd6678d3a712a59f5eb5072e8d326e4f4bd1dde9fee6137d1b8a75d4a6cb3c52f7df505f87d89479649d8740065637562f830a0c0a066a97d560580d7d2397fe835956b2b079341dd873f", 0xb9, 0x20}, {&(0x7f0000000200)="b30d6407cf581c5c7bad6b8eaa4c8494aaf7ba72d9b1fab06a3157555b55a14f8adea9b2c23ae4cec8aa0c217749a0d10cb04d149f79cb7a1393f85145da2e046ce892511ca6c9a2045bb01d18783da22d340f1caf9eee73cb91eb61dd4d684c0e27036d931e75a9029c78f3c91947847b5c8a4dc4b74da8cb19a3f4abcfacee73112b0a1c00b82d7ecf727265286bcbb367aa0e52fc6af0631326e641cc8d72672968cc5a265f46c5da07f4eb309967752064e164c6410e3af20c1f7bc83d9b30e62e86fdc5cb1ae48d1e584da54d4c19fb626d1ad1cd66ec6b4c1ba99cb2580ac839c9d546d882c2ddda", 0xeb}], 0x100000, &(0x7f0000000380)='/dev/snd/seq\x00') r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x802, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(r1, &(0x7f0000000400)='oom_adj\x00') ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x4}) 11:52:29 executing program 5: bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x644, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) gettid() socket$kcm(0x29, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002e0, 0x15c, 0x0, &(0x7f0000000780)="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", 0x0, 0xfd, 0x6000000000000000}, 0x40) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x9d0000, 0x3, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x990970, 0x6, [], @ptr=0x8}}) connect$rose(r2, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @default}, 0x1c) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9b5) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, &(0x7f0000000140)={0x0, 0x0, 0x3010, 0x5, 0x401, {0xffffffac, 0x7fff}, 0x1}) 11:52:29 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'batadv_slave_1\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan1\x00', 0x400}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454d4, &(0x7f00000000c0)=0x1) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x10800) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000100)={0x1, 0x2, [{r1, 0x0, 0x1000, 0x4000}, {r2, 0x0, 0x1000000000000, 0x1000}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r4, 0x5}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x8, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200440c0}, 0x40400c4) [ 859.340592][ T9838] Bluetooth: hci0: command 0x1003 tx timeout [ 859.348554][T17907] Bluetooth: hci0: sending frame failed (-49) [ 861.420525][T10628] Bluetooth: hci0: command 0x1001 tx timeout [ 861.427585][T17907] Bluetooth: hci0: sending frame failed (-49) [ 863.500562][T10628] Bluetooth: hci0: command 0x1009 tx timeout 11:52:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5000, &(0x7f0000000000)) 11:52:38 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:52:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x10, 0x80000, 0x4, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r3, @ANYBLOB="178659d1fa6c08733d5383321378b7c3d2b51658b93a59052578eac9eec79f408c61cef2858bdaf397d5c180248d6abafa1e10b62df10bd8717fb6d10cb2cfc539c291e3c4aab2be82fc5532111fdeccccb22e6a2f24649785f0527b2df6c5947cd0128df3b011989c7cae81f56d0ba7768cc3ab01c2fe729c", @ANYRES32=r1, @ANYBLOB], 0x40}}, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r4, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000100)={0x43a, 0x7, 0x4, 0x1000, 0x92d, {0x77359400}, {0x1, 0x8, 0x7f, 0x3f, 0x0, 0x20, "ff2f7328"}, 0x0, 0x3, @userptr=0x968, 0x1ff, 0x0, r2}) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000180)=0xaa) 11:52:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:52:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000140)) pipe(&(0x7f0000000500)) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000140)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/snmp\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b80)=""/4, 0x4}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000017c0), 0x5c, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = clone3(&(0x7f0000000740)={0x80000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000180), {0x1b}, &(0x7f0000000540)=""/164, 0xa4, &(0x7f0000000640)=""/207, &(0x7f0000000240)=[r0, r1], 0x2}, 0x50) sched_getattr(r3, &(0x7f00000007c0)={0x38}, 0x38, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) fsync(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) readv(r6, &(0x7f0000000400)=[{&(0x7f0000000440)=""/165, 0x10}, {&(0x7f0000000280)=""/243}, {&(0x7f00000001c0)=""/20}, {&(0x7f0000000380)=""/124}], 0x235) r7 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x1, 0x0, [], [{0x1ff, 0x9, 0x4, 0x200, 0x4, 0x200}, {0x3, 0x4, 0x29dd1971, 0xe880, 0x2, 0x10000}], [[]]}) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x1c}) 11:52:38 executing program 4: getpid() r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x1, 0xe0, 0x81, 0x7, 0x0, 0x5, 0x410, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x8000, 0x4217, 0x80000000, 0x4, 0xb66, 0x2, 0xe00e}, r2, 0x1, 0xffffffffffffffff, 0xb) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) connect(r1, &(0x7f00000000c0)=@l2={0x1f, 0x0, @any, 0x7, 0x8}, 0x80) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_by_handle_at(r3, &(0x7f00000003c0)={0x9, 0x1, "03"}, 0x0) r4 = socket$inet_sctp(0x2, 0x0, 0x84) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40080, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x1b0, r6, 0xa4a2885d7bcbe506, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x11c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x309}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a05c96b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b579132}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b15}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b80768c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca73}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f732a7a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4049bb54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d21d680}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1737d50d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x68d5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16a0817d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc041f8a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e13a16b}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf6f5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc2d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6318ed5f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x325c8944}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf319}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53b98395}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb4ae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27dfe569}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa8cb68f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x865e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xaea5f55}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ee62de3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc91}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7aabac87}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a7d}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x80, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1969}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x204a80e2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4916e3c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ba65a4d}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf7e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfbae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x376394aa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x387271e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49c0fbd1}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa540}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbf5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe852}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe872}]}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4004800}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280), 0x0) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) [ 867.541923][T19872] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 867.643685][T19872] (unnamed net_device) (uninitialized): HSR: Slave2 device not specified [ 867.829071][T19890] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. 11:52:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5409, &(0x7f0000000000)) [ 867.878550][T19872] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 867.917392][T19872] (unnamed net_device) (uninitialized): HSR: Slave2 device not specified 11:52:39 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x7a, 0x200) r1 = socket(0x22, 0x3, 0x0) r2 = socket(0x22, 0x3, 0x0) dup2(r1, r2) socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x40000000) 11:52:39 executing program 4: getpid() r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x1, 0xe0, 0x81, 0x7, 0x0, 0x5, 0x410, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x8000, 0x4217, 0x80000000, 0x4, 0xb66, 0x2, 0xe00e}, r2, 0x1, 0xffffffffffffffff, 0xb) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) connect(r1, &(0x7f00000000c0)=@l2={0x1f, 0x0, @any, 0x7, 0x8}, 0x80) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_by_handle_at(r3, &(0x7f00000003c0)={0x9, 0x1, "03"}, 0x0) r4 = socket$inet_sctp(0x2, 0x0, 0x84) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40080, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x1b0, r6, 0xa4a2885d7bcbe506, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x11c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x309}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a05c96b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b579132}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b15}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b80768c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca73}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f732a7a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4049bb54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d21d680}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1737d50d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x68d5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16a0817d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc041f8a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e13a16b}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf6f5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc2d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6318ed5f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x325c8944}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf319}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53b98395}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb4ae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27dfe569}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa8cb68f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x865e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xaea5f55}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ee62de3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc91}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7aabac87}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a7d}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x80, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1969}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x204a80e2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4916e3c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ba65a4d}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf7e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfbae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x376394aa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x387271e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49c0fbd1}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa540}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbf5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe852}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe872}]}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4004800}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280), 0x0) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) [ 868.252412][T19905] IPVS: ftp: loaded support on port[0] = 21 [ 868.291240][T19875] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. 11:52:39 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:52:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x540b, &(0x7f0000000000)) [ 868.451584][T19905] netdevsim0 speed is unknown, defaulting to 1000 11:52:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) [ 868.715969][T11108] Bluetooth: hci0: Frame reassembly failed (-84) [ 868.718105][T19875] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 868.944261][T19884] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 869.077454][T19927] IPVS: ftp: loaded support on port[0] = 21 11:52:40 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000600000/0x3000)=nil, 0x3000, 0x100001c, 0x400000000005e831, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000602000/0x1000)=nil}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(r1, &(0x7f0000000040)='wchan\x00') r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) socketpair(0x9, 0x4, 0xed, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r6, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r7 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r7, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x54) 11:52:40 executing program 2: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a0500000000000000422cb4963a160161b1cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x34d, 0xfffffffffffffffe) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x2000, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000600)={0x1000, 0xb, 0x4, 0x400, 0x3, {r3, r4/1000+10000}, {0x4, 0x2, 0x0, 0x9, 0x8, 0x3f, "8e5a987f"}, 0x7f, 0x2, @offset=0x12e0000, 0x3, 0x0, 0xffffffffffffffff}) pidfd_getfd(r1, r5, 0x0) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='d', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r6, r0, r6}, &(0x7f0000000240)=""/112, 0x2ae, &(0x7f0000000580)={&(0x7f0000000040)={'tgr160-generic\x00'}}) r7 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000280)="f1", 0x1, r7) r8 = request_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='/dev0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r13}}, 0x48) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300)='NLBL_CIPSOv4\x00') write$RDMA_USER_CM_CMD_LISTEN(r11, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r13}}, 0x10) [ 869.321038][T19936] encrypted_key: insufficient parameters specified [ 869.401359][T19936] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. [ 869.545621][T19936] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. 11:52:40 executing program 5: setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000001c0), 0x4) mknod(&(0x7f00000007c0)='./file0\x00', 0x200ff4, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000540)='=cB\xc6+\xbf\xcc_\x81 \xd5\xb9.%\xd1\xec\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa4\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4B\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\x95\xdb\x052\xbf\xa8#\x83\a\t\xcb\x04\x1f\x1e8\xe2\xa11\x8f\xbe\xe4o\xaf\xe6\xb2z\x11\xa9\xae\xaa\xc2Wi\xa8\x9aQ7\xea\x1b\x02\xf0\x82~=\x017\xa8\xaaF\xe6\x80t\xd8\xc7\xff\x9f\aT\xc4\x94\x9a\xe9\ty\x16)\x9b>\xca;\xf4\x94\x8a\x9f{a\xe0\x86\xf0\xffp\xfcXs\xf1F\x9a\xab\xf4\xf0\x80\x1e\x9cA\x95X\xf9\x10@\xa4\x89gp;\t\b\xa7\x87n\xc7\x93\x9e\x80!R:N\x82\x00', &(0x7f0000000800)='=cB\xc6+\xbf\xcc_\x81 \xd5\xb9.%\xd1\xec\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa4\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4B\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\x95\xdb\x052\xbf\xa8#\x83\a\t\xcb\x04\x1f\x1e8\xe2\xa11\x8f\xbe\xe4o\xaf\xe6\xb2z\x11\xa9\xae\xaa\xc2Wi\xa8\x9aQ7\xea\x1b\x02\xf0\x82~=\x017\xa8\xaaF\xe6\x80t\xd8\xc7\xff\x9f\aT\xc4\x94\x9a\xe9\ty\x16)\x9b>\xca;\xf4\x94\x8a\x9f{a\xe0\x86\xf0\xffp\xfcXs\xf1F\x9a\xab\xf4\xf0\x80\x1e\x9cA\x95X\xf9\x10@\xa4\x89gp;\t\b\xa7\x87n\xc7\x93\x9e\x80!R:N\x82\x00', &(0x7f0000000a80)='=cB\xc6+\xbf\xcc_\x81 \xd5\xb9.%\xd1\xec\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa4\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4B\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\x95\xdb\x052\xbf\xa8#\x83\a\t\xcb\x04\x1f\x1e8\xe2\xa11\x8f\xbe\xe4o\xaf\xe6\xb2z\x11\xa9\xae\xaa\xc2Wi\xa8\x9aQ7\xea\x1b\x02\xf0\x82~=\x017\xa8\xaaF\xe6\x80t\xd8\xc7\xff\x9f\aT\xc4\x94\x9a\xe9\ty\x16)\x9b>\xca;\xf4\x94\x8a\x9f{a\xe0\x86\xf0\xffp\xfcXs\xf1F\x9a\xab\xf4\xf0\x80\x1e\x9cA\x95X\xf9\x10@\xa4\x89gp;\t\b\xa7\x87n\xc7\x93\x9e\x80!R:N\x82\x00', &(0x7f0000001c00)='=cB\xc6+\xbf\xcc_\x81 \xd5\xb9.%\xd1\xec\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa4\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4B\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\x95\xdb\x052\xbf\xa8#\x83\a\t\xcb\x04\x1f\x1e8\xe2\xa11\x8f\xbe\xe4o\xaf\xe6\xb2z\x11\xa9\xae\xaa\xc2Wi\xa8\x9aQ7\xea\x1b\x02\xf0\x82~=\x017\xa8\xaaF\xe6\x80t\xd8\xc7\xff\x9f\aT\xc4\x94\x9a\xe9\ty\x16)\x9b>\xca;\xf4\x94\x8a\x9f{a\xe0\x86\xf0\xffp\xfcXs\xf1F\x9a\xab\xf4\xf0\x80\x1e\x9cA\x95X\xf9\x10@\xa4\x89gp;\t\b\xa7\x87n\xc7\x93\x9e\x80!R:N\x82\x00', &(0x7f0000000f80)='=cB\xc6+\xbf\xcc_\x81 \xd5\xb9.%\xd1\xec\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa4\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4B\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\x95\xdb\x052\xbf\xa8#\x83\a\t\xcb\x04\x1f\x1e8\xe2\xa11\x8f\xbe\xe4o\xaf\xe6\xb2z\x11\xa9\xae\xaa\xc2Wi\xa8\x9aQ7\xea\x1b\x02\xf0\x82~=\x017\xa8\xaaF\xe6\x80t\xd8\xc7\xff\x9f\aT\xc4\x94\x9a\xe9\ty\x16)\x9b>\xca;\xf4\x94\x8a\x9f{a\xe0\x86\xf0\xffp\xfcXs\xf1F\x9a\xab\xf4\xf0\x80\x1e\x9cA\x95X\xf9\x10@\xa4\x89gp;\t\b\xa7\x87n\xc7\x93\x9e\x80!R:N\x82\x00'], &(0x7f00000002c0)=[&(0x7f0000000400)='em1-mime_type\x00']) syz_emit_ethernet(0x1465, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7ff, 0x8000) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r0, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000200)={0xfc00, 0x2, 0x785e}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000180), &(0x7f0000a8a000)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0xfffc, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0xea, 0x8, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r5, 0xd76000}, &(0x7f0000000100)=0x8) [ 869.655357][T19936] ucma_write: process 1243 (syz-executor.2) changed security contexts after opening file descriptor, this is not allowed. [ 869.666385][T19927] netdevsim0 speed is unknown, defaulting to 1000 [ 869.691850][T19939] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. [ 869.754749][T19939] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. 11:52:40 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00", 0x4}, {0xa, 0x0, 0x3, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:52:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:52:41 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_getscheduler(r0) pipe(&(0x7f00000000c0)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000003c0)='cpuset.mems\x00', 0x2, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140), 0x9}], 0x2) [ 870.101993][ T9861] tipc: TX() has been purged, node left! 11:52:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x300000000000000, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="020005000081000e001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x5, 0x96e}, 0xc) 11:52:41 executing program 3: keyctl$instantiate(0xc, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') mkdirat(r1, &(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000000000000}, 0x0, 0x0, 0x1, 0x0, 0x4786}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @remote}, 0x1b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @rand_addr=0x7}, {0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x3e91, &(0x7f0000000340)='vxcan1\x00', 0x9a, 0x2, 0x1f}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a}) syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x97ba, 0xa4000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000001240)={0x84, @local, 0x4e20, 0x4, 'none\x00', 0x17, 0x1f, 0x5b}, 0x8b) r4 = dup3(r2, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_BULK(r4, 0xc0185502, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) accept$inet6(r3, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="e0ffffff51d53e3bc1e5eab9b918374d4bba7b349015f38caeba3ac3634128721f81007ed8a420f96c38f3e27895d4e1cd85a4559d1b1bc3791ade7cf387551bcc47909954fd043be051fe72fc9ef1694613df22602a538792a6be089bd601021f1968181b", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) 11:52:41 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:52:41 executing program 5: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{}, "f396488ee86b4f5c", "365baed20aaaf7800baf9e08d9488463", "9e380703", "d81f151155515833"}, 0x28) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000100000000000000009700000000001821010014000100"], 0x1}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="2300000032001f00040000eb1b849ad502", 0x11, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x10) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x8b0, 0x0, 0x4b6ae4f95a5de35b) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) [ 870.780752][ T9838] Bluetooth: hci0: command 0x1003 tx timeout [ 870.786925][T17907] Bluetooth: hci0: sending frame failed (-49) [ 870.903437][T19966] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 870.993225][T19966] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 871.085877][T19966] loop4: p2 < > [ 871.365167][T19986] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 871.382822][T19966] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 871.403632][ T2629] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 871.414794][ T2629] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 871.432206][ T2630] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 871.451262][ T2630] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 871.459441][ T2629] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 871.470917][ T2629] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 871.479176][ T2629] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 871.490816][ T2629] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 871.500819][ T2629] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 871.511967][ T2629] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 871.523122][ T2629] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 871.534270][ T2629] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 871.544660][ T2629] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 871.557355][ T2629] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 871.566927][ T2629] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 871.578980][ T2629] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 871.589649][ T2630] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 871.601579][ T2630] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 871.609896][ T2629] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 872.860472][T10628] Bluetooth: hci0: command 0x1001 tx timeout [ 872.867449][T17907] Bluetooth: hci0: sending frame failed (-49) [ 874.220561][ T9861] tipc: TX() has been purged, node left! [ 874.950630][T10628] Bluetooth: hci0: command 0x1009 tx timeout 11:52:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r1 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r2 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r4 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r5 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSSERIAL(r6, 0x541e, &(0x7f0000000300)={0x4, 0x2000000, 0x3ff, 0x4, 0x9, 0x6, 0x8, 0x8, 0x0, 0x15, 0x3f, 0x0, 0x5, 0x7f, &(0x7f0000000440)=""/137, 0x1, 0x9, 0xfff}) syz_emit_ethernet(0xa, &(0x7f0000000380)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], @ANYRESHEX, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0ca966db6b60fa1e5279acb7c185275b4de6e52e602dd78c441b174f7890bc9ecbb7f96781cd5be8338ab219c65bc2a4706bb2da3a8fa38993c00c22a654757db43bea6de3f1b05170bd1b66ec794207fad9da47dc591a5eb0227ffa07178993973a2d21246fb6ad72c9dcc1ba994faf5642077e70b452f7b8bc606383551044d72c9a2767a05ccd2d28b332cf3d1cbc500fe56cafd7e4843a978d40418b8ccc5b8f0862ca9b3eac22a62590c7856c11e7d5942cb690d1dde60eaa765bc3064ae8185e3f80f501eac8a7696a3d41a649db86584ff92c75fd732dc1f6a1ea4c90f0590a7c1b535f437e64797e17d8c66641c79a746dc92d", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYBLOB="f1a5fa2871ee68c4883126229a188caef34eabd1552405526ab1a10f9773a9f41b57305cd391f114f3dea67b072857e98bc8f32d9aab576d5aff73beee2e991350f6405c6cc9d978c4dca31f7e474db6d0160ec4c12a5c6ef53137043733a0eff21ec2d63d7f22329c0939b5296ed385f2ea6c9e57a7ce39509fc276389f522e45069200d72572d5719bf525ca0df1e014679f970171e65310ec9ef25fe61519"], @ANYRES64=r0, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYPTR64, @ANYBLOB="73a617aa514444af8f19bfe9ed6ca60e315ad802324bf56f381d7081740859d4b8b642c0f487637f2e65c2d7d6d00dc8cfa9ef04bd8e4ce7fc30af9efedd925b82c1ae82fef0e001", @ANYPTR, @ANYPTR], @ANYRESHEX], @ANYRESOCT, @ANYBLOB="5635c441c04e7eb7b551d91fe07e1fba955024fb19e968c8", @ANYRESOCT=r5, @ANYRES16=r2, @ANYPTR64, @ANYRES64, @ANYRESOCT=r4], 0x0) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) 11:52:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x540c, &(0x7f0000000000)) 11:52:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:52:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:52:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)) r0 = socket(0x200000000000011, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000340)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000006c80)={0x0, 0x3, &(0x7f0000006b40)=@framed, &(0x7f0000006b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) bind$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2886150000527ec0083f732687858a4c78a0d1bf6dd82e932e558b1e0574f12878483522a916f05dd690d392bc6d9006f279b9", @ANYRES32, @ANYBLOB="000000000a000200ffffffffffff0000"], 0x28}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2400, 0x0) exit(0x2) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000100)={0x400, 0x7}) write$ppp(r3, &(0x7f0000000000)="e4477bf373db07456db3a5ed98bf6422f1e6d962ce6ae8dabc8558c32e8fc6b1c5895c0095b691f903ac269692b481be85dcb6d96b2950a75f30e00e294caa7c42c66b83c30b663d6dd4b573380f99e92ab6db76d26eeb1f4b1ff452fb0690cc4b6d15085e7568e7c8364c8aa702bfd4693fa707d24bb23a15fc31f3c39ba7", 0x7f) unshare(0x40000000) 11:52:50 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x82, 0x0) write$P9_RMKDIR(r3, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0x8, 0x1, 0x8}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x10010000, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}, @IFLA_BR_MCAST_IGMP_VERSION={0x5}]}}}]}, 0x44}}, 0x0) [ 879.019957][T19998] __nla_validate_parse: 2 callbacks suppressed [ 879.019969][T19998] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 879.153808][T20012] IPVS: ftp: loaded support on port[0] = 21 [ 879.209787][T19998] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 879.250870][T19998] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 879.272126][T19998] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 879.284089][ T9815] Bluetooth: hci0: Frame reassembly failed (-84) [ 879.294692][T19998] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 879.333473][T19998] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 879.337654][T20012] netdevsim0 speed is unknown, defaulting to 1000 [ 879.378332][T20015] netlink: 17731 bytes leftover after parsing attributes in process `syz-executor.5'. 11:52:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) [ 879.431016][T19998] netlink: 17731 bytes leftover after parsing attributes in process `syz-executor.5'. 11:52:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01120000000000000000090000003c00030014000600ff0900000020000000000000000000010800030000000000140002007663616e3000000000000000000000000800010002000000"], 0x50}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0004f409e323490f25bb41a94f810ae55e0429bd7000fddbdf250a000000080004001c65000008000600010100000800040006000000"], 0x3}, 0x1, 0x0, 0x0, 0x20008090}, 0x200008d1) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r4}}, 0x10) [ 879.484121][T20018] netlink: 17731 bytes leftover after parsing attributes in process `syz-executor.5'. [ 879.547590][T20019] netlink: 17731 bytes leftover after parsing attributes in process `syz-executor.5'. 11:52:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x2, [@multicast1, @empty]}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) fchdir(r5) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) [ 879.648109][T20027] IPVS: Error joining to the multicast group 11:52:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) clock_gettime(0x2, &(0x7f00000000c0)) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000280)={0x8001, 0x1, 0xdb, &(0x7f0000000180)="890520cbe460fb8ff5d747e9894cce27150cefc8e94db29907327f313c04d5aae40b1967556763adf0201086a9ccbc4fa237af38701280d1ef8b4bbda004e61f9e648a3d855cb5a27a824c2d7178b7223f56b416fae3dd62b8b97e857b08db4e556028de95e818d6e1640c39b54d40acab54abd62ab0f6e3a28489065a2297838b2c4d258fae49ecd7091ef3d6f063e45c2514bf7b90996381baf36ec7f71fc53dc95ce1bfcad6fdab956a7d6a7f22568d612474b0506e51fe6622459d909c34d327842f15def99742f001ec1c4d8e2832234b1a96d5053611e952"}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 879.934827][T20040] IPVS: ftp: loaded support on port[0] = 21 [ 879.996047][ T9815] tipc: TX() has been purged, node left! 11:52:51 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1, 0x2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:52:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:52:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0xfffffec5}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='status\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r2, 0x89e5, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r3, 0x89e5, &(0x7f0000000000)) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x0, 0x5}, &(0x7f0000000140)=0xc) clone3(&(0x7f0000000340)={0xf100, &(0x7f0000000080), 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)}, 0x50) creat(&(0x7f0000000100)='./file0\x00', 0x10003) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x400200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f00000003c0)={0x0, 0x6, 0x9, {0x3f, 0x6}, 0x9, 0x8}) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r7, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$packet_int(r7, 0x107, 0xb, &(0x7f0000000580)=0x10000, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cachefiles\x00', 0x10000, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32, @ANYBLOB="0000000009e60000001c0012000c000100626f6e64000000000c0002020800010006000000aff773731037b74ab9c560200fe90c1e043435807aa1bfebdacb9fd7d836a32151e42d33616b2b3916144c16451c4a802b927ecae320257fe655cae81e7acef1dee2ddd908bfeb8f9458b1beffae3c349c4562a4ab02156b4711df96b9289acd777ba869aa4fb33806749b81bb6e914ac416f68a788cce9ea4d8c520d0fb21795cff71d4d676362a00e8f04cb83ab53fadf29e1e629869d70f841c100eba61f05815d09aa2a2d61a165b23895e7d20140cfa6b25"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="000000123d4220de90581fff7f0000005a00000054826795820e4ef9fbbe8517a5c40e2f"], 0x2c}}, 0x0) 11:52:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) [ 881.360536][ T9803] Bluetooth: hci0: command 0x1003 tx timeout [ 881.366724][T17907] Bluetooth: hci0: sending frame failed (-49) [ 883.430862][ T9803] Bluetooth: hci0: command 0x1001 tx timeout [ 883.436991][T17907] Bluetooth: hci0: sending frame failed (-49) [ 885.500554][ T9803] Bluetooth: hci0: command 0x1009 tx timeout 11:53:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x540d, &(0x7f0000000000)) 11:53:00 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000001c0)={0x0, 0x2, 0x4, 0x40000000, 0xc824, {r2, r3/1000+10000}, {0x4, 0xc, 0x5, 0x3, 0x7, 0x0, "c1cf3e26"}, 0x672, 0x1, @planes=&(0x7f0000000180)={0x5, 0x1, @mem_offset=0x1, 0x80000001}, 0x1, 0x0, r4}) write$FUSE_DIRENT(r5, &(0x7f0000000240)={0x38, 0x0, 0x1, [{0x2, 0x3, 0xf, 0x1, 'vboxnet0trusted'}]}, 0x38) 11:53:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="d050f90598fb69994cb79ad98c35c929eaf6ef1847e34c54216b0e5604191a6810c713eef9627cd4b5eaa7df46f5c9495b47ff52ee87ddd78948927261f7b7fb64c488bf2f4773ba37fbff2de2b763241398dd4af843055451f95e782ef52e435fce112b544270f822e213ed1f993d7afaf336769237e6c24c297584a172"], 0x1) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r7, r6, 0x0) getsockname$netlink(r6, &(0x7f0000000200), &(0x7f0000000340)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000005c0)=0xe8) r10 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) ioctl$sock_inet_SIOCGIFBRDADDR(r10, 0x8919, &(0x7f0000000140)={'vlan1\x00', {0x2, 0x4e22, @rand_addr=0x6}}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x800, &(0x7f0000000600)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030323437362c6d6f64653d30303030303230303030303030303030303030303031313c6d6f64653d3030303030303030303030303030323430332c6d6f64653d30303030303030303030303030303030303030303030372c6d6f64653d30303030303030303030303030303030303031303030302c6d6f64653d30303030303030303030303030303030303030333737372c6d6f64653d303030303030303030303030352c6d6f64652c1c3d30303030303030303030303030303030303030776e65723e00"/232, @ANYRESDEC=r8, @ANYBLOB=',fowner>', @ANYRESDEC=r9, @ANYBLOB="2c7375626a5f757365723d8f2c736d61636b66736861743d2f747275737465642c646f6e745f61707072616973652c726f6f74636f6e746578743d757365725f752c66736e616d653d706f727430002c00"]) r11 = semget$private(0x0, 0x0, 0x0) semctl$GETALL(r11, 0x0, 0xd, &(0x7f0000000200)=""/105) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) semctl$IPC_SET(r11, 0x0, 0x1, &(0x7f0000001480)={{0x3, 0xee00, r12}, 0x6}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) getresgid(&(0x7f0000000380), &(0x7f0000000540), &(0x7f0000000580)=0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000700)={0x1f0, 0x0, 0x5, [{{0x6, 0x3, 0x33, 0x3f, 0x1, 0x3e07, {0x3, 0x800, 0x5, 0x200, 0x2, 0xefc, 0x9, 0x1, 0x8, 0x81, 0x1, r5, 0xee01, 0x2, 0x5}}, {0x2, 0xac3, 0x5, 0x5, 'vcan\x00'}}, {{0x3, 0x1, 0x8, 0x5, 0x20000, 0x1, {0x3, 0x197a, 0x9, 0x6, 0x1000, 0x8, 0x2, 0x8, 0x1, 0x7ff, 0x7ff, r9, r12, 0xfffffffa, 0x80000001}}, {0x2, 0x0, 0x5, 0x5, 'vcan\x00'}}, {{0x3, 0x3, 0xff, 0xfff, 0xffff52df, 0x5, {0x2, 0x1, 0x3, 0xd2, 0xe5a, 0x100000001, 0x80, 0x5, 0xffffff3e, 0x4, 0x3, r13, r14, 0x5, 0xd1}}, {0x4, 0x4, 0x5, 0xff, 'vcan\x00'}}]}, 0x1f0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r17}, [@IFLA_MASTER={0x8, 0xa, r15}]}, 0x28}}, 0x0) 11:53:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:53:00 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x7, 0x300) pipe(0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x4000, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000240)) getpid() ftruncate(0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) fstatfs(r2, &(0x7f00000004c0)=""/156) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000140)="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") setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x12100, 0x0) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac6188d1c739d953059bcecc7a95425a3a07e758054ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xffffffffffffffeb, 0x200003e8, 0x0, 0x27) r5 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) sync_file_range(r5, 0x2, 0x40, 0x2) 11:53:00 executing program 4: r0 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000480)) userfaultfd(0x80000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/consoles\x00', 0x0, 0x0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r5, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) perf_event_open$cgroup(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x86, 0x5, 0x0, 0x4, 0x40108, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x4, @perf_config_ext={0x3, 0x7}, 0x200, 0x2, 0x385a, 0x8, 0x2, 0x729, 0x1}, r5, 0x2, r1, 0xe) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x40b02, 0x0) accept4$netrom(r8, 0x0, &(0x7f0000000780), 0x800) dup2(r7, r3) syz_open_procfs(0x0, &(0x7f0000000240)='auxv\x00') ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000001c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r9, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c677201c9580469643d", @ANYRESDEC=0x0, @ANYBLOB="f4eed3f63ec990449b112954861243e5744509a9f70280c3cc95568b917631e3fbf5e48a52354d66a8a6c70770046a239b05b2e842cababb6d2ba5319d493b799c1ee36bd303f47952ae50321e9aee054a8a42e22ec5fcd963b6fbca933076feebebcc1f4f50adaf80a2a6d06e6028b824f337d5b74785153b25594619a5976f32f2b006de84cca5536ebe22e954ec16fcc081af9e71f246d7842616a66cd549761266"]) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="66000000003d517594b83fee46e44c9b0155233fe8dc3da1ad9f61eb270dfe40afc43d2778636e2d0a9f1842460ca941de59707d2d9529718d6f5b11346a67e5dfaeb68bacf1d68cc496423e6c11b993", @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="a13f"]) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) [ 889.918903][T20092] __nla_validate_parse: 8 callbacks suppressed [ 889.918926][T20092] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. [ 890.062220][T20093] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. 11:53:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5413, &(0x7f0000000000)) [ 890.127295][T20099] netlink: 47979 bytes leftover after parsing attributes in process `syz-executor.2'. 11:53:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a0500000000000000422cb4963a160161b1cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x34d, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r3, r2, r3}, &(0x7f0000000240)=""/112, 0x2ae, &(0x7f0000000580)={&(0x7f0000000040)={'tgr160-generic\x00'}}) keyctl$setperm(0x5, r3, 0x4000400) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 890.182446][T20101] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 890.361486][T17907] Bluetooth: hci0: sending frame failed (-49) [ 890.429065][T20100] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. [ 890.448099][T20113] could not allocate digest TFM handle  [ 890.523347][T20094] fuse: Bad value for 'fd' 11:53:01 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffa, 0x6d1a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100636273001c0002001800010000000000070000000500000000feff0000000000000000a2e387d63e7217590578003f91160e12e5cab38ea6d14b05d0df915a3f958c4896775630"], 0x48}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={@mcast1, 0x2b, r6}) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x800, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r10}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r9, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r10}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {r10, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x2, @mcast2, 0xe975}, @ib={0x1b, 0x0, 0x5, {"7b5ed77f47b93cb4e98a931c3638576b"}, 0x307, 0x4000000000000000, 0x10000}}}, 0x118) sendto$inet(r2, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r11 = socket(0x11, 0x0, 0x0) getsockopt$SO_J1939_ERRQUEUE(r11, 0x6b, 0x4, 0x0, 0x0) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x9000000) [ 890.608244][T20094] fuse: Unknown parameter 'f' 11:53:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x8, 0x22000) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 890.710308][T20094] fuse: Bad value for 'fd' [ 890.900084][T20121] fuse: Unknown parameter 'f' 11:53:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:53:02 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x9]}, 0x8) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r4, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000200)={0x7, 0x5, 0x4, 0x0, 0x8000, {0x0, 0x7530}, {0x5, 0x1, 0x0, 0x3, 0x4, 0x3, "59c6ee26"}, 0xfff, 0x2, @fd, 0x100, 0x0, r0}) r6 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="effd00001100a740671e840f56edec8d3ecfd6b2e071bb34779994088e1bdd74b473fb10ecf9"], 0xfdef) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0x282cc1, 0x0) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = dup3(r8, r9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r10, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x7c, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b000) r12 = socket$inet(0x2, 0x4000000805, 0x0) r13 = socket$inet_sctp(0x2, 0x5, 0x84) r14 = dup3(r12, r13, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r13, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r14, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r13, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r14, 0x84, 0x7c, &(0x7f000059aff8)={r15}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000003c0)={r15, 0x2, 0x10}, &(0x7f0000000400)=0x35) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000440)={r16, 0x4, 0x3, 0x80000000}, 0x10) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000280)={r5, r6, 0x9}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r17}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r17}}, 0x10) 11:53:02 executing program 4: r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x1010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x6, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) geteuid() accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000000c0)={0x4, 0x7699, 0xfffffff8}) r1 = getpgid(0x0) rt_sigqueueinfo(r1, 0x21, &(0x7f00000000c0)={0x11, 0x7699, 0xfffffff8}) r2 = syz_open_procfs(r1, &(0x7f0000000100)='auxv\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r4, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r5 = accept4$alg(r4, 0x0, 0x0, 0x1800) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000001c0)={{r2}, 0xefd, 0x3, 0x200}) r6 = socket(0xa, 0x3, 0x6) connect$bt_rfcomm(r6, &(0x7f0000000000)={0x1f, @any, 0x8}, 0xa) bind$inet6(r6, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f00000000c0)='./file0\x00') r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r8, &(0x7f0000000180)='./file0\x00', r7, &(0x7f0000000640)='./file0\x00', 0x0) [ 891.209203][T20140] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. 11:53:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000115000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000048c000/0x1000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) gettid() r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 11:53:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000280)={0xffffffff, 0x0, 'client1\x00', 0x7fffffffc0000002, "3831297ff54b1b9a", "9340dfccd0f371ea811f7f9adb764c5fc69bfa503c0cf2aea40102c7fc3ac5b8"}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3660, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x653a26df25669733, 0x70, 0x1f, 0x0, 0x4, 0x0, 0x0, 0x4a, 0xa8000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x80, 0x9, 0x0, 0x3}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r4, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$NBD_SET_SIZE(r4, 0xab02, 0x4) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000540)=""/234) socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000076fb6299eb6284070000000000fd85d16e79bad40ac3794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea0000000000000000000000000000000000000500000000000000000000000000000000000000ee0100000001000000004020006e52a2f2d5ea770ec373cf0664c0072f193d0d7eadd3fecac43088869c6aed9ecb565dfd89d9c0cb9aaafdba2d3f052cc4cca8d9"], 0xb8}}, 0x0) sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d3, &(0x7f0000000000)={0x4, 0x0}) [ 891.746045][T20142] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. 11:53:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = getpid() r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0xe, &(0x7f000059aff8), 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={0x0, 0xffff}, 0x8) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006a80)=[{{0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000000)=""/67, 0x43}}, {{&(0x7f0000000880)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, 0x0}, 0x7728}, {{&(0x7f0000005540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x40000201, 0x0) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f0000006d00), &(0x7f0000006d40)=0x4) ftruncate(r6, 0x200004) sendfile(r0, r6, 0x0, 0x80001d00c0d0) 11:53:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup(0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r4, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @remote}}}, 0x84) renameat(r1, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00') ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000000)={0x2, 0x2, 0xb915}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in, 0x0, 0x4, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) perf_event_open$cgroup(&(0x7f0000000480)={0x7, 0x70, 0x27, 0x2, 0x1, 0xbb, 0x0, 0x42c, 0x2000, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3ff, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x80}, 0x0, 0x7fff, 0x9c, 0x0, 0x2, 0x6, 0x1ff}, r4, 0x6, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0xe0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r5, @ANYBLOB="20002cbd7000fbdbdf250800000054000380060004002e9f0000060007004e24000014000600ff020000000000000000000000000001050008004000000005000800400000000600040000020000140002006272696467655f30000014000180060004004e21000008000b00736970001400b980080003006867e9f08e52006900000800030003000000080006000010000008000600f8ffdcff"], 0xa0}, 0x1, 0x0, 0x0, 0x20008c0}, 0x0) 11:53:03 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) [ 892.420440][T14010] Bluetooth: hci0: command 0x1003 tx timeout [ 892.426581][T17907] Bluetooth: hci0: sending frame failed (-49) [ 892.611806][ T27] audit: type=1800 audit(1583322783.690:9488): pid=20171 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16936 res=0 [ 894.460829][T14010] Bluetooth: hci0: command 0x1001 tx timeout [ 894.467014][T17907] Bluetooth: hci0: sending frame failed (-49) [ 896.540758][T10841] Bluetooth: hci0: command 0x1009 tx timeout 11:53:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5414, &(0x7f0000000000)) 11:53:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:53:11 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000b, 0x8010, 0xffffffffffffffff, 0x10000000) syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) 11:53:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180)="8e9a8760a6e4905a8c220e8d8dd0447e3a1e11e2546f13a7934d30bdc9b7050b23f860f8df432b224c399d34920105fa329d3a870240261739cea4fa40c6006f24", 0x41, r0}, 0x68) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:53:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x400) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000100)={0x200, 0x2, 0x4}) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x1c, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @rand_addr="75703c3d081fb29c48f673a1cc127046", {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="b24c0100", @ANYRES16=r3, @ANYBLOB="6cec6197b59bd6cda1afe80c00000000000080fa9993ab8f00"/36], 0x3}, 0x1, 0x0, 0x0, 0x20040004}, 0x4040000) r4 = socket$netlink(0x10, 0x3, 0x15) r5 = socket$netlink(0x10, 0x3, 0x15) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x200002, 0x0) fspick(r6, &(0x7f0000000440)='./file0\x00', 0x1) write$binfmt_misc(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f00000003c0)={0x0, r4, 0x3, 0x5, 0x8e98, 0x1}) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x2, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x2000c001) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffff7c63, 0x4}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="99cd12ade571"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8004000) 11:53:11 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101002, 0x0) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x90800, 0x0) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0xa30000, 0x3, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990afe, 0x80000000, [], @p_u16=&(0x7f0000000080)=0x8}}) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000140)={{0x1, @addr=0x4}, "4d809e0a5ff4143c4483862e8a70f4026f4993d0ad2b5cf4b8c9456141b4096f", 0x1}) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0x6, 0x1, 0x12, 0x4, 0x1}, 0xc) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000280)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsu\x00', 0x100, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000380)={0x6000, &(0x7f0000000300), 0x1, r4, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001640)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/65, 0x41}, {&(0x7f0000001440)=""/193, 0xc1}, {&(0x7f0000001540)=""/205, 0xcd}], 0x4) r5 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0xa0) write$UHID_CREATE(r5, &(0x7f00000017c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000016c0)=""/202, 0xca, 0x8, 0x5162, 0x8, 0x8, 0x40}}, 0x120) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001900)='/dev/ubi_ctrl\x00', 0x10000, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001980)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000001bc0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b80)={&(0x7f00000019c0)={0x1a8, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x19}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x18}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14}}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x60000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x37}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2f}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x51}, 0x10) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) vmsplice(r8, &(0x7f0000001e80)=[{&(0x7f0000001c00)="d0e804220494f4ffc031", 0xa}, {&(0x7f0000001c40)="5ce3854c31d5f887156499d42637211443a8694fd810ea551047d9314fc4f5229bf0529327cfb5285d313c31c18bbae044558bf3341538d22b08dfd5b78aa5ca1e6e9f1773381094234ed09aeabff97a", 0x50}, {&(0x7f0000001cc0)="bdd2c0d489505163762a61a205a2c8e873e50296185978a74d5a66f259412fc4848633c0910e14f841932663c82c19368ed4a7252d96147f5ac5d0613d119f28524c0682d45962f42494c87692436942e06d48c435bd00a97ba04a736cc206684de418f5b3e7ac29187b8c784906bb9572c4cc70a46496a64c86f8825671950d50b6a53b3f6599faca5347c0bb127622e606b1385a4bfcd6", 0x98}, {&(0x7f0000001d80)="45f47d4f4789a338b05379df349050b5914d4eb603a17667c55e965cb22b7a9cb3810ce36fbda937fb46bc806d62fd633be8a14db2bb24176ad9bfbe95cff8ce0383446a2926ed2baa01a3ce785c5c615ea851b5205ffe8afe5213a250609fc514b182e19849d88a8f0a6cb4aa00a3d23e2aa0e60943e688174d8dd1701c981c64efc3df621c3f9b40e55a610407b8170825ea1b3ed4bfce35efa60994dc27fbe7a03870439f9b52593afecefb0197cda0682a16d6cbe0c2ea80489dd3aad966eea339e127e0f673d055cc870c59569f2b16c41bc0970c5e", 0xd8}], 0x4, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001ec0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r9, 0x541c, &(0x7f0000001f00)) ioctl$IMGETCOUNT(r9, 0x80044943, &(0x7f0000001f40)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000002000)={0x9d0000, 0x2, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000001fc0)={0x9b0951, 0x1, [], @string=&(0x7f0000001f80)=0x4}}) ioctl$FBIOGETCMAP(r10, 0x4604, &(0x7f0000002140)={0x200, 0x6, &(0x7f0000002040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002080)=[0x0], &(0x7f00000020c0), &(0x7f0000002100)=[0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000002180)=@assoc_id=0x0, &(0x7f00000021c0)=0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000002200)={r11, @in6={{0xa, 0x4e22, 0x3f09, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0x9, 0x0, 0x10000, 0x3, 0x5}, &(0x7f00000022c0)=0x98) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000002300)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x8de3}}, 0x10) r12 = syz_open_dev$audion(&(0x7f0000002340)='/dev/audio#\x00', 0xf766, 0x20000) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000023c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r12, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x28, r13, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4088840) 11:53:11 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x38a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x8) dup2(r0, r1) r2 = socket$inet6(0xa, 0x2, 0x0) dup(r2) r3 = dup(0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x6e30c0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="48000000010007050000000000ffff0000000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100636273001c0002001800010000000000070000000500000000feff0000000000000000a2e387d63e7217590578003f91160e12e5cab38ea6d14b05d0df915a3f958c4896775630"], 0x3}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000500)={'batadv0\x00', r8}) recvfrom$packet(r4, &(0x7f00000003c0)=""/79, 0x4f, 0x40, &(0x7f00000006c0)={0x11, 0x16, r10, 0x1, 0x9, 0x6, @broadcast}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000001c0)) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a5c8802a9d8aea872943afd874e2f98b579a7086270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='tes|_dummy_encryption,\x00']) [ 900.882698][T20195] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. [ 900.914722][T20195] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. [ 901.006634][T20195] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. [ 901.024156][ T21] Bluetooth: hci0: Frame reassembly failed (-84) [ 901.059266][T20206] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 901.082362][T20207] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. 11:53:12 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000001680)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="af"], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x8000, 0x0) io_submit(r2, 0x0, &(0x7f0000000540)) [ 901.132109][T20195] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.4'. 11:53:12 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 11:53:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r5, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000000)={0x2}, 0x1) r6 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) [ 901.387579][T20214] EXT4-fs (loop5): Unsupported filesystem blocksize 0 (1923657432 log_block_size) [ 901.477035][ T27] audit: type=1804 audit(1583322792.550:9489): pid=20225 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir964400407/syzkaller.DorUrO/303/bus" dev="sda1" ino=16947 res=1 [ 901.579854][ T27] audit: type=1804 audit(1583322792.660:9490): pid=20231 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir964400407/syzkaller.DorUrO/303/bus" dev="sda1" ino=16947 res=1 11:53:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r5, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000000)={0x2}, 0x1) r6 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:53:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) [ 903.100557][T14010] Bluetooth: hci0: command 0x1003 tx timeout [ 903.108346][T17907] Bluetooth: hci0: sending frame failed (-49) [ 905.190743][T14010] Bluetooth: hci0: command 0x1001 tx timeout [ 905.197095][T17907] Bluetooth: hci0: sending frame failed (-49) [ 907.270551][T14010] Bluetooth: hci0: command 0x1009 tx timeout 11:53:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5415, &(0x7f0000000000)) 11:53:22 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:53:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xa4, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) fcntl$getflags(r0, 0xb) 11:53:22 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r5, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000000)={0x2}, 0x1) r6 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:53:22 executing program 5: mknod$loop(&(0x7f0000005700)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000340)='/dev/loop0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuseblk\x00', 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}], [{@pcr={'pcr', 0x3d, 0x14}}]}}) 11:53:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(0xffffffffffffffff, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r8, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:53:22 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r5, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000000)={0x2}, 0x1) r6 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) [ 911.700257][T20258] fuseblk: Unknown parameter 'pcr' 11:53:22 executing program 3: unshare(0x8020000) semget$private(0x0, 0x403, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000080)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @multicast1}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x5, 0x3000}], 0x1, 0x0) setns(r4, 0x0) [ 911.775308][T20265] fuseblk: Unknown parameter 'pcr' [ 911.799355][ T21] Bluetooth: hci0: Frame reassembly failed (-84) 11:53:22 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, 0x6, 0x81, [], &(0x7f0000000000)=0x40}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000000c0)) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) write(r2, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCOUTQ(r2, 0x5411, 0x0) [ 911.912735][T20268] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. [ 912.008954][T20277] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. 11:53:23 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "6294"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0xb0b980, 0x0) accept4$inet(r4, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r5 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x80000000, 0x5, 0x4, 0x4000a00b, 0x200, {}, {0x2, 0x0, 0x0, 0x2, 0x40, 0xff, "39e09d15"}, 0xdccf, 0x4, @fd=r4, 0x1, 0x0, r5}) socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) 11:53:23 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r4, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000000)={0x2}, 0x1) r5 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) 11:53:23 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7ffc}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x2) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)={0xaed, 0x0, 0x4, 0x100, 0x4, {}, {0x3, 0x0, 0x3, 0x0, 0x1f, 0x4, "4b0e5a54"}, 0x8, 0x0, @userptr=0x2dc, 0xf7eb, 0x0, r3}) r5 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000008000/0x2000)=nil) shmctl$SHM_STAT(r5, 0xd, &(0x7f0000002500)=""/4066) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000240)=""/134) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) inotify_init() write$cgroup_int(r1, &(0x7f0000000140), 0x12) r6 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r6, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000300)={0x30, 0x4, 0x2, "75ded7dbee82723b529bf56581279d493e403453f2652d65acd3e5dde2f8b74f6e7736eba5e2d06d5f5ff6f17d2c26b5"}) [ 912.217233][T20283] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. [ 912.443343][T20289] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. [ 912.526207][T20283] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. [ 912.573304][T20283] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. [ 913.820534][ T9817] Bluetooth: hci0: command 0x1003 tx timeout [ 913.828528][T17907] Bluetooth: hci0: sending frame failed (-49) [ 915.900546][ T9817] Bluetooth: hci0: command 0x1001 tx timeout [ 915.907035][T17907] Bluetooth: hci0: sending frame failed (-49) [ 917.990610][T14010] Bluetooth: hci0: command 0x1009 tx timeout [ 919.906563][ T0] NOHZ: local_softirq_pending 08 11:53:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5416, &(0x7f0000000000)) 11:53:32 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r4, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000000)={0x2}, 0x1) r5 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) 11:53:32 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f7275732c776f726b557f723d030000000065312c75707065726469723d2e2f66696c6530"]) r0 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r1 = dup3(0xffffffffffffffff, r0, 0x0) inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x10000050) chdir(&(0x7f00000002c0)='./bus\x00') r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', &(0x7f0000000340), 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r4, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r5 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000004c0)=0x656c) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000640)='./file0/file0\x00', 0x0) 11:53:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000000700)={0x8000}) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) 11:53:32 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x400000) 11:53:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(0xffffffffffffffff, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r8, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:53:33 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r4, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000000)={0x2}, 0x1) r5 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) [ 922.000928][T20312] overlayfs: unrecognized mount option "workUr=" or missing value 11:53:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x1, 0x7, 0x0, 0xec, 0x4}) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setreuid(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='upperdir=./file4,index=on,}etacopy=off,lowerdir=./file0,xinooff,nfs_export=off,nfs_export=on,indexJ\b[yobj_role=nfs_export=off,smackf']) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) creat(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x5, 0x400000) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000400)=@ccm_128={{}, "78395c95d0fdfb60", "520b1e4aa0f71c22ff00", "a9016007", "f6885a10e7196cef"}, 0x28) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) [ 922.043466][T20312] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 922.077294][ T7] Bluetooth: hci0: Frame reassembly failed (-84) 11:53:33 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x2000, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100636273001c0002001800010000000000070000000500000000feff0000000000000000a2e387d63e7217590578003f91160e12e5cab38ea6d14b05d0df915a3f958c4896775630"], 0x48}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0xe}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[], [], @remote}}]}, 0x5c}}, 0x4004080) [ 922.219371][T20326] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. [ 922.251347][T20320] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. 11:53:33 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r5, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000000)={0x2}, 0x1) dup2(r4, r3) dup2(r2, r0) dup2(r0, r1) [ 922.356741][T20312] overlayfs: unrecognized mount option "workUr=" or missing value [ 922.440882][T20337] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. 11:53:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(0xffffffffffffffff, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r8, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:53:33 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r5, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000000)={0x2}, 0x1) dup2(r4, r3) dup2(r2, r0) dup2(r0, r1) [ 924.140520][T10841] Bluetooth: hci0: command 0x1003 tx timeout [ 924.147939][T17907] Bluetooth: hci0: sending frame failed (-49) [ 926.220529][T10841] Bluetooth: hci0: command 0x1001 tx timeout [ 926.227469][T17907] Bluetooth: hci0: sending frame failed (-49) [ 928.300534][T10841] Bluetooth: hci0: command 0x1009 tx timeout 11:53:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5418, &(0x7f0000000000)) 11:53:43 executing program 5: r0 = semget(0x1, 0x1, 0x160) semop(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f00000001c0)=""/142) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r2 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00002bbd7000fedbdf250500000038000380140002006261746164765f736c6176655f310000050008000300000008000500e00000010800050000000002080005000000000014000180060004004e21000008000500040000001800018006000200000000000c00070010000000080000007c000380060007004e2400001400020076657468305f6d61637674617000000014000600b8dfcddd988b67c20284d84c701a4300080005008000000108000100000000000500080006000000140002006272696467655f736c6176655f30000008000500ac1e01011400020076657468305f766972745f7769666900"], 0xf4}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) ioprio_set$pid(0x1, r1, 0x6) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(0xffffffffffffffff) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r4, &(0x7f0000000580), 0xefee) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0x0, 0x2, {0x7, 0x1b, 0x0, 0x154d5493}}, 0x50) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) umount2(&(0x7f0000000540)='./file0\x00', 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f00000000c0)={'team_slave_0\x00', {0x2, 0x4e21}}) 11:53:43 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x6) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000009c0)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f00000000c0)="cd4f9be26bd8cd83397f9375c72cf7", 0xf}, {&(0x7f0000000300)="da807812bb25f70ccb1828920b77c2fa460070ae258ab5e14951e449291b9fdb947c1a15ca1dbfc36bd0a15b4a6a7ccaf9f69155fed8c6d0", 0x38}, {&(0x7f0000000340)="fc67ddf840abe065c903396b063ff32eea0437c869d1df5a7c7e5cb93d71cd0e", 0x20}, {&(0x7f0000000380)="b213536de3164465efa1b41294362eb607a1afcdbacabfd4ebf5f2b3cba4627d462f7b576fcb0503b85b4a4fa057f4e4bed0f4c14c262af0e69a41e8caee1f207a26236d44e01e0a895916cf8214c600ba7a3e15c4a5876fdc469ac7376073bba07f1e4f36cabc4ba5e450f8416445797cced7a0d3db3b559bc04a0e61262ce8f1db0a29673a5e4918c991cbf9ba5ca2f0267aca110c7012b8389c719e574d1ba798cefbc6bfd03b8ff1ed7f50a00847e2b1e146ac65", 0xb6}, {&(0x7f0000000440)="050a4e126e1f1626b568c3786d3b00ab53f211f77f40f236e73ebb98b81edae2de2255852d33cd07ceeb159deb4a446b365c12c7792ac454b5d491f97e0ea46df971b037d7513d25de4366dabb8b68908bf4f679ba9c65bf336ee48f634e1d81d1c2614752d01cec647e88c3b0b9889367c541894c2ebbed42f3db951dcb9eebb8e6e0e99b799fbf8cc663bba04346c6f4d6f00ccac7ad950b3371f04d8f54bab8e045f28265b95ad2614e3cea36f1d79133eaebfb7292fd0840de157b50febbe4", 0xc1}, {&(0x7f0000000580)="fe29ddc6738ec96240934bb1c79b4e67780ad9b40f179fbfe1a6b00907d5724f5dc6a25ec5297411b49b131e2653faabff81b36234545dd6ff5957f95d95d59b0b7916fe5217135660f30c26e2c5d67a4d65afd1c43b1a5e9fe3f5741a44ecc64c02db000e4d170f598a08a0dc79b8f9d63d001ca3b156ee6a6f84c4ffac243ebed635fd2f354da3b4a406b039119943434f13376cdfb41400464049d9dcd93fa3d63b4053af89f959810de1eca163bc92bd4ce6e65a0fdec2897f589eaae53ef12a26fc", 0xc4}, {&(0x7f0000000680)="a5985736a52bab14cbeed24109906b21df39fcfd8437c2e46020807ac0e979168734b27ef56eca747b20386c5b0aa01c19fcbe21e7c944fe8f4e78b9c27860afaa1b7f095a063462ddb9e3e8adbb35daf08d3179e5f3af653d", 0x59}, {&(0x7f0000000700)="00d87c5c80deeb300920d75886165d801d9cdaee1998237759b9ee8a5b1ebb213380838b27924bfe3c4a55d639e085f6e4d5f3eaee91b58ecd70f127fca636578adceea354bde8fbbe05e63da622eff3027ad95e237f6b42403c4e180f47f1e599eb9e7716bea5fe75b17efcc44705b8e6de75e2b27305660cbb872408625a76c9a0305721", 0x85}, {&(0x7f00000007c0)="943cebd45880950d237f0f4741183464ec03422791f05fc41bd1fcf8fb2906f4b6b5b0725f68b67fdcd02a1cd8b33dc43016dbe3eb1c2bf8204df646dc6ba28c89792e3b9efc853fad2ecd087ad652344fb8d012c74c3c25d0d99364cdd2845189ac0bce4bbd0a66fbb553f5cd75ba6ac140e71efd5659a274741ff07b34d3f76dbbe3bc2f05342f9134496da90f32a6e8ea65c9dbebd0b8537eeb17d8508afa088ca3da85cdb1b829745f9806779106e3fecf1ad563be4c69739f552b81dc675668bf589f0780eb67a27cae84fb6df2039477369b6dc54eb82beeea13bf9389699337fa1890fa5419ee4875776f169f5c0b", 0xf2}, {&(0x7f00000008c0)="3e5e030bfdf1cb42", 0x8}], 0xa, 0xd) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0x3b2a0152365a23e6, &(0x7f0000000180)="12557fb981f9c625ece9b695d0c0dd93a158823c17899df27e86e8863af1ae551dfa1ab719e31b2a135152e5715625ef75c9807dd9ccd9b6e8d8a1bd97fc9ac44d97b3c2e1ab29c024e25de96fd4b61afef6d49d6e49ad4b13fc73119ccd6d666cf2fe8521e65199fe5419788d915f1c33cc7cd08eb915cddef5948f21e4bc8a60787b407b66c4def7fd43455db849898565843918cdfba8e635cbaa2415e5a2c584d6c7ec897b162928a474b8df054175c5741998832e129d514322fb8052a2b1ffce9bd8772a1284f1b659b8f09fed4157ee27d5d39085d521019c5aa3f79a35531b305544200e48981e01308a37c913b4bc3cdfe13233", 0xf8) modify_ldt$write2(0x11, &(0x7f00000002c0)={0x8000, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 11:53:43 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r5, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000000)={0x2}, 0x1) dup2(r4, r3) dup2(r2, r0) dup2(r0, r1) 11:53:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r6, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r6, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r8, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:53:43 executing program 3: writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300094700bb65e1c3e4ffff06000000020000004500000025000000190029", 0x23}], 0x1) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x1, 0x7, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x44814}, 0x4008880) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r4 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="effd0000f3ffa63a671e030000006a8d"], 0xfdef) read$fb(0xffffffffffffffff, &(0x7f0000000300)=""/4096, 0x1000) r5 = dup3(r3, r4, 0x0) read$usbfs(r5, &(0x7f0000000180)=""/86, 0x56) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r6 = socket$netlink(0x10, 0x3, 0x1) write$binfmt_misc(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="efae0700001e840f56216a8d"], 0xfdef) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001300)='/dev/qat_adf_ctl\x00', 0x80002, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r7, 0xc01864b0, &(0x7f0000001340)={0x3, 0xffffffff, 0x8}) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x400000}, 0xc) [ 932.753500][T20359] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. [ 932.809601][T20359] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. [ 932.870498][T20370] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. [ 932.879840][ T21] Bluetooth: hci0: Frame reassembly failed (-84) 11:53:44 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000000)={0x2}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) [ 932.962868][T20369] QAT: Invalid ioctl [ 933.022526][T20359] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. [ 933.123529][T20381] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. 11:53:44 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000000)={0x2}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) [ 933.176719][T20385] netlink: 2723 bytes leftover after parsing attributes in process `syz-executor.2'. 11:53:44 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0x8, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x1070c5, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000080)={0x1ff, 0x3a, 0x9, 0x5f, 0x4, 0x2, 0x2}, 0xc) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x600) r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r6 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x802) r7 = dup2(r6, r5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000000), 0x0) sendfile(r2, r4, 0x0, 0x10000) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)='J', 0x1}], 0x2) 11:53:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffff84, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xa}}, 0x39) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 11:53:44 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000000)={0x2}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) [ 933.608903][ T27] audit: type=1804 audit(1583322824.670:9491): pid=20397 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir964400407/syzkaller.DorUrO/310/file0/file0" dev="loop3" ino=168 res=1 [ 933.811456][ T27] audit: type=1800 audit(1583322824.680:9492): pid=20397 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=168 res=0 11:53:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x4a, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x3, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 933.943158][T20397] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 933.953491][T20397] FAT-fs (loop3): Filesystem has been set read-only [ 933.965850][T20397] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 17) [ 934.940506][T14010] Bluetooth: hci0: command 0x1003 tx timeout [ 934.947859][T17907] Bluetooth: hci0: sending frame failed (-49) [ 935.903542][ T0] NOHZ: local_softirq_pending 08 [ 937.020589][T14010] Bluetooth: hci0: command 0x1001 tx timeout [ 937.027373][T17907] Bluetooth: hci0: sending frame failed (-49) [ 939.100616][T14010] Bluetooth: hci0: command 0x1009 tx timeout 11:53:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x541b, &(0x7f0000000000)) 11:53:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r5, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r6 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:53:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r6, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r6, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r8, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:53:54 executing program 5: newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='\x00', 0x10000, 0x9, &(0x7f0000000600)=[{&(0x7f0000000100)="783aec050bde3766e067f2ac265696574d0423308128886d46d1dd908e0158421427af7fe6dcdbde9fa50b11615755611005040131cc10fa6430ac594d204ab5e28b7d106b8c085aadfac6deaf7673f278d5dfa16691f81f3baf2021ce99b9b764", 0x61, 0x8}, {&(0x7f0000000180)="8bed863cefd3fc9798ae9d79d2e084ff54127c07f0fb5a416bb867708d3dd95edd0cf04a493b08ffb0463af0a7e725c8918d33f1a1eedfd31480cf1c277b72", 0x3f, 0x8}, {&(0x7f00000001c0)="4411150478051362698b58c2a411e2ccd729120f0c1ea7fe94145d884adc819c78166c3b7ae138d303680a217cf70aa668827a3996a3a806", 0x38, 0x83f}, {&(0x7f0000000200)="bea87b6f0d9b80c393c8f1fe00efb5d7b3f10bd20fae2984c93d6833d872bcf4d51da157a9bfc265b1d1ae04e7d95e8409320c01e07d87f3f47e3ad723f7265cc442f2224f79593e53bafd76c806f8bce410d7932b78a5e956b685c5f447ddea7ff7d72999c29164a27b5457e1ef0f3354d599e9904e77645c94343ca0f79285f49b234cbaafd3be0d6a54f3df30eda65e502cf608c4da2de16370", 0x9b, 0x200}, {&(0x7f00000002c0)="1857713a50cca05a7215d389d3ce8082685ed581ca8070ff5bc4203164e02e3a333b6344a66bd4b7d113993512bf816ff2f4d7c6078f358da7b93047cd7782ee4667c23a6d167c563b4917481f80fc2b8e2ac06dbfab3130a6ebdfde66d9df20938c0d41c87a36341c953edb06e67e16500eb9fe48d381c9c9854090189fa047e9", 0x81}, {&(0x7f0000000380)="95460ceff811576ae3f21c3faa8f7e10b46f111e0d7ebead1935eab0d508d510aecb0c03499ca08e393c6eec3ed61f035ae7a5863d8e79cbe8d74a5f3a559e1bff5ea956256bfde207d12972cb94287bae77475d3877051a1218bcbd363a24c23df83aa6ada31a0929958d7364197bb64a3592feac63525dc319be3e5d8ebdbd440c6109f33668440e20b11e3416aa50d1e6074b5fb36fe714607e1130eba13e99147c857248f907ea777aee322da7c48bceab31e3b039544f77f32bd88396268901fb9b0034e7102c20c69f465d60c5924448c78f5a70a412b3f2", 0xdb, 0x3}, {&(0x7f0000000480)="bff45f35f5069c06ae72930c41ab6c60a753e07eec9179ba9a12c1ece46396a0ae539f24bd48457e2e7bf4076fa6770e5c792b73f28f3de75a2661268789b61df28c58a42166b48eb9f7c787241279af67cbabc50cad29baff02b42fd520f30fbf58774861887a115b149da389768dbc527e73c6c3a6a2c936da437a9910540dfb518f4478", 0x85, 0x6}, {&(0x7f0000000540)="1248ba6355fee8a0c66a8382d3e12e628f44bc43f2760e84f77ed6680214f4e353b10522f6e001ca5f02069f84539a896e8b40e0195b20f89cff368bc5dba5652741352b9a70209694b3b6be368858862187f579750a8210a7421829a4d48e49a858d2b069b4f2d9b6ff679d5a166be7b8", 0x71, 0x2}, {&(0x7f00000005c0)="dcd803e835bdd26bf2f7973fb724d58d", 0x10, 0x10000}], 0x80048, &(0x7f00000007c0)=ANY=[@ANYBLOB='noacl,pcr=00000000000000000033,fsmagic=0x0000000000000400,uid>', @ANYRESDEC=0xee01, @ANYBLOB=',euid<', @ANYRESDEC=r0, @ANYBLOB="2c7365636c61622d0000b2"]) syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast, @random="000000000f06", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @remote, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@loopback}, {@dev}, {@remote}]}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, @timestamp={0x44, 0x4}, @timestamp_prespec={0x44, 0x4}, @lsrr={0x83, 0x3}]}}}}}}}, 0x0) 11:53:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)={0x3, 'team_slave_0\x00', {0x20}, 0x1}) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x9b) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="84", 0x1, 0x200400d4, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = getpgrp(r3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x5, 0x80, 0x38, 0xa7, 0x0, 0xd79, 0x8118b, 0xe, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x62d1, 0x1, @perf_config_ext={0xfffffffffffffff9, 0xe51}, 0x4004, 0x8, 0x5, 0x7, 0x1, 0xd992, 0x20}, r4, 0xb, r1, 0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) 11:53:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3d, 0x6000) 11:53:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) [ 943.212612][T17907] Bluetooth: hci0: sending frame failed (-49) 11:53:54 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x1000000}]}]}}, &(0x7f00000002c0)=""/236, 0x32, 0xec, 0x8}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) 11:53:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:53:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)={0x3, 'team_slave_0\x00', {0x20}, 0x1}) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x9b) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="84", 0x1, 0x200400d4, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = getpgrp(r3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x5, 0x80, 0x38, 0xa7, 0x0, 0xd79, 0x8118b, 0xe, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x62d1, 0x1, @perf_config_ext={0xfffffffffffffff9, 0xe51}, 0x4004, 0x8, 0x5, 0x7, 0x1, 0xd992, 0x20}, r4, 0xb, r1, 0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) [ 943.452233][T20456] BPF: (invalid-name-offset) type_id=0 bits_offset=0 11:53:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) creat(&(0x7f00000000c0)='./file0\x00', 0xb3) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x9) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 943.523603][T20457] BPF: (invalid-name-offset) type_id=0 bits_offset=0 [ 943.557594][T20456] BPF: [ 943.565102][T20457] BPF: [ 943.568369][T20456] BPF:Invalid member name_offset:16777216 11:53:54 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e22, 0x6, @local, 0x6bc45ab0}, @in6={0xa, 0x4e22, 0x8, @remote, 0xffff}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x6}, @in={0x2, 0x4e21, @rand_addr=0x400}], 0x84) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2001001, 0x0) mount$bpf(0x0, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000940)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x5890, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) [ 943.604523][T20457] BPF:Invalid member name_offset:16777216 [ 943.622304][T20456] BPF: [ 943.622304][T20456] [ 943.635643][T20457] BPF: [ 943.635643][T20457] [ 945.260506][T14010] Bluetooth: hci0: command 0x1003 tx timeout [ 945.268439][T17907] Bluetooth: hci0: sending frame failed (-49) [ 947.340596][T14010] Bluetooth: hci0: command 0x1001 tx timeout [ 947.347915][T17907] Bluetooth: hci0: sending frame failed (-49) [ 949.420602][T14010] Bluetooth: hci0: command 0x1009 tx timeout 11:54:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x541d, &(0x7f0000000000)) 11:54:04 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:54:04 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x4, 0xa, 0x4, 0x200000, 0xa3, {0x77359400}, {0x4, 0x8, 0x8, 0x0, 0x7, 0x7f, "9acbbec2"}, 0xe7, 0x3, @userptr=0x2, 0x38434683, 0x0, 0xffffffffffffffff}) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0xd) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc337600363940ffb4aed12f060000000000000025d868", 0x1f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r2) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000040)=""/96) ptrace$setregs(0xf, r0, 0x9, &(0x7f00000001c0)="5b4a3652fb36e1c5208fea8a3d94b19f8705ec00bcc37a95e30e25fea2bd34e743e9241cafd2583de6c42099c43a85c8975d9fa0afa49d0562e096e86c3e79fb369181ca47c8f2432d6c5500b4f0756d3e1be68f03128d0bec3c6fd36d77434a99dda9a37d7ae05cade5e878433964058d71169cb5a522b773a821c303b3319768badbd9fba2ec229c95245ded59e1c750825a4deca3458caeeda925facb5f5a6d3437e205df7aeaffa67bd6f465880e9b0069fd47f8ccd73bfb9e8cd9c741") ptrace$cont(0x20, r0, 0x0, 0x0) 11:54:04 executing program 5: syz_read_part_table(0x100000, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="f61457ac2bd843952254c3f3868595e4871dc6fa8d3132d29720c06b4ecb837393d8ea788849bc0f974a962539e5f2c23e6744a3b7", 0x35, 0x7}, {&(0x7f00000000c0)="fc3fe440cdd3ad6931fd67b630dce7eb99b9cce5fd5a29787f54959adceed48e3aacda4130d56646e4310b6d96042b67d304ba86f3264c1a8d78d8dc6868762d142efd3d", 0x44, 0x7f}]) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vcsu\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000001b00)={&(0x7f0000001ac0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001b40)={r1, 0x4, 0x6, 0xffffffff, 0x7, 0x7, 0x80, 0x7fff, 0x3c, 0x6, 0xb888}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000700)={0x41, 0x2, 0x2}, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r4 = dup(r3) recvmsg$can_j1939(r4, &(0x7f0000001b80)={&(0x7f0000000740)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001900)=[{&(0x7f00000007c0)=""/246, 0xf6}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/7, 0x7}], 0x3, &(0x7f0000001940)=""/247, 0xf7}, 0x10021) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000140)={0x4bc, 0x0, 0x5, 0x102, 0x0, 0x0, {0xc, 0x0, 0x2}, [{{0x254, 0x1, {{0x2, 0x401}, 0x9, 0x0, 0x6, 0x5, 0x25, 'syz1\x00', "caf82042e58d174d6e9295d098aaa8af3002672d6aa9818be2ae86be3450d794", "3ceefad3c43ca8d614e81dfebee365d70eb9b6ac77bdb92fe41f72386f9290ce", [{0x7, 0x9755, {0x2}}, {0x3, 0x2, {0x0, 0x66}}, {0x5b8a, 0x954f, {0x2, 0x9a9}}, {0x3bd0, 0x6, {0x1, 0x4}}, {0x401, 0x40, {0x3, 0x6}}, {0x9, 0x3ff, {0x3, 0x4}}, {0x4, 0x5, {0x0, 0x4000}}, {0x100, 0x1, {0x2, 0x7}}, {0x5, 0x6, {0x0, 0x7}}, {0x7, 0x1, {0x3, 0x5}}, {0xfff, 0x0, {0x1, 0x1c0}}, {0x8, 0xfffd, {0x3, 0x8}}, {0xfffc, 0x8001, {0x1, 0x3}}, {0x6, 0x9, {0x1, 0x7fff}}, {0x1, 0xcc2, {0x0, 0x3}}, {0x1, 0x5, {0x3, 0x2}}, {0x400, 0x8000, {0x1, 0x7}}, {0x20, 0x401, {0x1, 0x5}}, {0x6, 0x2, {0x3, 0x3}}, {0x1, 0x6, {0x0, 0x1f}}, {0x1916, 0x8, {0x0, 0x5}}, {0x7, 0x29d, {0x3, 0x2}}, {0x2, 0x6f3, {0x3, 0x7}}, {0x3, 0x6, {0x2, 0x3}}, {0x1000, 0x14, {0x2, 0x400}}, {0x5, 0x9, {0x1, 0x8}}, {0x8, 0xff, {0x3, 0x9}}, {0xb8cc, 0x3, {0x1, 0xe0000000}}, {0x800, 0x9c16, {0x3, 0x800}}, {0x2, 0xe1, {0x0, 0xfffffff9}}, {0x1, 0x3, {0x2, 0x1ff}}, {0x7f, 0x8, {0x0, 0xe2}}, {0x7, 0x0, {0x2, 0x6}}, {0x6, 0x20, {0x2, 0x80000000}}, {0x9, 0x4, {0x1, 0x8}}, {0x3ff, 0xfffb, {0x1, 0x8}}, {0x3, 0x8, {0x2, 0x6}}, {0x400, 0x6, {0x0, 0x9}}, {0x6, 0xfff8, {0x0, 0x81}}, {0x3, 0x8, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0x2, 0x1b, 0xff01, 0x7, 0x28, 'syz0\x00', "a8201fc2160ccd0b6ecb175e400b256d7854180831d315a1d3b2c2f33ee949aa", "3f35af2c00bea75a2a1357f3003397b0a6f48dd9594cb8cf519c96aa034fb699", [{0x8, 0x80, {0x0, 0x7fff}}, {0x7ff, 0x7ff, {0x1, 0x9}}, {0x6, 0x20d6, {0x3, 0x400}}, {0x5, 0x7, {0x2}}, {0x100, 0x4, {0x3, 0x79}}, {0x5, 0x4, {0x3, 0x9}}, {0x6, 0x0, {0x3, 0x2}}, {0x3, 0x9, {0x2, 0x9}}, {0x80, 0x20, {0x2, 0x1}}, {0x3f, 0xe9, {0x2, 0x4}}, {0x6, 0x3, {0x3}}, {0x3, 0xbac5, {0x0, 0x4}}, {0x1405, 0x1, {0x3, 0x2}}, {0x7fff, 0x5, {0x3, 0x3}}, {0x9, 0xff, {0x1, 0x8001}}, {0x100, 0x0, {0x1, 0xffff}}, {0xfffb, 0x7, {0x3, 0x7f}}, {0x3, 0x1, {0x3, 0x401}}, {0x8000, 0x800, {0x1, 0x1ff}}, {0x2, 0x40, {0x0, 0x1}}, {0x80, 0x9, {0x0, 0x3}}, {0x3, 0x2, {0x2, 0x2}}, {0x1, 0xf4a8, {0x1, 0x5}}, {0x0, 0x6, {0x2, 0x81}}, {0x4, 0x6, {0x2, 0x1}}, {0x6, 0x0, {0x2, 0x6}}, {0x6, 0x7, {0x2, 0x7}}, {0x8, 0x45, {0x2, 0x13}}, {0x6, 0x0, {0x0, 0x1}}, {0x9ba, 0x353b, {0x1, 0xfa2e}}, {0x38, 0x3ff, {0x2, 0x80000000}}, {0x0, 0x4, {0x3, 0xbc2}}, {0xcd, 0x1, {0x1, 0x7f}}, {0xbf1c, 0x5, {0x2, 0x13}}, {0x2, 0xffff, {0x2, 0x6}}, {0x6, 0x8, {0x0, 0x2}}, {0x4, 0x0, {0x0, 0xcd7e}}, {0x0, 0x0, {0x1, 0x20}}, {0x0, 0xbfad, {0x3, 0x20}}, {0x81, 0xfff, {0x2}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x2004c080}, 0x8000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000001a80)) set_thread_area(&(0x7f0000000680)={0xffff0001, 0x1000, 0x1000, 0x1, 0x3}) 11:54:04 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) socket$unix(0x1, 0x1, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:54:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r6, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r6, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r8, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:54:05 executing program 3: socket$inet_sctp(0x2, 0x0, 0x84) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r1 = dup2(0xffffffffffffffff, r0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0x5, 0x1, 0x1, {0xffffff76, 0x7, 0x400000, 0x10001}}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000100)={{0x87, @multicast1, 0x4e23, 0x3, 'wlc\x00', 0x24, 0x5, 0x7}, {@broadcast, 0x4e24, 0x4, 0x80000000, 0x6}}, 0x44) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='udf\x00', 0x0, 0x0) [ 953.966799][T20500] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. 11:54:05 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:54:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000000)) [ 954.215223][T20511] netlink: 41347 bytes leftover after parsing attributes in process `syz-executor.5'. [ 954.293514][T20509] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 954.356788][T20514] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. 11:54:05 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x2, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r2, &(0x7f0000000180), &(0x7f0000000100)=0x10, 0x100000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0x0, 0xc71}, @timestamp, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0xff, 0x80}, @mss={0x2, 0xe675}], 0x6) 11:54:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000000)=@get={0x1, &(0x7f0000000180)=""/205, 0xe48}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 11:54:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:54:05 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) [ 954.493026][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 954.523392][ T2630] print_req_error: 1 callbacks suppressed [ 954.523411][ T2630] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 954.555646][ T2629] blk_update_request: I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 954.567832][T20509] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 954.655034][T20535] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 954.660621][ T2629] blk_update_request: I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 954.686148][T20509] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 954.711490][T20509] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 954.727351][T20509] UDF-fs: Scanning with blocksize 512 failed 11:54:05 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0xc002, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x2280, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f00000001c0)={0x0, 0x7f, 0x20, [], &(0x7f0000000180)=0xc1}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) time(&(0x7f0000000200)) [ 954.751992][T20543] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. 11:54:05 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) [ 954.794754][ T2630] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 954.824369][ T2630] blk_update_request: I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 954.840999][T20509] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 11:54:06 executing program 5: r0 = gettid() perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0xc5}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x81}, r0, 0x2, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000007000000c60000000000be00950000000000000057e0f076c05384463cf5415f5f6a"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2aa}, 0x48) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @rose}, [@rose, @remote, @default, @remote, @bcast, @null, @null, @default]}, &(0x7f00000000c0)=0x48) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f00000001c0)={@bcast, @default}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="de535344d4bd389b2248e61053df", 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 954.914325][ T2630] blk_update_request: I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 954.930950][T20509] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 955.010637][T20509] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 955.075655][T20509] UDF-fs: Scanning with blocksize 1024 failed [ 955.129072][ T2629] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 955.165111][ T2630] blk_update_request: I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 955.176570][T20509] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 955.215208][ T2630] blk_update_request: I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 11:54:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:54:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f0000000240)={{0x1, @name="a1d5051b215acc099b7cb985f432c7bd0f934ea41be80fd69973ed3dd3273a8d"}, "d4f733f82e1334cb8780b2e450d3a3b23b0e9faf398a5ee619f4c062439446b3", 0x1}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) dup3(r3, r1, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x10202}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000700)={0x0, 0x0, @pic={0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) ioctl$TIOCSRS485(r6, 0x542f, &(0x7f00000000c0)={0x101, 0x0, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 955.226739][T20509] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 955.246196][T20509] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 955.314465][T20509] UDF-fs: Scanning with blocksize 2048 failed [ 955.375560][ T2629] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 955.393315][T20509] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 955.457871][T20509] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 955.470545][T20509] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 955.483379][T20509] UDF-fs: Scanning with blocksize 4096 failed [ 955.489678][T20509] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1) 11:54:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'dummy0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="49000000000000000000000005532fc2eb3336ad0e32aafc07df7f4e981547056e0e46bf17ea5a10826bdabbc54a57c3ccba9f128c8492e45b335270fbfddc081c83e52ba50fffb8b5ac5550185616dcf9729ccb4c687be4ce7f1edc05482bb3bfcf54cf4b0c3dd91ef634f1c6a5c6677a95e9cc2121"]}) 11:54:06 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r6, 0x3}, &(0x7f00000001c0)=0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 956.540463][ T9816] Bluetooth: hci0: command 0x1003 tx timeout [ 956.549540][T17907] Bluetooth: hci0: sending frame failed (-49) [ 958.620591][ T9816] Bluetooth: hci0: command 0x1001 tx timeout [ 958.626722][T17907] Bluetooth: hci0: sending frame failed (-49) [ 960.700590][T10628] Bluetooth: hci0: command 0x1009 tx timeout 11:54:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000000)) 11:54:15 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:54:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:54:15 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r2}}, 0x48) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @tid=r3}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 11:54:15 executing program 3: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0xa00, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r5, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) sendto$inet(r5, &(0x7f0000000400)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e1e, @remote}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) r7 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r8 = syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') r9 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r9, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000005c0)=0xe8) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r13, @ANYBLOB="00000000ffffffff0000000008000100636273001c0002001800010000000000070000000500000000feff0000000000000000a2e387d63e7217590578003f91160e12e5cab38ea6d14b05d0df915a3f958c4896775630"], 0x48}}, 0x0) r14 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r14, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r13}}, 0x20}}, 0x0) r15 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r15, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000700)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000480)=0xfffffc57) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r17, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r19, @ANYBLOB="00000000ffffffff0000000008000100636273001c0002001800010000000000070000000500000000feff0000000000000000a2e387d63e7217590578003f91160e12e5cab38ea6d14b05d0df915a3f958c4896775630"], 0x48}}, 0x0) r20 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r20, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r19}}, 0x20}}, 0x0) r21 = socket$nl_route(0x10, 0x3, 0x0) r22 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r22, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r21, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r23, @ANYBLOB="00000000ffffffff00000000080001006362739a1c000200180001000000000007000000050000f7fe888a0000000000000000a2e387d63e7217590578003f91160e12e5cab38ea6d14b05d0df915a3f958c4896775630"], 0x48}}, 0x0) r24 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r24, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r23}}, 0x20}}, 0x0) r25 = socket$nl_route(0x10, 0x3, 0x0) r26 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r26, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r26, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r25, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r27, @ANYBLOB="00000000ffffffff0000000008000100636273001c0002001800010000000000070000000500000000feff0000000000000000a2e387d63e7217590578003f91160e12e5cab38ea6d14b05d0df915a3f958c4896775630"], 0x48}}, 0x0) r28 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r28, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r27}}, 0x20}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001500)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000001600)=0xe8) r30 = socket$nl_route(0x10, 0x3, 0x0) r31 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r31, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r31, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r30, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r32, @ANYBLOB="00000000ffffffff0000000008000100636273001c0002001800010000000000070000000500000000feff0000000000000000a2e387d63e7217590578003f91160e12e5cab38ea6d14b05d0df915a3f958c4896775630"], 0x48}}, 0x0) r33 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r33, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r32}}, 0x20}}, 0x0) r34 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r34, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r35 = socket$nl_route(0x10, 0x3, 0x0) r36 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r36, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r36, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r35, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r37, @ANYBLOB="00000000ffffffff0000000008000100636273001c0002001800010000000000070000000500000000feff0000000000000000a2e387d63e7217590578003f91160e12e5cab38ea6d14b05d0df915a3f958c4896775630"], 0x48}}, 0x0) r38 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r38, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r37}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r34, 0x8933, &(0x7f0000001640)={'team0\x00', r37}) r40 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r40, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r40, 0x113, 0x2, &(0x7f0000001680)=0x0, &(0x7f00000016c0)=0x4) r42 = socket$nl_route(0x10, 0x3, 0x0) r43 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r43, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r43, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r42, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r44, @ANYBLOB="00000000ffffffff0000000008000100636273001c0002001800010000000000070000000500000000feff0000000000000000a2e387d63e7217590578003f91160e12e5cab38ea6d14b05d0df915a3f958c4896775630"], 0x48}}, 0x0) r45 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r45, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r44}}, 0x20}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000001b40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001700)={0x3fc, r8, 0x200, 0x39e8, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xe549}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xc0}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3b4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8, 0x1, r27}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r29}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r32}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r39}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r41}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x34000000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r44}}, {0x8}}}]}}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x4001}, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={r6, @in6={{0xa, 0x4e23, 0x54, @mcast2, 0xff}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r46, 0x657c}, 0x8) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r47 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x420002, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000100)={0x0, 'veth1_virt_wifi\x00'}, 0x18) r48 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r48, &(0x7f0000000680)=ANY=[], 0x3f00) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000240)={0x4, 0x0, 0x4, 0x28d1a5b936afc6ca, 0xffffa8ef, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "110d6199"}, 0x0, 0x0, @userptr, 0xff}) write$FUSE_STATFS(r47, &(0x7f0000000140)={0x60, 0x0, 0x4, {{0xcc0, 0x100000000, 0x0, 0x0, 0x100, 0x8001, 0x4, 0x9}}}, 0x60) semget$private(0x0, 0x0, 0x0) 11:54:15 executing program 5: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x2446, 0x0, 0x0) 11:54:15 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(0xffffffffffffffff, r0) dup2(r0, r1) [ 964.853021][T20596] loop5: unable to read partition table [ 964.913545][T20596] loop5: partition table beyond EOD, truncated [ 964.935460][T20596] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 11:54:16 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:54:16 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(0xffffffffffffffff, r0) dup2(r0, r1) 11:54:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) r1 = dup(0xffffffffffffffff) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc582cfdba1cf476b}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TIMEOUT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240080d0}, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000300)='./bus\x00', 0x181082, 0x0) write$UHID_CREATE(r3, &(0x7f0000000500)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0}}, 0x120) dup2(r0, r2) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7c, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000400)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x3, 0xffff}, &(0x7f0000000200)=0x90) [ 965.260494][T20614] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. 11:54:16 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(0xffffffffffffffff, r0) dup2(r0, r1) [ 965.448510][T20610] IPVS: ftp: loaded support on port[0] = 21 11:54:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) [ 965.529877][T20610] netdevsim0 speed is unknown, defaulting to 1000 [ 965.805270][T20637] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.3'. [ 966.017742][T20614] IPVS: ftp: loaded support on port[0] = 21 [ 966.326017][T20614] netdevsim0 speed is unknown, defaulting to 1000 [ 966.562414][ T21] tipc: TX() has been purged, node left! [ 967.020508][T10628] Bluetooth: hci0: command 0x1003 tx timeout [ 967.026674][T17907] Bluetooth: hci0: sending frame failed (-49) [ 969.101125][ T9816] Bluetooth: hci0: command 0x1001 tx timeout [ 969.107271][T17907] Bluetooth: hci0: sending frame failed (-49) [ 971.180685][T10628] Bluetooth: hci0: command 0x1009 tx timeout 11:54:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5421, &(0x7f0000000000)) 11:54:26 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000180)={r6, 0xfc, "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"}, &(0x7f00000000c0)=0x104) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd8, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x587}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd4bd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x28}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xccfd}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40005}, 0x20000004) 11:54:26 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x488442) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 11:54:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) dup2(r0, 0xffffffffffffffff) [ 975.855249][ T21] Bluetooth: hci0: Frame reassembly failed (-84) [ 977.900477][ T9816] Bluetooth: hci0: command 0x1003 tx timeout [ 977.908999][T17907] Bluetooth: hci0: sending frame failed (-49) [ 979.980519][T10628] Bluetooth: hci0: command 0x1001 tx timeout [ 979.987925][T17907] Bluetooth: hci0: sending frame failed (-49) 11:54:31 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) dup2(r0, 0xffffffffffffffff) 11:54:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:54:31 executing program 5: r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0xffeffffe}, {0x6}]}, 0x10) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x40400) sendto$inet6(r0, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828000000000000000a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 11:54:31 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0x3a}, 0xea5c}}}, 0x90) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x40080, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x5}}, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$VT_DISALLOCATE(r2, 0x5608) r3 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x2, 0x2) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsa\x00', 0x600180, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f00000002c0)={0x80000000, 0x0, [], {0x0, @bt={0xe5ce, 0x8, 0x0, 0x1, 0xa442, 0x7fff, 0xcd79, 0x7f, 0x7, 0x8, 0x6, 0xfffffffb, 0x5, 0x7, 0x1, 0x4, {0x80, 0x6}, 0x20, 0xff}}}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x440100, 0x0) 11:54:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r5, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r5, 0x40045730, &(0x7f0000000080)=0x20) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000030003dfa00000f28000000a1f0ca8d004c000100480001"], 0x1}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) write$P9_RRENAME(r7, &(0x7f00000001c0)={0x7, 0x15, 0x1}, 0x7) bind$bt_rfcomm(r6, &(0x7f0000000140)={0x1f, @any, 0x45}, 0xa) 11:54:32 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) dup2(r0, 0xffffffffffffffff) [ 980.960929][T20665] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.5'. [ 981.061049][T20678] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 11:54:32 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 11:54:32 executing program 5: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="e1fd00001100a740671e840f56216a8d"], 0xfdef) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'gre0\x00', {0x2, 0x4e24, @empty}}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = gettid() ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000080)={0x8}) tkill(r3, 0x31) sendfile(r0, r2, 0x0, 0xedc0) [ 981.255597][T20688] netlink: 64769 bytes leftover after parsing attributes in process `syz-executor.5'. [ 981.343643][T20692] netlink: 64769 bytes leftover after parsing attributes in process `syz-executor.5'. [ 982.070574][ T9838] Bluetooth: hci0: command 0x1009 tx timeout 11:54:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 11:54:37 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:54:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:54:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x26e1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040), 0x4) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000000c0)={0x7ffffffd, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xe, r2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x614480, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000100)=""/20) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r4, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000300)=ANY=[@ANYBLOB="060000040000000000000081ab000000000000000000000000000000000000000000da409899c67775e57715a5d7618a337f313928e6048d2e7b72801d386dc16e59d157a87a5056195db8a7ba0e"]) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) 11:54:37 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @rand_addr="fdfbffffffffff0400"}, {0xa, 0x400, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, r1, 0xffffffff}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0x0, 0xd0, 0x0, 0x0, 0xd0, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x3, &(0x7f00000000c0), {[{{@ip={@broadcast, @remote, 0x0, 0xffffff00, 'veth0_macvtap\x00', 'ip_vti0\x00', {}, {}, 0x84, 0x3, 0xb}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x2, 0x4, 0x5, 0x1], 0x3, 0x2}, {0x3, [0x5, 0x1, 0x4, 0x4, 0x3, 0x2], 0x3, 0x3}}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xa}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x4, 0x5, 0x4, 0x4, 0x4], 0x2}, {0x0, [0x9, 0x6, 0x5, 0x4, 0x2, 0x3], 0x1}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 11:54:37 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000700)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000580200000000000008010000000000000000000000000000c0010000c0010000c0010000c0010000c0010000030000000000000000000000ac1414bbac14140000000000000000000000000000000000000000000000000069705f7674693000000000000000000000000000000000000000000000000000000000000000000000000000000000008800000000000000a0000801000000000000000000000000000000000000000030007564706c69746500000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000006e657462696f732d35842db70c42fd5e73797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800b80000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000001e000000000000000004feffffff"], 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000080)=""/227, 0xe3) 11:54:37 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:54:37 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x7) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 11:54:37 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1800007, 0x11, r1, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x19) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r7, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r8 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r8, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r8, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, &(0x7f0000000140)={0x3, 0x5}, 0x0, 0x0, &(0x7f0000000180)={0x4, 0xb, 0xfff, 0x1}, &(0x7f00000001c0)=0x7fff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x9}}, 0x10) r10 = accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80800) fgetxattr(r10, &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000500)=""/19, 0x13) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r6, r7, 0x0, 0x3, &(0x7f0000000080)='}-\x00', r9}, 0x30) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x3fe00) 11:54:37 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) socket$rxrpc(0x21, 0x2, 0xa) accept4(r0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x805, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) r2 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r3 = dup2(0xffffffffffffffff, r2) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000200)={0x34, 0x0, &(0x7f00000001c0)}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000001100)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0xa00) accept(r4, &(0x7f0000000040)=@nl, &(0x7f0000000140)=0x80) [ 986.775039][T13855] Bluetooth: hci0: Frame reassembly failed (-84) 11:54:38 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) [ 986.996762][T20733] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. 11:54:38 executing program 4: ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, 0xffffffffffffffff) dup2(0xffffffffffffffff, r0) [ 987.775753][T20757] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.5'. [ 988.790584][T10628] Bluetooth: hci0: command 0x1003 tx timeout [ 988.796986][T20755] Bluetooth: hci0: sending frame failed (-49) [ 989.580485][T10628] Bluetooth: hci1: command 0x1003 tx timeout [ 989.586866][T20755] Bluetooth: hci1: sending frame failed (-49) [ 990.860494][ T9838] Bluetooth: hci0: command 0x1001 tx timeout [ 990.868195][T20755] Bluetooth: hci0: sending frame failed (-49) [ 991.660538][T10628] Bluetooth: hci1: command 0x1001 tx timeout [ 991.668101][T20755] Bluetooth: hci1: sending frame failed (-49) [ 992.940564][T10628] Bluetooth: hci0: command 0x1009 tx timeout [ 993.750620][ T9816] Bluetooth: hci1: command 0x1009 tx timeout 11:54:49 executing program 4: ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, 0xffffffffffffffff) dup2(0xffffffffffffffff, r0) 11:54:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:54:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5424, &(0x7f0000000000)) 11:54:49 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x40800, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 11:54:49 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) capget(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f00000000c0)={0x403, 0x0, 0x0, 0x0, 0x1}) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r3, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000180)={0x28, 0x29, 0x1, {0x81, [{{0x1, 0x2, 0x3}, 0x57ba, 0x6, 0x5, './bus'}]}}, 0x28) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r5, 0x600004) sendfile(r2, r5, 0x0, 0x80001d00c0d0) 11:54:49 executing program 5: mkdir(&(0x7f0000000240)='./bus\x00', 0x9f) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x8) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{}]}) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000340)={0x18, 0x0, {0x0, @random="0946408f0fc7", 'vlan0\x00'}}) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) lseek(r0, 0x0, 0x2) sendfile(r0, r2, 0x0, 0x40d09) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x501400, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x81, 0x2, 0x9, 0x80, 0x6, 0x7, 0xdb, 0x4, 0x1, 0x3f, 0x80, 0x8, 0x86}, 0xe) [ 998.113109][T20764] overlayfs: failed to resolve './file1': -2 11:54:49 executing program 4: ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, 0xffffffffffffffff) dup2(0xffffffffffffffff, r0) [ 998.232102][ T27] audit: type=1804 audit(1583322889.310:9493): pid=20770 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir695721566/syzkaller.EIQNmt/340/bus/bus" dev="sda1" ino=16598 res=1 11:54:49 executing program 4: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) [ 998.323924][T20770] overlayfs: failed to resolve './file1': -2 [ 998.393867][ T27] audit: type=1804 audit(1583322889.470:9494): pid=20764 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir695721566/syzkaller.EIQNmt/340/bus/bus" dev="sda1" ino=16598 res=1 11:54:49 executing program 4: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:54:49 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x482000, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff293}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbffffffffffffffa, r0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0185879, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="a80201a58500000000000000000004"], 0xf) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="920200007d000000"], 0x8) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RSTATu(r4, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004480)={0xffffffffffffffff, 0x10, &(0x7f0000004440)={0x0}}, 0x10) 11:54:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020601000000000000000000000000000900020073797a320000ed000014000300686173683a69702c706f72742c6970000c000780080006400000000005000100070000000500040000000000f5c7bdf3168a6c5322ef7acdf6050005000a0000436dae09ead678d299d03edaf55be01e47c14adf23d06170868d3408d65aeb767aa0908cf11426cc244104b759"], 0x58}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:54:49 executing program 4: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) [ 998.743601][T20798] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 998.792126][T20794] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. 11:54:49 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) 11:54:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) [ 1000.380680][ T9838] Bluetooth: hci0: command 0x1003 tx timeout [ 1000.388214][T16500] Bluetooth: hci0: sending frame failed (-49) [ 1002.460740][ T9816] Bluetooth: hci0: command 0x1001 tx timeout [ 1002.468796][T16500] Bluetooth: hci0: sending frame failed (-49) [ 1004.540850][ T9838] Bluetooth: hci0: command 0x1009 tx timeout 11:54:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5425, &(0x7f0000000000)) 11:54:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f00000000c0), &(0x7f0000000180)=0x4) 11:54:59 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:54:59 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xc241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x5f}, 0x4690, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}, {0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 11:54:59 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1000008003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000100)="65c8400000000000000040863ddafbc515f24ac930b1ea4540aa52ad254a1ebcc6ba694c5e0709e0ba927ecf81df047968c05007d29a9b336a1350981475dd2be56c6735811a2da4232b672854d1ed2a6cb89ffafa2af5651a08052148d46eb276e9afc9dc8e2c4f97") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000020033945c091f659900000000000000000000850000002c000000e4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x40}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 11:54:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:55:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:55:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:55:00 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/psched\x00') connect$unix(r1, &(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r2}}, 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc7, 0xc7, 0x3, [@datasec={0x3, 0x2, 0x0, 0xf, 0x3, [{0x3, 0x1, 0x5}, {0x2, 0x6, 0x1d2}], "9cf514"}, @datasec={0x7, 0x2, 0x0, 0xf, 0x1, [{0x5, 0x5, 0xfffffffe}, {0x4, 0x9, 0x1}], 'A'}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x4, [{0x2, 0x3, 0x3f}]}, @datasec={0x7, 0x7, 0x0, 0xf, 0x3, [{0x5, 0x3438}, {0x4, 0x8, 0x7}, {0x5, 0x1, 0x2}, {0x1, 0xfffffff7, 0x5}, {0x3, 0x0, 0x9}, {0x1, 0x1c51be3f, 0x9}, {0x5, 0x4, 0x200}], "01e84d"}]}, {0x0, [0x5f]}}, &(0x7f00000000c0)=""/16, 0xe3, 0x10}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="ef05840f56216a8d000000000000008bb7dd07e69beb3c10d84aad02bb480129fd5fbad1e8a479a4682aee9ec516de2278040000004bea9cdf2533f2048ccc50e50846712c10c2e05e8f5d3a4457f6c877dd380c6a92b490b775beeef7b8a464931cfb8c041626ad000ea6c11eb97b7b86611e359b4ed45e5c4451d9d334bd751412f820ee04c55f3bf17347f0fba86baf45350ece09a1f82151003bf6d2fa529ecb30f61109e5403f734d61a24b81c81f06505b168d1fd8f7c10abc15e3caa4e3d72a7b370357e8076f7d063f7307b5061a52d3fc9ec4b8cfc53c10a3492c7127b36b4aad8ba0d6e91c9ea778fea4bf31b90bfd859dcc1eb6213409cc7781aa9ef93fe67e42326ff3876a0d7eed899886b8dcaca4b131ec05bbb689344f20a9ddd7300cbde3043b2af6556a3de79439b170d61cee980ee583b7c60a6944a9da025dc6aac057cb1e00b5afb59e81ac4cdfb380235923c91c"], 0xfdef) r4 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001100a740671e840f56216a8d"], 0xfdef) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7c, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000680)={0x0, 0x1f, 0x8, 0xa380, 0x8, 0x8, 0xff, 0x100, {r8, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x6af5df73, 0xffff, 0x5, 0x20, 0x200}}, &(0x7f0000000200)=0xb0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={r9, 0x2, 0x1000, 0x8}, &(0x7f0000000500)=0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x6a7a, &(0x7f00000001c0)}, 0x0) 11:55:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) [ 1009.760835][T20847] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. 11:55:00 executing program 3: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x9021, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) write$dsp(r0, &(0x7f00000001c0)="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", 0x2da) 11:55:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) [ 1010.021480][T20847] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1011.110639][ T9816] Bluetooth: hci0: command 0x1003 tx timeout [ 1011.116988][T16500] Bluetooth: hci0: sending frame failed (-49) [ 1013.180620][ T9816] Bluetooth: hci0: command 0x1001 tx timeout [ 1013.188334][T16500] Bluetooth: hci0: sending frame failed (-49) [ 1015.260597][T10628] Bluetooth: hci0: command 0x1009 tx timeout 11:55:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5427, &(0x7f0000000000)) 11:55:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:55:10 executing program 5: getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000540)=""/197, &(0x7f0000000640)=0xc5) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000100)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) r0 = socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x400000, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x101a02, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000280)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x204c0, 0x0) 11:55:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:55:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x200, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000180)={0x6}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:55:10 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="6cd0ba845ad364b84d8a476c5ffb8e63ee92561ebc25ab44dac53a9169b87450d3fc1924f108ff43af95db181ea93d241e3873cc900dd473e4a311338a54cdc9507e9730520384860cdcbf03ae1512904677cf829106262122e307c98906b37c490c3942fd350282e9c0db11b36e747438e64e05aea4e1efafaef6953b9fb8"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020003) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)={0x2c, 0x4, 0x0, {0x2, 0x8, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) r1 = creat(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x101}, 0x8) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/46, 0x15092e2a1832a052) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f0000000300)=[{}, {}]) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x101000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000400)=""/234) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) [ 1019.241570][T20877] EXT4-fs (loop5): error: could not find journal device path: error -2 11:55:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:55:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:55:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5428, &(0x7f0000000000)) [ 1019.508944][T20877] EXT4-fs (loop5): error: could not find journal device path: error -2 11:55:10 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x28) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) 11:55:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) r1 = accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x60084, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r4, 0x9}, 0x8) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r5, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7c, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f00000000c0)={r9, 0x8}, 0x8) r10 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x1, 0x8800) 11:55:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) [ 1019.797471][T13855] Bluetooth: hci0: Frame reassembly failed (-84) 11:55:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{}, 'port0\x00', 0xe3, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:55:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, r2}}, 0x18) 11:55:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) msgget$private(0x0, 0xc) msgctl$MSG_INFO(0x0, 0xc, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x10) r4 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r7}, 0x14) getsockname$packet(r4, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0300000000000000f3ff0000080001000bdb81951a1eed2a"], 0x30}}, 0x0) mq_unlink(&(0x7f0000000080)='\x00') 11:55:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0x0, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) [ 1020.267029][T20926] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:55:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0x0, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:55:11 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x300, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4884) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) dup3(0xffffffffffffffff, r1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) [ 1020.348330][T20931] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:55:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:55:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup(r0) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000340), &(0x7f0000000380)=0xe) ioctl$RTC_UIE_ON(r2, 0x7003) prctl$PR_SET_FP_MODE(0x2d, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x0, 0x7ff}) ioctl$RTC_UIE_OFF(r2, 0x7004) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f00000003c0)={0x0, 0x0, 0x14, 0x0, 0x6, 0x0, 0x3, 0x45, 0xffffffffffffffff}) r4 = socket(0x0, 0x805, 0x0) fsetxattr(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='j\f'], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, 0x0) [ 1021.820608][ T9838] Bluetooth: hci0: command 0x1003 tx timeout [ 1021.828030][T16500] Bluetooth: hci0: sending frame failed (-49) [ 1023.910561][ T9817] Bluetooth: hci0: command 0x1001 tx timeout [ 1023.918167][T16500] Bluetooth: hci0: sending frame failed (-49) [ 1025.980660][ T9838] Bluetooth: hci0: command 0x1009 tx timeout 11:55:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000000)) 11:55:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0x0, 0x80003, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:55:21 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x6, @mcast2}, {0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x2}, r1}}, 0x48) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x240000, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 11:55:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000071, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x30000739, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="5cacaae4d9dc6d2cfac118a88cbe7bb2851fb6d6c0557e771cb5e6507a080641c548336612da1482b5a7b10d0f4acd81208d7a83ee0922bf26a3e0c927602e80bad2c0352d6d9483d2426488cf80eaf378b96d484287b031aa6dfa9e9df9bcf4602fd7c7df3fa3e235659ffe708746d9d53e1d6acdb5cedadda27b5883ae8bb056ef007e1b490a4ebc97675aca57d98593ba9b11892f9b61c21c918e355ee0432af864e843df8e3caf03a4d00000000000000000000000cb4600000000000000020000"], 0xc9) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) readv(r3, &(0x7f0000000680)=[{&(0x7f0000000440)=""/255, 0xff}], 0x1) sendto$inet(r3, &(0x7f0000000300)='\f', 0xc3f2, 0x11, 0x0, 0x0) 11:55:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)=0x0) tkill(r1, 0x41) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2=0xe000be02}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) r4 = syz_open_dev$radio(&(0x7f00000007c0)='/dev/radio#\x00', 0x2, 0x2) readlinkat(r4, &(0x7f0000000800)='./file0/../file0\x00', &(0x7f0000000840)=""/35, 0x23) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24, 0x0, 0x3}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x1) prctl$PR_GET_KEEPCAPS(0x7) epoll_pwait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0x9, &(0x7f0000000240), 0x8) socket$inet(0x2, 0x4, 0x2) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f00000004c0)='/dev/loop#\x00', 0xb, 0x0) futex(&(0x7f0000000400)=0x1, 0x1, 0x0, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000740)=0x1, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000780)={0x2c, @broadcast, 0x4e22, 0x1, 'nq\x00', 0x6919afe5320a99e7, 0x4006, 0x1a}, 0x2c) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000680)={@generic={0x9, "87c831edf4db88f3bb36de43139d6836ec89fd3b96b46f5fac9bd51c29666fdc9f821a2a1a0a90db906129e75952f0e996802db4f283933dd913550ece71004cd297fea5b0e7bac110db4e69fc3d1dfd6a8fe2137fbfd764d4128c53dd86842db491709872709d8b0416a1b551616dd2335be0d2d36c8ce8205dfe4f25b9"}, {0x0}, &(0x7f0000000180), 0x2}, 0xa0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="37000000000000002cdd00000000000004e70000a7e327a8af5074e73171fb0dd7f34644784eb88a3fc7c835a0ee83d8bd3b098843d5cfcdf7e9628c279990962c0da850205535b1879a62cb4c90a9a9f80e0f93e16a3d71fc84517845f55497"]}) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0)=0x1, 0x4) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) 11:55:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:55:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x0, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) [ 1030.238462][T13855] Bluetooth: hci0: Frame reassembly failed (-84) 11:55:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x0, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) [ 1030.356739][T20970] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20002 11:55:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:55:21 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x1405, 0x800, 0x70bd2d, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x40}}, 0x4004) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 1030.580516][T20984] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20002 11:55:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x0, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:55:21 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000200)=""/69) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f00000000c0)) pipe(&(0x7f00000000c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000003c0)='cpuset.mems\x00', 0x2, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)=',', 0x1}], 0x2) [ 1032.300511][ T9803] Bluetooth: hci0: command 0x1003 tx timeout [ 1032.308041][T20755] Bluetooth: hci0: sending frame failed (-49) [ 1033.020595][ T9803] Bluetooth: hci1: command 0x1003 tx timeout [ 1033.028447][T20755] Bluetooth: hci1: sending frame failed (-49) [ 1034.380512][ T9803] Bluetooth: hci0: command 0x1001 tx timeout [ 1034.388405][T20755] Bluetooth: hci0: sending frame failed (-49) [ 1035.100707][ T9803] Bluetooth: hci1: command 0x1001 tx timeout [ 1035.107695][T20755] Bluetooth: hci1: sending frame failed (-49) [ 1036.460539][T10628] Bluetooth: hci0: command 0x1009 tx timeout [ 1037.180594][T10628] Bluetooth: hci1: command 0x1009 tx timeout 11:55:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5441, &(0x7f0000000000)) 11:55:32 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:55:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) dup(0xffffffffffffffff) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsync(0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) 11:55:32 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000000c0)={0x3, @bcast, r4}) accept4$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r5}}, 0x10) 11:55:32 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x0, 0x10000000000}}, 0x0, 0xfff7fdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f00000000c0)=0x8, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20}, 0x1c) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x40000, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000080)={0x2, 0xa15, 0x5}) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = accept4(r0, &(0x7f0000000140)=@nfc_llcp, &(0x7f00000001c0)=0x80, 0x180800) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000200)={0x2, 0x6e, "b80299e5712415f797f9b8a7e00615ebdfa3837fafe19b1825cf6d71174753ffae9179c99b1568a2cd3929b501b30ca7b7ea8d98ae90c7c23670d3c2163f5071569a62ecd8f764525fe3e15a0de84295546c0d63439c7462dc7b2be9edf5519763d46d9638d33a37241640e2eeb0"}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x4000000000000d0, 0x0) 11:55:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r6, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r6, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r8, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) [ 1041.676286][T21025] ubi0: attaching mtd0 [ 1041.713132][T21025] ubi0: scanning is finished 11:55:32 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) [ 1041.743307][ T7] Bluetooth: hci0: Frame reassembly failed (-84) 11:55:32 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x30401, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x4, 0x0, @empty, 0xfffff800}, r2, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r2}}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000005b00000227bd703effb0335caf7fecba"], 0x14}}, 0x840) 11:55:33 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) [ 1042.013979][T21025] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1042.026980][T21025] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1042.043141][T21025] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1042.058643][T21025] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1042.071414][T21025] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1042.087130][T21025] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1042.100669][T21025] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4220869889 [ 1042.113781][T21025] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1042.125481][T21040] ubi0: background thread "ubi_bgt0d" started, PID 21040 [ 1042.146839][T21039] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -22 11:55:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r2, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 11:55:33 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:55:33 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) [ 1043.820469][ T9838] Bluetooth: hci0: command 0x1003 tx timeout [ 1043.828395][T17907] Bluetooth: hci0: sending frame failed (-49) [ 1045.900484][ T9838] Bluetooth: hci0: command 0x1001 tx timeout [ 1045.907222][T17907] Bluetooth: hci0: sending frame failed (-49) [ 1047.980533][ T9816] Bluetooth: hci0: command 0x1009 tx timeout 11:55:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5446, &(0x7f0000000000)) 11:55:43 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xe3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r0) dup2(r0, r1) 11:55:43 executing program 3: 11:55:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x30b800, 0x0) accept4$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)={0x0, 0x2}) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4), 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r6, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r6, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r8, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) write$P9_RREADLINK(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1000ff0017010007002e2f66696d6130"], 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x140800) 11:55:43 executing program 5: 11:55:43 executing program 5: 11:55:43 executing program 3: [ 1054.631120][T10840] Bluetooth: hci0: command 0x1003 tx timeout [ 1054.637282][T17907] Bluetooth: hci0: sending frame failed (-49) [ 1056.710729][T14010] Bluetooth: hci0: command 0x1001 tx timeout [ 1056.718216][T17907] Bluetooth: hci0: sending frame failed (-49) [ 1058.780821][T14010] Bluetooth: hci0: command 0x1009 tx timeout [ 1187.430751][ T1137] INFO: task syz-executor.2:21035 blocked for more than 143 seconds. [ 1187.438902][ T1137] Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1187.446250][ T1137] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1187.455391][ T1137] syz-executor.2 D28048 21035 9807 0x00000004 [ 1187.461939][ T1137] Call Trace: [ 1187.465260][ T1137] __schedule+0x934/0x1f90 [ 1187.469712][ T1137] ? mark_lock+0xc2/0x1220 [ 1187.474240][ T1137] ? firmware_map_remove+0x1a3/0x1a3 [ 1187.479530][ T1137] ? perf_trace_lock+0xeb/0x4c0 [ 1187.484448][ T1137] ? __lock_acquire+0x1af3/0x6320 [ 1187.489952][ T1137] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1187.496316][ T1137] schedule+0xdc/0x2b0 [ 1187.501022][ T1137] schedule_timeout+0x58d/0x8c0 [ 1187.505935][ T1137] ? wait_for_completion+0x294/0x440 [ 1187.511313][ T1137] ? usleep_range+0x170/0x170 [ 1187.516399][ T1137] ? lock_downgrade+0x920/0x920 [ 1187.522422][ T1137] ? _raw_spin_unlock_irq+0x23/0x80 [ 1187.527755][ T1137] ? wait_for_completion+0x294/0x440 [ 1187.533239][ T1137] ? _raw_spin_unlock_irq+0x23/0x80 [ 1187.538458][ T1137] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1187.543846][ T1137] ? trace_hardirqs_on+0x67/0x240 [ 1187.549053][ T1137] wait_for_completion+0x29c/0x440 [ 1187.554277][ T1137] ? wait_for_completion_interruptible+0x470/0x470 [ 1187.560826][ T1137] ? wake_up_q+0x140/0x140 [ 1187.565276][ T1137] rdma_destroy_id+0x680/0xdd0 [ 1187.570240][ T1137] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 1187.576497][ T1137] ? complete+0x61/0x80 [ 1187.581023][ T1137] ucma_close+0x115/0x310 [ 1187.585500][ T1137] __fput+0x2ff/0x890 [ 1187.589494][ T1137] ? ucma_free_ctx+0xbc0/0xbc0 [ 1187.594371][ T1137] ____fput+0x16/0x20 [ 1187.598444][ T1137] task_work_run+0x145/0x1c0 [ 1187.603100][ T1137] exit_to_usermode_loop+0x316/0x380 [ 1187.608419][ T1137] do_syscall_64+0x676/0x790 [ 1187.613134][ T1137] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1187.619092][ T1137] RIP: 0033:0x416011 [ 1187.623112][ T1137] Code: 49 89 fc 48 83 e7 0f 48 81 cf f0 00 00 00 49 8d 43 04 4c 39 d0 0f 83 ec 00 00 00 41 88 38 90 49 c1 ec 04 48 39 d6 74 5d 49 83 08 73 48 0f b6 02 48 89 cf 4c 89 c9 48 d3 e0 49 09 c4 90 48 8d [ 1187.645128][ T1137] RSP: 002b:00007fff7fdfa610 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1187.653666][ T1137] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000416011 [ 1187.661829][ T1137] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000003 [ 1187.669945][ T1137] RBP: 0000000000000000 R08: 01ffffffffffffff R09: 01ffffffffffffff [ 1187.678769][ T1137] R10: 00007fff7fdfa6f0 R11: 0000000000000293 R12: 000000000076bfc0 [ 1187.687049][ T1137] R13: 0000000000770d90 R14: 00000000000fe6ed R15: 000000000076bfcc [ 1187.695919][ T1137] [ 1187.695919][ T1137] Showing all locks held in the system: [ 1187.703705][ T1137] 1 lock held by khungtaskd/1137: [ 1187.708775][ T1137] #0: ffffffff89badac0 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279 [ 1187.718311][ T1137] 2 locks held by rsyslogd/9664: [ 1187.723331][ T1137] #0: ffff88808c8973e0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 1187.732046][ T1137] #1: ffffffff89ba2b78 (logbuf_lock){-.-.}, at: is_bpf_image_address+0x0/0x290 [ 1187.741592][ T1137] 2 locks held by getty/9754: [ 1187.746278][ T1137] #0: ffff8880a2a3d090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1187.756661][ T1137] #1: ffffc9000620b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 1187.767616][ T1137] 2 locks held by getty/9755: [ 1187.772373][ T1137] #0: ffff8880a79dd090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1187.781551][ T1137] #1: ffffc900062132e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 1187.791557][ T1137] 2 locks held by getty/9756: [ 1187.796342][ T1137] #0: ffff8880a83a9090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1187.805500][ T1137] #1: ffffc900061af2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 1187.815253][ T1137] 2 locks held by getty/9757: [ 1187.819983][ T1137] #0: ffff888098837090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1187.829139][ T1137] #1: ffffc900061d32e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 1187.838760][ T1137] 2 locks held by getty/9758: [ 1187.843514][ T1137] #0: ffff8880a94f1090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1187.852519][ T1137] #1: ffffc900061f32e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 1187.863054][ T1137] 2 locks held by getty/9759: [ 1187.867896][ T1137] #0: ffff8880a79e4090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1187.876961][ T1137] #1: ffffc9000620f2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 1187.886818][ T1137] 2 locks held by getty/9760: [ 1187.891546][ T1137] #0: ffff88809a79f090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1187.900666][ T1137] #1: ffffc9000619f2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 1187.900735][ T1137] 3 locks held by kworker/0:0/9816: [ 1187.900782][ T1137] [ 1187.918100][ T1137] ============================================= [ 1187.918100][ T1137] [ 1187.926687][ T1137] NMI backtrace for cpu 1 [ 1187.931740][ T1137] CPU: 1 PID: 1137 Comm: khungtaskd Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1187.941423][ T1137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1187.951483][ T1137] Call Trace: [ 1187.954786][ T1137] dump_stack+0x197/0x210 [ 1187.959131][ T1137] nmi_cpu_backtrace.cold+0x70/0xb2 [ 1187.964497][ T1137] ? vprintk_func+0x86/0x189 [ 1187.969175][ T1137] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 1187.974825][ T1137] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 1187.980994][ T1137] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1187.986900][ T1137] watchdog+0xdf1/0x14e0 [ 1187.991258][ T1137] kthread+0x361/0x430 [ 1187.995338][ T1137] ? reset_hung_task_detector+0x30/0x30 [ 1188.001579][ T1137] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 1188.007357][ T1137] ret_from_fork+0x24/0x30 [ 1188.012064][ T1137] Sending NMI from CPU 1 to CPUs 0: [ 1188.017382][ C0] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0xe/0x10 [ 1188.019424][ T1137] Kernel panic - not syncing: hung_task: blocked tasks [ 1188.034487][ T1137] CPU: 1 PID: 1137 Comm: khungtaskd Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1188.043937][ T1137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1188.054111][ T1137] Call Trace: [ 1188.057405][ T1137] dump_stack+0x197/0x210 [ 1188.061838][ T1137] panic+0x2e3/0x75c [ 1188.065753][ T1137] ? add_taint.cold+0x16/0x16 [ 1188.070462][ T1137] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 1188.076096][ T1137] ? ___preempt_schedule+0x16/0x18 [ 1188.081207][ T1137] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 1188.087382][ T1137] ? nmi_trigger_cpumask_backtrace+0x24c/0x28b [ 1188.093579][ T1137] ? nmi_trigger_cpumask_backtrace+0x256/0x28b [ 1188.100373][ T1137] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 1188.106529][ T1137] watchdog+0xe02/0x14e0 [ 1188.110786][ T1137] kthread+0x361/0x430 [ 1188.114853][ T1137] ? reset_hung_task_detector+0x30/0x30 [ 1188.120410][ T1137] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 1188.126139][ T1137] ret_from_fork+0x24/0x30 [ 1188.132390][ T1137] Kernel Offset: disabled [ 1188.136724][ T1137] Rebooting in 86400 seconds..