80)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) fcntl$setstatus(r10, 0x4, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:16 executing program 1: mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x2) r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) r1 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) (async) fcntl$setstatus(r0, 0x4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) (async) r4 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) r5 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r4, 0x4, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) (async) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES64=r0, @ANYBLOB="d221564c03ec0b1f46ce13f1dd6cd05ac840d7181478fe429b05113cd6e995eaa99540f4000955f5dbbb329512eb7fb0e391cf844015784ddbb46fe801e418d6a1afeea1a25098a2654281f96f885ca4104dc29b469c63efa5344ca5bf1db98f91ab3c841af5a6607401da039ef6ed451e3a", @ANYRES8=r1, @ANYRESDEC=r6, @ANYRESDEC=r5], 0x6) [ 268.599423][ T26] audit: type=1800 audit(1681478711.556:318): pid=6441 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1235 res=0 errno=0 [ 268.623339][ T26] audit: type=1800 audit(1681478712.926:319): pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1245 res=0 errno=0 13:25:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 13:25:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 13:25:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) fcntl$setstatus(r10, 0x4, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:19 executing program 1: mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x2) (async) r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) r1 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) r5 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r4, 0x4, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES64=r0, @ANYBLOB="d221564c03ec0b1f46ce13f1dd6cd05ac840d7181478fe429b05113cd6e995eaa99540f4000955f5dbbb329512eb7fb0e391cf844015784ddbb46fe801e418d6a1afeea1a25098a2654281f96f885ca4104dc29b469c63efa5344ca5bf1db98f91ab3c841af5a6607401da039ef6ed451e3a", @ANYRES8=r1, @ANYRESDEC=r6, @ANYRESDEC=r5], 0x6) 13:25:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) [ 271.786226][ T26] audit: type=1800 audit(1681478713.116:320): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1247 res=0 errno=0 13:25:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) fcntl$setstatus(r10, 0x4, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) [ 273.387261][ T26] audit: type=1800 audit(1681478716.076:321): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1253 res=0 errno=0 13:25:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) fcntl$setstatus(r10, 0x4, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 13:25:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) fcntl$setstatus(r10, 0x4, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 274.809473][ T26] audit: type=1800 audit(1681478716.116:322): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1254 res=0 errno=0 [ 274.832370][ T26] audit: type=1800 audit(1681478716.676:323): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1255 res=0 errno=0 [ 275.227373][ T26] audit: type=1800 audit(1681478716.796:324): pid=6487 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1204 res=0 errno=0 13:25:23 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="000008000100"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 13:25:23 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 13:25:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 275.489314][ T26] audit: type=1800 audit(1681478716.906:325): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1247 res=0 errno=0 [ 275.694719][ T26] audit: type=1800 audit(1681478719.236:326): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1250 res=0 errno=0 13:25:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 276.193962][ T26] audit: type=1800 audit(1681478719.256:327): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1251 res=0 errno=0 13:25:24 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="000008000100"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="000008000100"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 276.249953][ T26] audit: type=1800 audit(1681478719.356:328): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1252 res=0 errno=0 13:25:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 13:25:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) [ 277.503937][ T6561] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 13:25:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 277.640359][ T26] audit: type=1800 audit(1681478721.006:329): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1235 res=0 errno=0 13:25:26 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) [ 278.278803][ T26] audit: type=1800 audit(1681478721.046:330): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1238 res=0 errno=0 13:25:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:26 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="000008000100"], 0x6) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (rerun: 64) [ 278.415512][ T26] audit: type=1800 audit(1681478721.696:331): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1243 res=0 errno=0 13:25:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}]) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 13:25:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 13:25:28 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 13:25:28 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="dd92cab9cdc8050f76095a"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x8b}, @l2cap_cid_signaling={{0x87}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x1f}}, @l2cap_conn_req={{0x2, 0x1f, 0x4}, {0xe03c, 0x1f}}, @l2cap_info_req={{0xa, 0x1f, 0x2}, {0x1}}, @l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x8, 0x20, 0x6, 0x3}}, @l2cap_conn_rsp={{0x3, 0x2, 0x8}, {0xfe73, 0x2, 0x8, 0x800}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x3, 0x0, 0x35, 0xc}}, @l2cap_conf_rsp={{0x5, 0x8, 0x4b}, {0xb5, 0xab0c, 0x7, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x2, 0x6, 0x3, 0x3, 0x3f}}, @l2cap_conf_flushto={0x2, 0x2, 0x3}, @l2cap_conf_mtu={0x1, 0x2, 0xf000}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x7, 0xc000, 0x1, 0x81}}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_efs={0x6, 0x10, {0x53, 0x2, 0x5, 0xe84b, 0x4, 0x8}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}]}}, 0x90) 13:25:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}]) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 13:25:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 13:25:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) [ 281.219139][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 281.286625][ T26] audit: type=1800 audit(1681478729.336:342): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1205 res=0 errno=0 13:25:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:29 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="dd92cab9cdc8050f76095a"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x8b}, @l2cap_cid_signaling={{0x87}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x1f}}, @l2cap_conn_req={{0x2, 0x1f, 0x4}, {0xe03c, 0x1f}}, @l2cap_info_req={{0xa, 0x1f, 0x2}, {0x1}}, @l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x8, 0x20, 0x6, 0x3}}, @l2cap_conn_rsp={{0x3, 0x2, 0x8}, {0xfe73, 0x2, 0x8, 0x800}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x3, 0x0, 0x35, 0xc}}, @l2cap_conf_rsp={{0x5, 0x8, 0x4b}, {0xb5, 0xab0c, 0x7, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x2, 0x6, 0x3, 0x3, 0x3f}}, @l2cap_conf_flushto={0x2, 0x2, 0x3}, @l2cap_conf_mtu={0x1, 0x2, 0xf000}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x7, 0xc000, 0x1, 0x81}}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_efs={0x6, 0x10, {0x53, 0x2, 0x5, 0xe84b, 0x4, 0x8}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}]}}, 0x90) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="dd92cab9cdc8050f76095a"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x8b}, @l2cap_cid_signaling={{0x87}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x1f}}, @l2cap_conn_req={{0x2, 0x1f, 0x4}, {0xe03c, 0x1f}}, @l2cap_info_req={{0xa, 0x1f, 0x2}, {0x1}}, @l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x8, 0x20, 0x6, 0x3}}, @l2cap_conn_rsp={{0x3, 0x2, 0x8}, {0xfe73, 0x2, 0x8, 0x800}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x3, 0x0, 0x35, 0xc}}, @l2cap_conf_rsp={{0x5, 0x8, 0x4b}, {0xb5, 0xab0c, 0x7, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x2, 0x6, 0x3, 0x3, 0x3f}}, @l2cap_conf_flushto={0x2, 0x2, 0x3}, @l2cap_conf_mtu={0x1, 0x2, 0xf000}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x7, 0xc000, 0x1, 0x81}}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_efs={0x6, 0x10, {0x53, 0x2, 0x5, 0xe84b, 0x4, 0x8}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}]}}, 0x90) (async) 13:25:29 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) [ 281.781531][ T26] audit: type=1800 audit(1681478729.386:343): pid=6614 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1223 res=0 errno=0 13:25:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 13:25:30 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 13:25:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 13:25:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:30 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="dd92cab9cdc8050f76095a"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x8b}, @l2cap_cid_signaling={{0x87}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x1f}}, @l2cap_conn_req={{0x2, 0x1f, 0x4}, {0xe03c, 0x1f}}, @l2cap_info_req={{0xa, 0x1f, 0x2}, {0x1}}, @l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x8, 0x20, 0x6, 0x3}}, @l2cap_conn_rsp={{0x3, 0x2, 0x8}, {0xfe73, 0x2, 0x8, 0x800}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x3, 0x0, 0x35, 0xc}}, @l2cap_conf_rsp={{0x5, 0x8, 0x4b}, {0xb5, 0xab0c, 0x7, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x2, 0x6, 0x3, 0x3, 0x3f}}, @l2cap_conf_flushto={0x2, 0x2, 0x3}, @l2cap_conf_mtu={0x1, 0x2, 0xf000}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x7, 0xc000, 0x1, 0x81}}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_efs={0x6, 0x10, {0x53, 0x2, 0x5, 0xe84b, 0x4, 0x8}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}]}}, 0x90) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="dd92cab9cdc8050f76095a"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x8b}, @l2cap_cid_signaling={{0x87}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x1f}}, @l2cap_conn_req={{0x2, 0x1f, 0x4}, {0xe03c, 0x1f}}, @l2cap_info_req={{0xa, 0x1f, 0x2}, {0x1}}, @l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x8, 0x20, 0x6, 0x3}}, @l2cap_conn_rsp={{0x3, 0x2, 0x8}, {0xfe73, 0x2, 0x8, 0x800}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x3, 0x0, 0x35, 0xc}}, @l2cap_conf_rsp={{0x5, 0x8, 0x4b}, {0xb5, 0xab0c, 0x7, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x2, 0x6, 0x3, 0x3, 0x3f}}, @l2cap_conf_flushto={0x2, 0x2, 0x3}, @l2cap_conf_mtu={0x1, 0x2, 0xf000}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x7, 0xc000, 0x1, 0x81}}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_efs={0x6, 0x10, {0x53, 0x2, 0x5, 0xe84b, 0x4, 0x8}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}]}}, 0x90) (async) 13:25:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 13:25:30 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 13:25:32 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 13:25:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:32 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:25:32 executing program 2: mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) fstat(r3, &(0x7f0000000240)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x12000, 0x20) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) accept4(r5, 0x0, 0x0, 0x80800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000080)=""/252, 0x50000, 0x0, 0x0, 0x0) unshare(0x6c060000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x4000000) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @mcast2, 0xfff}, 0x1c) socket(0x5353db051f2bb248, 0x80000, 0x3) 13:25:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 13:25:32 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip6_tables_names\x00') r2 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r2, 0x4, 0x0) r5 = openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x200100, 0x1) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1, &(0x7f0000003cc0)=[{0x10}, {0x10}, {0x10, 0x1, 0x7f}, {0x10, 0xff, 0x80}, {0x2a0, 0x102, 0x0, "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"}], 0x2e0}, 0x0, 0x4000000, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MSG_RING={0x28, 0x21, 0x0, r5, 0xfffffffffffffff8, &(0x7f0000000540)="a62618875f9455f82c7a7b54518a61f8b434e54ef1c45f99d578d7968688988c1ef48455a4023753e14de448024249cb88056a4fb2a3e663571d53488b0350d35a2394cdb77fb8dfcdaf45e7df411123a9e79a9a4b808e71684fc9f3d7a21d835e92ff9d8a26b61884498a929795793a33b38bb929a0221c800ecca38a323ecb9f0999ccfb85a478c93f91216dd4b41b6685ed0565536da2601ea274a8f221684ad7ccf6b9a13e7396074cdcab38e4a149efb564da5e734e1dc43aaa735f3613d73e6b0e77a149bfbde3bf37db5dd47d9205c84a56213276debf3fe1fdc9bd54a8f3ac6f7137c310119681fb5820fdec50ce6b8b0383837b5785556c9ba22a5720d5ef5e3f2f1b278c569d7db75f0ef371fc17a3e79b1a065a33313d1f498bb330d958dee041e812db3ca107085a84d97baf2a3c1b975c04a6fa1544f0f91e4fc07009be1c237b5a086d4a4fd44515d414a70d890a6e15ccb065d1e4cf837436410c46815443d6b4a2c79348268a4edd1f12b9f09e340479ffec06dcc6ffd0d9c45734dd157c375fe47cb050b784cfed928adea0968f4a8179b230c9e6e86308ae26d5e132a90b79b49194011fe1cf4ae2dade39f17ba8a79a1178941bd3075149e2b417d0bda71b76cc9aaa190ea1b1de655c48cd5fba0088071db4cbf590d765874924ae919cad5eea9adb253545156dd7a036791c8a55f5a99e5fdafa709527a4df28afc145af770aa84a7f2a41a8ad2dd6c7ed7477487a279d69877830ce4ea1215916fbef5f68daa78b1fbab6ce89484e3c0b115105733dec1c0b7c6413b70a9102aa5b6241dc7534f8dbaa8951ba01936fa680009f98a9f6a8f6207fbbfa2d2e6c1e606741472cba226e317c296b265b3846b4dcac2d795e19d1bf166cd2a4675ef2d588e6c7e435081e10cb58df2ea6e681fbdf8f7d37c43c53085729112758951f4f6e1830bf9a0f0af70c0cf049c02061c11a73c87d846ca43c652ddde277685fa8942cf025a40f2a950e3b04d49cdeb8f3d9282a436f25dc57d941ba783258cd71d7843f1a298b898011f75c528caf771c33fccc005e42ce479e90ec39cd5ad7b890215d42864a97bf9bb985dc09b986230f6274b1b51ba9b53d19e6183b4d683633342b395e78c75cf6c2d316ec787a4871cd1ea7bba454dc0e5fc136b8c074ce21629cf538453c0969b4e2229594852dd7bac731e1d09b0502a927a960d29fc2a88df53526ad070513f1b812d115073866c275786ad96cfae4ac02c3053b7a2ec6b7e8cf8067735598921bfde183f54fda2ee0dd2826023c608cc8e8edc209fc55e7fdc886998168dc6cd01fb06304351b1f7d02a369937f2e4d1836ca15633876bd3b5bc6abf6f21a854097d2159c64229418f7016b0ffa6ed29239b2b15af052bda4db9327a9ac456ccb9818c8e718f2513670e40f73ec88c01d3234bf588396e88e61027e249e91806acb73bfd67f602b33d6d6a21e9f10e59c39f4d9762e3f862e0e5cce2a4b661b7f436008ad2337bc3c49ee2a6e57345b4a1d3b9a0a17f6cfb8b883e1da9af27c37626c32ddfe24170c3b55133fac9e9159c14a4555cadd4fc4707c60faddaeafd6fd714e46160a22b4939fae2637d36292d96be710f797ce9c1c04899323c86ef55100114ccb343af4d5eb8ce4d7694f9cacff8bdf5890b7a314d603d08b8e1a8d5c5793430a9ced91f3707db90124d79aff8bcfc36b76624b3825129a0fa89a73746f10c940e4a4379a75976a0c5eec29a7f5c4eb244aea784eff207bda524e01381f33ad397fd0f56818e62f00d65793242e381856302310d07fef077ff97909dd52958172f75e6513cda6bb89cb6f62e133d2676aac5050d7e600382cda15ba3817accc50566ac99d333926038d2193b19c2e7984a776d765d478aa804e91aed6ccb2b73d13c3d016fb5128782adfb604bd44eb6e2082599385edd2db66236e627ad169652d5101798b261637f695c7124bda847a4b365c130c660a1cfaa7797e52e63081c5b67558c15966a2828aa4ae1274df6e2ed02f2d1b28954e8c4b71324185b9b61357e985e57109d235b5c4ee2ef656ec979222b7a17782cdf3dce96b1493082a2debdbb511910c7fbbaa5e79afe93f8ff7cd73b701e9ec029e7ae90b2beb13c6532ac7a174015ddc661b36eefb293002217d987b02994e0b6da7764487336d3375ae25b43a126e36cc12b0d4f2b5cdf73032ba2bbec399d50e0b0634f7d03789ffc5475242f5fba7ff6d4e6cea729c1f0efb455dc4dce56c6f58baac7a84476cd5dee7bb75476533416cc3e29624364d26a124d2951fefbaf894aa29c393c44b9953583036a48ce3c1025c623cf100a8ec5b5f5d48b6727d5376d8281af8fdbb36877f4b3d7bbe3f7844c5b4195cfd27517d6ff8399bf3591eb9ed10e0f07304853a0b85415bd533dfe60cbc7797509605d7c766e6df4fb8810cb3353c750d610f4b25c166c7af553085b65552258ba0f8ca08df3ea5b4d5edb0fc5e8afbb474c9eca35e44e6c056523a27e9960a43a47ef73f9da5458debf6f4778e823f33cdf0b27008f8bb9b73e307a601134b9ee396c0e64ac6d52216d040861fe4bcf5b29c67cd30c328d0f8c238b3fbf9e3f5817477134773bdcf4df500a56da097ab1cef03645d43f4ddbcc3037de8e492da778fe6af67aa7cc65eac4a49157818972dac8bb4f17951a9bb295b76defb2bfe709cea2a3e316ed067f87b3b740f09415713b6f993966fbaff9ee7277557947da5320ded54c3e8fc0dd0271b9167d19a11ea21946a4a61131e38d4beaa54cc5e9387dfce917214363b574d49868ee1fd7de80751538cfd17454d491efe0fc1ef58986b5f322871e4a9fda904083b83a650566e23c938a548375f915e0fd36a6ae244f91abe86da344da1c46d686f50c156fc677d240faf17c3a0bae3a685d82bca5f136a117f7b898e4fcd72bb951b75cccf7276f8dcd254ddc12fba3508244bed7f0f1fcf19b02b6e72ac44dfe60da949ac3b198849d09a36692cefa097d09acd99877e66f792ff4b633947041b51c65026b59aea7a18b393715c1f3ccb4510c76067b773b51326b8c72f8f6daf33b5fd35e43c6c342c16d0d546e725e6ac284f525813bd707cdc2a575893a2f99e00538419c8639b281b3d799309b1b69d1fc0b30ff4298a3a1c0cb3e3fd823d1818f7e6df0f0435fff7f73eb4b085788f89e9d948649a09fe7a6abb257239f70d7d26e018b79dade6b05cedc25e1e6439aaf8cdc6675c652cfe66f14ca23fff476fef1d507e5c195b0e1433ad80e4ffbfe7c72ec4cd64045e6799d053f01f1b92393a1685d5d0d92fd1b9140522c5e021bc6e97d751b49e91a7418ebe8e4531bd9815da226d63b5da067da99996dbe92ab12740ecd8becdd6bc902ae0ba71dfca9d8a800a9077229305e3520a3b5a4fba355c100c0060bf9c2f84d4f77b03f8c1f8ac2f2d977a9c850be9f17b2b8950a4b42975492bb02a04790bd17ab487bd92c81853b7b657b14e38a02dd5417835d4169039338173e06287c888c3a981c94ecacc4b67016e7a33f6456729c2f9ad3c89b4e1111e40730667ef737929bf8eb9e69c9fd2dbfb0ac3fd1852e39bcace74b3b033ce6c7a85aaf480830854c5f0fe4a951a6230b2be784b373baff7f60c5ddaf6ceebe2f170509665627c340fc5fd3dcfce801759611ca4b4e3ef5200e00bead2a675b7fd41bdd8ce63190e5e49867113ddbaa18a5ae6c807d3edcd61af9ba0dd0ff4e1f33eea27a7421602052bab81ae8ebd10e86de59a5d4b0e873f4a0b95fd9dea1c0ff3ac2155b0c5c5d176c58704cf8705dc331479f0b38e2d842844af77bb4efcb02ac7f47e95355a1296faed61648ed17480c43ae337c01b4b58576062a0d11dade9b1999cd974d95dcafb243c45d41dfb8c93f6f824a70074c7d9162a3303dbb681a1ecbd75f797712d633abe981e7d526d89d73c365a9f106bb70939f5b2904b77e6ed5571e6869469cec837cafc3107a3a1e76d138dba0b620fbffda40e8bbbedda85fe1b3932350f2455c1d6def018f06748d51a1202ac9e4fe61617321b2158db8760da5628490e5e31cbea5d1365e4f119c691c1387397f37f3fd9451706b7584dba54752dcca91f8bbd2e8e50fb4f4cfe5b55c3fb02c51272af725c221546d47e6ab03c2da2d28445ab8273bbf53fc465365bd28aa5f233331edc213ba36dda5508af41d35e41c05a899a28b2b28b31459d182b10443c48212e4d3d4d9e4b3d5565c3f232fb16f5e1e06c30494040ef95eba615cf2917ff5835494535dd97bb17caefa0abf836bf854558cb7e773c8d8bdd39a180e715e18caf07c4cea856e795a8b6eae25ca334cf5cf0ab094299b0861a2ab25ebc697f5e016b4b70116a2b696f31bd0f83592ddc0b65a57d06efe320ec28dd33df7198d837d2f41f641e5757bb4f43d2906685ec85e9f22d25e555f4d9447520f6bec10e649956d8980fd8729dcfe5872872e28999a109f7d57f0290896a4b6c392983155aa9107fc04be6b260d88ad2c1ff02e2403089b68331eb896259033d0eadbd56eb213a70fdb31893c94f6931d32c644610d97dab968a36e129f57ca383fae19d697d7c1cf09cb2d887b41a313cefbdf6b0eb5e26bb83e59aa1734a327c06acf37fcb89403cec624545b06ce745ee9f0428bc4e2168f111acca591d25d33de5374194547ca93f300b201394b317e20343f13ed8394f6d91cacc69d2363ab30396702e0e59f3f4334d608f040f28b88ebca3d68946fca560238e173131d65d7058100e405cfea8dba096e3bf4e6042ab57715650478ceef6948d16ee533e4870bfe138793ea50cd2ab65bfcb0a89c586f9d861cb5e7b3af746862a89f1ea3831e02da82dc5e4b00400abc29c807b5d7f45eb389a28702894bbcc73da377110e519f9724bab0e5eb84b63b8814d4b6cde88404835a055efcdde248b87ddc9c7aba31f56f08363eed7f0359e22484ca2859fccf8ce776c3c9b0e2e4aaf1cf64f616d680d0e736d9002504adda1ed04014c5875f2877e7f015298a0183b11d97822bee049f8f28f4247195b0c2c7b6793976ed26a460707da84ce244c24d8ef600331902e8c77848cc2f78ebf9bcd4d3095e403a0784e99e3891ef4765e2d272810c305e90b67ddb7bc2a132fc22a6796e3b6b0db8db8988b33b9da3764a76442cf5b5e3624f99e73839e4a77f84af67218ccaf8d42bbd85693edd5181e87730924886523d1ddc8a7a4677743390d4a17143c45d32534b4c7d1f02888f67bf21436b618e057fe47c87f500a0f456b9df6fd6b02eca0719064539290d8d9780c0d7b43229621ceb02e616aad0a12b04fab514544294dc602657e605a810a5c72d0b8df48dc778fc352eefbe6b81d711cf931a19ef2c391a5581964a94e1aaf9bc157377ab063843197941be80a490f3d3dbf33975df58e7cc524700fd7afb076493101ec4e8637a4bab30c823e7e60c8ad57b41dee5548fb6a26636ad9f118d4f92314af8ce0b53afc28cecf605da41cc72c3880540a7358ee648784305496674dce244a055836f7c99754cc6eea7c896885c099376f7466303d50071dae33fef90988fbbee635af0ba3f47dd927473f01c5c85fee69cd8228ca327ea874106bbb6f244b863023dc8f6867d4e8d757be9d6ba70c6928e3ed3d5c0d67f96284b30eb5dfa47b2b457d630fb8515be2623e930653a5eef49d08a774e79437fbfce8808c7eed71ee327606662a23f60285b9f116a417e305e8b8570dba6fc0ef", 0x1000, 0x0, 0x0, {0x0, r6}}, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000080)=0x10000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="d96ab9044803"], 0x6) 13:25:32 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) [ 286.305569][ T26] audit: type=1400 audit(1681478733.636:344): avc: denied { create } for pid=6665 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 13:25:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:34 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 13:25:34 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip6_tables_names\x00') r2 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r2, 0x4, 0x0) r5 = openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x200100, 0x1) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1, &(0x7f0000003cc0)=[{0x10}, {0x10}, {0x10, 0x1, 0x7f}, {0x10, 0xff, 0x80}, {0x2a0, 0x102, 0x0, "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"}], 0x2e0}, 0x0, 0x4000000, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MSG_RING={0x28, 0x21, 0x0, r5, 0xfffffffffffffff8, &(0x7f0000000540)="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", 0x1000, 0x0, 0x0, {0x0, r6}}, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000080)=0x10000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="d96ab9044803"], 0x6) getpid() (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) syz_open_procfs(r0, &(0x7f0000000040)='net/ip6_tables_names\x00') (async) open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) (async) fcntl$setstatus(r2, 0x4, 0x0) (async) openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x200100, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1, &(0x7f0000003cc0)=[{0x10}, {0x10}, {0x10, 0x1, 0x7f}, {0x10, 0xff, 0x80}, {0x2a0, 0x102, 0x0, "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"}], 0x2e0}, 0x0, 0x4000000, 0x0, {0x0, r6}}, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MSG_RING={0x28, 0x21, 0x0, r5, 0xfffffffffffffff8, &(0x7f0000000540)="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", 0x1000, 0x0, 0x0, {0x0, r6}}, 0x0) (async) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000080)=0x10000) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="d96ab9044803"], 0x6) (async) [ 286.413986][ T26] audit: type=1400 audit(1681478733.776:345): avc: denied { bind } for pid=6665 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 286.444621][ T26] audit: type=1400 audit(1681478733.956:346): avc: denied { setopt } for pid=6665 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 13:25:34 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 13:25:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) [ 286.545372][ T26] audit: type=1400 audit(1681478733.996:347): avc: denied { accept } for pid=6665 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 13:25:34 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 13:25:34 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip6_tables_names\x00') r2 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r2, 0x4, 0x0) r5 = openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x200100, 0x1) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1, &(0x7f0000003cc0)=[{0x10}, {0x10}, {0x10, 0x1, 0x7f}, {0x10, 0xff, 0x80}, {0x2a0, 0x102, 0x0, "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"}], 0x2e0}, 0x0, 0x4000000, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MSG_RING={0x28, 0x21, 0x0, r5, 0xfffffffffffffff8, &(0x7f0000000540)="a62618875f9455f82c7a7b54518a61f8b434e54ef1c45f99d578d7968688988c1ef48455a4023753e14de448024249cb88056a4fb2a3e663571d53488b0350d35a2394cdb77fb8dfcdaf45e7df411123a9e79a9a4b808e71684fc9f3d7a21d835e92ff9d8a26b61884498a929795793a33b38bb929a0221c800ecca38a323ecb9f0999ccfb85a478c93f91216dd4b41b6685ed0565536da2601ea274a8f221684ad7ccf6b9a13e7396074cdcab38e4a149efb564da5e734e1dc43aaa735f3613d73e6b0e77a149bfbde3bf37db5dd47d9205c84a56213276debf3fe1fdc9bd54a8f3ac6f7137c310119681fb5820fdec50ce6b8b0383837b5785556c9ba22a5720d5ef5e3f2f1b278c569d7db75f0ef371fc17a3e79b1a065a33313d1f498bb330d958dee041e812db3ca107085a84d97baf2a3c1b975c04a6fa1544f0f91e4fc07009be1c237b5a086d4a4fd44515d414a70d890a6e15ccb065d1e4cf837436410c46815443d6b4a2c79348268a4edd1f12b9f09e340479ffec06dcc6ffd0d9c45734dd157c375fe47cb050b784cfed928adea0968f4a8179b230c9e6e86308ae26d5e132a90b79b49194011fe1cf4ae2dade39f17ba8a79a1178941bd3075149e2b417d0bda71b76cc9aaa190ea1b1de655c48cd5fba0088071db4cbf590d765874924ae919cad5eea9adb253545156dd7a036791c8a55f5a99e5fdafa709527a4df28afc145af770aa84a7f2a41a8ad2dd6c7ed7477487a279d69877830ce4ea1215916fbef5f68daa78b1fbab6ce89484e3c0b115105733dec1c0b7c6413b70a9102aa5b6241dc7534f8dbaa8951ba01936fa680009f98a9f6a8f6207fbbfa2d2e6c1e606741472cba226e317c296b265b3846b4dcac2d795e19d1bf166cd2a4675ef2d588e6c7e435081e10cb58df2ea6e681fbdf8f7d37c43c53085729112758951f4f6e1830bf9a0f0af70c0cf049c02061c11a73c87d846ca43c652ddde277685fa8942cf025a40f2a950e3b04d49cdeb8f3d9282a436f25dc57d941ba783258cd71d7843f1a298b898011f75c528caf771c33fccc005e42ce479e90ec39cd5ad7b890215d42864a97bf9bb985dc09b986230f6274b1b51ba9b53d19e6183b4d683633342b395e78c75cf6c2d316ec787a4871cd1ea7bba454dc0e5fc136b8c074ce21629cf538453c0969b4e2229594852dd7bac731e1d09b0502a927a960d29fc2a88df53526ad070513f1b812d115073866c275786ad96cfae4ac02c3053b7a2ec6b7e8cf8067735598921bfde183f54fda2ee0dd2826023c608cc8e8edc209fc55e7fdc886998168dc6cd01fb06304351b1f7d02a369937f2e4d1836ca15633876bd3b5bc6abf6f21a854097d2159c64229418f7016b0ffa6ed29239b2b15af052bda4db9327a9ac456ccb9818c8e718f2513670e40f73ec88c01d3234bf588396e88e61027e249e91806acb73bfd67f602b33d6d6a21e9f10e59c39f4d9762e3f862e0e5cce2a4b661b7f436008ad2337bc3c49ee2a6e57345b4a1d3b9a0a17f6cfb8b883e1da9af27c37626c32ddfe24170c3b55133fac9e9159c14a4555cadd4fc4707c60faddaeafd6fd714e46160a22b4939fae2637d36292d96be710f797ce9c1c04899323c86ef55100114ccb343af4d5eb8ce4d7694f9cacff8bdf5890b7a314d603d08b8e1a8d5c5793430a9ced91f3707db90124d79aff8bcfc36b76624b3825129a0fa89a73746f10c940e4a4379a75976a0c5eec29a7f5c4eb244aea784eff207bda524e01381f33ad397fd0f56818e62f00d65793242e381856302310d07fef077ff97909dd52958172f75e6513cda6bb89cb6f62e133d2676aac5050d7e600382cda15ba3817accc50566ac99d333926038d2193b19c2e7984a776d765d478aa804e91aed6ccb2b73d13c3d016fb5128782adfb604bd44eb6e2082599385edd2db66236e627ad169652d5101798b261637f695c7124bda847a4b365c130c660a1cfaa7797e52e63081c5b67558c15966a2828aa4ae1274df6e2ed02f2d1b28954e8c4b71324185b9b61357e985e57109d235b5c4ee2ef656ec979222b7a17782cdf3dce96b1493082a2debdbb511910c7fbbaa5e79afe93f8ff7cd73b701e9ec029e7ae90b2beb13c6532ac7a174015ddc661b36eefb293002217d987b02994e0b6da7764487336d3375ae25b43a126e36cc12b0d4f2b5cdf73032ba2bbec399d50e0b0634f7d03789ffc5475242f5fba7ff6d4e6cea729c1f0efb455dc4dce56c6f58baac7a84476cd5dee7bb75476533416cc3e29624364d26a124d2951fefbaf894aa29c393c44b9953583036a48ce3c1025c623cf100a8ec5b5f5d48b6727d5376d8281af8fdbb36877f4b3d7bbe3f7844c5b4195cfd27517d6ff8399bf3591eb9ed10e0f07304853a0b85415bd533dfe60cbc7797509605d7c766e6df4fb8810cb3353c750d610f4b25c166c7af553085b65552258ba0f8ca08df3ea5b4d5edb0fc5e8afbb474c9eca35e44e6c056523a27e9960a43a47ef73f9da5458debf6f4778e823f33cdf0b27008f8bb9b73e307a601134b9ee396c0e64ac6d52216d040861fe4bcf5b29c67cd30c328d0f8c238b3fbf9e3f5817477134773bdcf4df500a56da097ab1cef03645d43f4ddbcc3037de8e492da778fe6af67aa7cc65eac4a49157818972dac8bb4f17951a9bb295b76defb2bfe709cea2a3e316ed067f87b3b740f09415713b6f993966fbaff9ee7277557947da5320ded54c3e8fc0dd0271b9167d19a11ea21946a4a61131e38d4beaa54cc5e9387dfce917214363b574d49868ee1fd7de80751538cfd17454d491efe0fc1ef58986b5f322871e4a9fda904083b83a650566e23c938a548375f915e0fd36a6ae244f91abe86da344da1c46d686f50c156fc677d240faf17c3a0bae3a685d82bca5f136a117f7b898e4fcd72bb951b75cccf7276f8dcd254ddc12fba3508244bed7f0f1fcf19b02b6e72ac44dfe60da949ac3b198849d09a36692cefa097d09acd99877e66f792ff4b633947041b51c65026b59aea7a18b393715c1f3ccb4510c76067b773b51326b8c72f8f6daf33b5fd35e43c6c342c16d0d546e725e6ac284f525813bd707cdc2a575893a2f99e00538419c8639b281b3d799309b1b69d1fc0b30ff4298a3a1c0cb3e3fd823d1818f7e6df0f0435fff7f73eb4b085788f89e9d948649a09fe7a6abb257239f70d7d26e018b79dade6b05cedc25e1e6439aaf8cdc6675c652cfe66f14ca23fff476fef1d507e5c195b0e1433ad80e4ffbfe7c72ec4cd64045e6799d053f01f1b92393a1685d5d0d92fd1b9140522c5e021bc6e97d751b49e91a7418ebe8e4531bd9815da226d63b5da067da99996dbe92ab12740ecd8becdd6bc902ae0ba71dfca9d8a800a9077229305e3520a3b5a4fba355c100c0060bf9c2f84d4f77b03f8c1f8ac2f2d977a9c850be9f17b2b8950a4b42975492bb02a04790bd17ab487bd92c81853b7b657b14e38a02dd5417835d4169039338173e06287c888c3a981c94ecacc4b67016e7a33f6456729c2f9ad3c89b4e1111e40730667ef737929bf8eb9e69c9fd2dbfb0ac3fd1852e39bcace74b3b033ce6c7a85aaf480830854c5f0fe4a951a6230b2be784b373baff7f60c5ddaf6ceebe2f170509665627c340fc5fd3dcfce801759611ca4b4e3ef5200e00bead2a675b7fd41bdd8ce63190e5e49867113ddbaa18a5ae6c807d3edcd61af9ba0dd0ff4e1f33eea27a7421602052bab81ae8ebd10e86de59a5d4b0e873f4a0b95fd9dea1c0ff3ac2155b0c5c5d176c58704cf8705dc331479f0b38e2d842844af77bb4efcb02ac7f47e95355a1296faed61648ed17480c43ae337c01b4b58576062a0d11dade9b1999cd974d95dcafb243c45d41dfb8c93f6f824a70074c7d9162a3303dbb681a1ecbd75f797712d633abe981e7d526d89d73c365a9f106bb70939f5b2904b77e6ed5571e6869469cec837cafc3107a3a1e76d138dba0b620fbffda40e8bbbedda85fe1b3932350f2455c1d6def018f06748d51a1202ac9e4fe61617321b2158db8760da5628490e5e31cbea5d1365e4f119c691c1387397f37f3fd9451706b7584dba54752dcca91f8bbd2e8e50fb4f4cfe5b55c3fb02c51272af725c221546d47e6ab03c2da2d28445ab8273bbf53fc465365bd28aa5f233331edc213ba36dda5508af41d35e41c05a899a28b2b28b31459d182b10443c48212e4d3d4d9e4b3d5565c3f232fb16f5e1e06c30494040ef95eba615cf2917ff5835494535dd97bb17caefa0abf836bf854558cb7e773c8d8bdd39a180e715e18caf07c4cea856e795a8b6eae25ca334cf5cf0ab094299b0861a2ab25ebc697f5e016b4b70116a2b696f31bd0f83592ddc0b65a57d06efe320ec28dd33df7198d837d2f41f641e5757bb4f43d2906685ec85e9f22d25e555f4d9447520f6bec10e649956d8980fd8729dcfe5872872e28999a109f7d57f0290896a4b6c392983155aa9107fc04be6b260d88ad2c1ff02e2403089b68331eb896259033d0eadbd56eb213a70fdb31893c94f6931d32c644610d97dab968a36e129f57ca383fae19d697d7c1cf09cb2d887b41a313cefbdf6b0eb5e26bb83e59aa1734a327c06acf37fcb89403cec624545b06ce745ee9f0428bc4e2168f111acca591d25d33de5374194547ca93f300b201394b317e20343f13ed8394f6d91cacc69d2363ab30396702e0e59f3f4334d608f040f28b88ebca3d68946fca560238e173131d65d7058100e405cfea8dba096e3bf4e6042ab57715650478ceef6948d16ee533e4870bfe138793ea50cd2ab65bfcb0a89c586f9d861cb5e7b3af746862a89f1ea3831e02da82dc5e4b00400abc29c807b5d7f45eb389a28702894bbcc73da377110e519f9724bab0e5eb84b63b8814d4b6cde88404835a055efcdde248b87ddc9c7aba31f56f08363eed7f0359e22484ca2859fccf8ce776c3c9b0e2e4aaf1cf64f616d680d0e736d9002504adda1ed04014c5875f2877e7f015298a0183b11d97822bee049f8f28f4247195b0c2c7b6793976ed26a460707da84ce244c24d8ef600331902e8c77848cc2f78ebf9bcd4d3095e403a0784e99e3891ef4765e2d272810c305e90b67ddb7bc2a132fc22a6796e3b6b0db8db8988b33b9da3764a76442cf5b5e3624f99e73839e4a77f84af67218ccaf8d42bbd85693edd5181e87730924886523d1ddc8a7a4677743390d4a17143c45d32534b4c7d1f02888f67bf21436b618e057fe47c87f500a0f456b9df6fd6b02eca0719064539290d8d9780c0d7b43229621ceb02e616aad0a12b04fab514544294dc602657e605a810a5c72d0b8df48dc778fc352eefbe6b81d711cf931a19ef2c391a5581964a94e1aaf9bc157377ab063843197941be80a490f3d3dbf33975df58e7cc524700fd7afb076493101ec4e8637a4bab30c823e7e60c8ad57b41dee5548fb6a26636ad9f118d4f92314af8ce0b53afc28cecf605da41cc72c3880540a7358ee648784305496674dce244a055836f7c99754cc6eea7c896885c099376f7466303d50071dae33fef90988fbbee635af0ba3f47dd927473f01c5c85fee69cd8228ca327ea874106bbb6f244b863023dc8f6867d4e8d757be9d6ba70c6928e3ed3d5c0d67f96284b30eb5dfa47b2b457d630fb8515be2623e930653a5eef49d08a774e79437fbfce8808c7eed71ee327606662a23f60285b9f116a417e305e8b8570dba6fc0ef", 0x1000, 0x0, 0x0, {0x0, r6}}, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000080)=0x10000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="d96ab9044803"], 0x6) getpid() (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) syz_open_procfs(r0, &(0x7f0000000040)='net/ip6_tables_names\x00') (async) open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) (async) fcntl$setstatus(r2, 0x4, 0x0) (async) openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x200100, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1, &(0x7f0000003cc0)=[{0x10}, {0x10}, {0x10, 0x1, 0x7f}, {0x10, 0xff, 0x80}, {0x2a0, 0x102, 0x0, "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"}], 0x2e0}, 0x0, 0x4000000, 0x0, {0x0, r6}}, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MSG_RING={0x28, 0x21, 0x0, r5, 0xfffffffffffffff8, &(0x7f0000000540)="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", 0x1000, 0x0, 0x0, {0x0, r6}}, 0x0) (async) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000080)=0x10000) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="d96ab9044803"], 0x6) (async) [ 286.732033][ T26] audit: type=1800 audit(1681478734.496:348): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1252 res=0 errno=0 [ 287.489697][ T26] audit: type=1800 audit(1681478734.646:349): pid=6685 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1252 res=0 errno=0 [ 287.515392][ T26] audit: type=1800 audit(1681478734.956:350): pid=6702 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1249 res=0 errno=0 [ 287.589071][ T26] audit: type=1800 audit(1681478735.656:351): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1259 res=0 errno=0 13:25:37 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) (async) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) (async, rerun: 64) prlimit64(0x0, 0x0, 0x0, 0x0) (async, rerun: 64) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) (async, rerun: 64) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:25:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 13:25:37 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 13:25:37 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) r4 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r3, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r7 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r7, 0x4, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="044803e300d8", @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRESDEC=r4, @ANYRES32, @ANYRESHEX=r5, @ANYRES8=r0], 0x6) 13:25:37 executing program 2: mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0), 0x0) (async) writev(r1, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) fstat(r3, &(0x7f0000000240)) (async) fstat(r3, &(0x7f0000000240)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x12000, 0x20) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) accept4(r5, 0x0, 0x0, 0x80800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000080)=""/252, 0x50000, 0x0, 0x0, 0x0) (async) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000080)=""/252, 0x50000, 0x0, 0x0, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x4000000) (async) unshare(0x4000000) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @mcast2, 0xfff}, 0x1c) socket(0x5353db051f2bb248, 0x80000, 0x3) (async) socket(0x5353db051f2bb248, 0x80000, 0x3) 13:25:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 13:25:37 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) [ 289.302089][ T26] audit: type=1800 audit(1681478737.436:352): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1235 res=0 errno=0 [ 291.071789][ T47] Bluetooth: hci2: Malformed Event: 0x48 13:25:39 executing program 2: mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0) (async) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) fstat(r3, &(0x7f0000000240)) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x12000, 0x20) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) accept4(r5, 0x0, 0x0, 0x80800) (async) accept4(r5, 0x0, 0x0, 0x80800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000080)=""/252, 0x50000, 0x0, 0x0, 0x0) unshare(0x6c060000) (async) unshare(0x6c060000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x4000000) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @mcast2, 0xfff}, 0x1c) (async) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @mcast2, 0xfff}, 0x1c) socket(0x5353db051f2bb248, 0x80000, 0x3) 13:25:39 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) r4 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r3, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r7 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r7, 0x4, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="044803e300d8", @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRESDEC=r4, @ANYRES32, @ANYRESHEX=r5, @ANYRES8=r0], 0x6) open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) (async) fcntl$setstatus(r0, 0x4, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) (async) fcntl$setstatus(r3, 0x4, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000500)) (async) fcntl$setstatus(r7, 0x4, 0x0) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="044803e300d8", @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRESDEC=r4, @ANYRES32, @ANYRESHEX=r5, @ANYRES8=r0], 0x6) (async) [ 291.112432][ T26] audit: type=1800 audit(1681478737.476:353): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1235 res=0 errno=0 13:25:39 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 13:25:39 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:25:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 13:25:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 291.225030][ T47] Bluetooth: hci2: Malformed Event: 0x48 13:25:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:39 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) r4 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r3, 0x4, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) (async) r7 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000500)=0x0) (async) fcntl$setstatus(r7, 0x4, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="044803e300d8", @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRESDEC=r4, @ANYRES32, @ANYRESHEX=r5, @ANYRES8=r0], 0x6) [ 291.612765][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 291.612804][ T26] audit: type=1800 audit(1681478739.526:359): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1211 res=0 errno=0 13:25:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 292.118001][ T26] audit: type=1800 audit(1681478740.256:360): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1220 res=0 errno=0 13:25:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:41 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:25:41 executing program 1: ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0], 0x1}) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="044803e300d80433fd27a0080e36019a8a213b9cd1fb2ed0506d837f19a39a155730bb8d095c8141a32abe647c53fa562bc4edff48c3b41f4ffe3ad0dedbb148d1576bc445190a52bf594aed8261968752b6b4f88101dd12039c8b6d50530800f6e4dd3b6ad842fd4a3ac7e77c24c781b1b4719e2f4b4caad618c2cfb467ea1f3ff00f0969414d67531e87522c2819d14ecee58f6c20de0076f66d780bc5ae2ebc", @ANYRESDEC=0x0], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xce}, "82ac36e4b95fd98d52158a1e7fa9f2cfff66f7ad506f1c03d571ab05a0278b86070ba99629fb65c29d7aeb3180d7956fdeff994e177e20632ce01c37e512133643ef6b0a57587e57877ce4fe2d4910be7d07cc07a89665d95de7a2c5bccc97e5f3a838721bf310bd71933e69fee0c2ef9889640270bfd3cbd6280ba06b8f6568f7b8d008e23d1a1b16253818f33809e7d2fa9feeaee6a2f85829aa7ea1ac599d60a3e38e2ff0763ba2233e618d905376787dd79a1861448aa398790d22c065d01af53122b0daf3660814c5836e5c"}, 0xd2) [ 293.015198][ T26] audit: type=1800 audit(1681478740.296:361): pid=6766 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1220 res=0 errno=0 [ 293.037981][ T26] audit: type=1800 audit(1681478740.296:362): pid=6767 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1220 res=0 errno=0 [ 294.811835][ T26] audit: type=1800 audit(1681478740.516:363): pid=6773 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1223 res=0 errno=0 [ 295.078054][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 295.090288][ T26] audit: type=1800 audit(1681478742.616:364): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1251 res=0 errno=0 [ 295.291251][ T26] audit: type=1800 audit(1681478742.746:365): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1253 res=0 errno=0 13:25:44 executing program 2: mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) fstat(r3, &(0x7f0000000240)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x12000, 0x20) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) accept4(r5, 0x0, 0x0, 0x80800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000080)=""/252, 0x50000, 0x0, 0x0, 0x0) unshare(0x6c060000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x4000000) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @mcast2, 0xfff}, 0x1c) socket(0x5353db051f2bb248, 0x80000, 0x3) 13:25:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:44 executing program 0: mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) fstat(r3, &(0x7f0000000240)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x12000, 0x20) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) accept4(r5, 0x0, 0x0, 0x80800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000080)=""/252, 0x50000, 0x0, 0x0, 0x0) unshare(0x6c060000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x4000000) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @mcast2, 0xfff}, 0x1c) socket(0x5353db051f2bb248, 0x80000, 0x3) [ 297.483625][ T26] audit: type=1800 audit(1681478745.596:366): pid=6798 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1248 res=0 errno=0 13:25:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:47 executing program 1: ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0], 0x1}) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="044803e300d80433fd27a0080e36019a8a213b9cd1fb2ed0506d837f19a39a155730bb8d095c8141a32abe647c53fa562bc4edff48c3b41f4ffe3ad0dedbb148d1576bc445190a52bf594aed8261968752b6b4f88101dd12039c8b6d50530800f6e4dd3b6ad842fd4a3ac7e77c24c781b1b4719e2f4b4caad618c2cfb467ea1f3ff00f0969414d67531e87522c2819d14ecee58f6c20de0076f66d780bc5ae2ebc", @ANYRESDEC=0x0], 0x6) (rerun: 32) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xce}, "82ac36e4b95fd98d52158a1e7fa9f2cfff66f7ad506f1c03d571ab05a0278b86070ba99629fb65c29d7aeb3180d7956fdeff994e177e20632ce01c37e512133643ef6b0a57587e57877ce4fe2d4910be7d07cc07a89665d95de7a2c5bccc97e5f3a838721bf310bd71933e69fee0c2ef9889640270bfd3cbd6280ba06b8f6568f7b8d008e23d1a1b16253818f33809e7d2fa9feeaee6a2f85829aa7ea1ac599d60a3e38e2ff0763ba2233e618d905376787dd79a1861448aa398790d22c065d01af53122b0daf3660814c5836e5c"}, 0xd2) 13:25:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:47 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:25:47 executing program 2: mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) fstat(r3, &(0x7f0000000240)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x12000, 0x20) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) accept4(r5, 0x0, 0x0, 0x80800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000080)=""/252, 0x50000, 0x0, 0x0, 0x0) unshare(0x6c060000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x4000000) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @mcast2, 0xfff}, 0x1c) socket(0x5353db051f2bb248, 0x80000, 0x3) 13:25:47 executing program 1: ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0], 0x1}) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="044803e300d80433fd27a0080e36019a8a213b9cd1fb2ed0506d837f19a39a155730bb8d095c8141a32abe647c53fa562bc4edff48c3b41f4ffe3ad0dedbb148d1576bc445190a52bf594aed8261968752b6b4f88101dd12039c8b6d50530800f6e4dd3b6ad842fd4a3ac7e77c24c781b1b4719e2f4b4caad618c2cfb467ea1f3ff00f0969414d67531e87522c2819d14ecee58f6c20de0076f66d780bc5ae2ebc", @ANYRESDEC=0x0], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xce}, "82ac36e4b95fd98d52158a1e7fa9f2cfff66f7ad506f1c03d571ab05a0278b86070ba99629fb65c29d7aeb3180d7956fdeff994e177e20632ce01c37e512133643ef6b0a57587e57877ce4fe2d4910be7d07cc07a89665d95de7a2c5bccc97e5f3a838721bf310bd71933e69fee0c2ef9889640270bfd3cbd6280ba06b8f6568f7b8d008e23d1a1b16253818f33809e7d2fa9feeaee6a2f85829aa7ea1ac599d60a3e38e2ff0763ba2233e618d905376787dd79a1861448aa398790d22c065d01af53122b0daf3660814c5836e5c"}, 0xd2) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xce}, "82ac36e4b95fd98d52158a1e7fa9f2cfff66f7ad506f1c03d571ab05a0278b86070ba99629fb65c29d7aeb3180d7956fdeff994e177e20632ce01c37e512133643ef6b0a57587e57877ce4fe2d4910be7d07cc07a89665d95de7a2c5bccc97e5f3a838721bf310bd71933e69fee0c2ef9889640270bfd3cbd6280ba06b8f6568f7b8d008e23d1a1b16253818f33809e7d2fa9feeaee6a2f85829aa7ea1ac599d60a3e38e2ff0763ba2233e618d905376787dd79a1861448aa398790d22c065d01af53122b0daf3660814c5836e5c"}, 0xd2) [ 299.235910][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 299.241748][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 299.247475][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 299.260219][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 299.266080][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 299.271868][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 299.277586][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 299.283743][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 299.289462][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 299.296380][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 299.302660][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 299.341770][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 299.347579][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 300.893137][ T26] audit: type=1800 audit(1681478749.006:367): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1226 res=0 errno=0 [ 301.489917][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 301.495687][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 301.501382][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 301.509535][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 301.515352][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 301.521042][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 301.527145][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 301.532924][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 301.538615][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 301.551743][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 301.557373][ T26] audit: type=1800 audit(1681478749.036:368): pid=6824 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1250 res=0 errno=0 [ 301.579276][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 301.585116][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 301.590794][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 301.596642][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 301.602361][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 301.608054][ T47] Bluetooth: hci2: Malformed Event: 0x48 13:25:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 301.613853][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 301.619552][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 301.625290][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 301.630971][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 301.717498][ T47] Bluetooth: hci2: Malformed Event: 0x48 [ 302.263660][ T26] audit: type=1800 audit(1681478750.386:369): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1226 res=0 errno=0 13:25:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:51 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) [ 303.475179][ T26] audit: type=1800 audit(1681478751.096:370): pid=6848 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1254 res=0 errno=0 [ 303.694974][ T26] audit: type=1800 audit(1681478751.706:371): pid=6852 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1211 res=0 errno=0 13:25:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 305.877295][ T26] audit: type=1800 audit(1681478753.236:372): pid=6858 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1253 res=0 errno=0 [ 305.920446][ T26] audit: type=1800 audit(1681478753.996:373): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1255 res=0 errno=0 13:25:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:55 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) [ 307.757575][ T26] audit: type=1800 audit(1681478754.266:374): pid=6871 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1252 res=0 errno=0 [ 307.869239][ T26] audit: type=1800 audit(1681478755.446:375): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1213 res=0 errno=0 [ 309.701581][ T26] audit: type=1800 audit(1681478757.116:376): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1243 res=0 errno=0 [ 309.830686][ T26] audit: type=1800 audit(1681478757.196:377): pid=6883 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1245 res=0 errno=0 13:25:58 executing program 2: mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) fstat(r3, &(0x7f0000000240)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x12000, 0x20) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) accept4(r5, 0x0, 0x0, 0x80800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000080)=""/252, 0x50000, 0x0, 0x0, 0x0) unshare(0x6c060000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x4000000) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @mcast2, 0xfff}, 0x1c) socket(0x5353db051f2bb248, 0x80000, 0x3) 13:25:58 executing program 1: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000040)={0x0, 0x101}) r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x0, "7464fbe08eb369"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001100)={r4, 0xadb}) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="044803e302d864c39745aa7d3f851e8e5dbd6c5a76d8fec9e9c1b502a21f10223bc8257eeca37d17f75a1e5c01d4610966bf8df4578a2aca0b6e66aae01384c9bc9fc83042ca2a112db035762077b4473da53159d99aff04c1c32bbf8d24e34faf994b32334c200c85dd67274a6fd6"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 13:25:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:25:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 310.665751][ T26] audit: type=1800 audit(1681478758.806:378): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1220 res=0 errno=0 13:26:02 executing program 1: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000040)={0x0, 0x101}) r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x0, "7464fbe08eb369"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001100)={r4, 0xadb}) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="044803e302d864c39745aa7d3f851e8e5dbd6c5a76d8fec9e9c1b502a21f10223bc8257eeca37d17f75a1e5c01d4610966bf8df4578a2aca0b6e66aae01384c9bc9fc83042ca2a112db035762077b4473da53159d99aff04c1c32bbf8d24e34faf994b32334c200c85dd67274a6fd6"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000040)={0x0, 0x101}) (async) open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) (async) fcntl$setstatus(r0, 0x4, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x0, "7464fbe08eb369"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001100)={r4, 0xadb}) (async) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="044803e302d864c39745aa7d3f851e8e5dbd6c5a76d8fec9e9c1b502a21f10223bc8257eeca37d17f75a1e5c01d4610966bf8df4578a2aca0b6e66aae01384c9bc9fc83042ca2a112db035762077b4473da53159d99aff04c1c32bbf8d24e34faf994b32334c200c85dd67274a6fd6"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) 13:26:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 314.363395][ T26] audit: type=1800 audit(1681478761.436:379): pid=6896 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1252 res=0 errno=0 13:26:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 317.067968][ T5114] Bluetooth: hci4: command 0x0406 tx timeout [ 317.069098][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 317.075548][ T5114] Bluetooth: hci5: command 0x0406 tx timeout [ 317.080016][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 317.086772][ T5113] Bluetooth: hci2: command 0x0406 tx timeout [ 317.092656][ T1213] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.098360][ T5113] Bluetooth: hci3: command 0x0406 tx timeout [ 317.104879][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.126960][ T26] audit: type=1800 audit(1681478761.566:380): pid=6903 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1253 res=0 errno=0 [ 317.167495][ T26] audit: type=1800 audit(1681478761.896:381): pid=6900 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1254 res=0 errno=0 [ 317.189490][ T26] audit: type=1800 audit(1681478762.596:382): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1248 res=0 errno=0 [ 317.213118][ T26] audit: type=1800 audit(1681478764.316:383): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1252 res=0 errno=0 [ 317.235835][ T26] audit: type=1800 audit(1681478764.486:384): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1253 res=0 errno=0 [ 317.724027][ T5114] Bluetooth: hci2: Malformed Event: 0x48 [ 317.831693][ T26] audit: type=1800 audit(1681478765.926:385): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1260 res=0 errno=0 13:26:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:06 executing program 1: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000040)={0x0, 0x101}) (async) r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x0, "7464fbe08eb369"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001100)={r4, 0xadb}) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="044803e302d864c39745aa7d3f851e8e5dbd6c5a76d8fec9e9c1b502a21f10223bc8257eeca37d17f75a1e5c01d4610966bf8df4578a2aca0b6e66aae01384c9bc9fc83042ca2a112db035762077b4473da53159d99aff04c1c32bbf8d24e34faf994b32334c200c85dd67274a6fd6"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 318.242869][ T26] audit: type=1800 audit(1681478766.276:386): pid=6926 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1248 res=0 errno=0 [ 318.425211][ T5114] Bluetooth: hci2: Malformed Event: 0x48 [ 318.496185][ T26] audit: type=1800 audit(1681478766.516:387): pid=6937 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1211 res=0 errno=0 [ 319.241461][ T26] audit: type=1800 audit(1681478766.856:388): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1220 res=0 errno=0 [ 319.391362][ T26] audit: type=1400 audit(1681478767.406:389): avc: denied { rename } for pid=4411 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 13:26:09 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) 13:26:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:09 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x64482, 0x44) r1 = syz_io_uring_setup(0x27bf, &(0x7f0000000240)={0x0, 0xc1dd, 0x400, 0x0, 0x299, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000500)=0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x71) r3 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r3, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x35, 0x0, r0, 0x0, &(0x7f0000000540)="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", 0x1000, 0x800}, 0x790ac658) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000040)) 13:26:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 324.487719][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 324.487737][ T26] audit: type=1800 audit(1681478770.986:395): pid=6964 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1258 res=0 errno=0 13:26:13 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x64482, 0x44) r1 = syz_io_uring_setup(0x27bf, &(0x7f0000000240)={0x0, 0xc1dd, 0x400, 0x0, 0x299, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000500)=0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x71) (async, rerun: 32) r3 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (rerun: 32) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r3, 0x4, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x35, 0x0, r0, 0x0, &(0x7f0000000540)="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", 0x1000, 0x800}, 0x790ac658) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000040)) 13:26:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) 13:26:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 325.008044][ T26] audit: type=1800 audit(1681478771.036:396): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1259 res=0 errno=0 [ 325.091220][ T26] audit: type=1800 audit(1681478772.716:397): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1261 res=0 errno=0 13:26:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:18 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x64482, 0x44) r1 = syz_io_uring_setup(0x27bf, &(0x7f0000000240)={0x0, 0xc1dd, 0x400, 0x0, 0x299, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000500)=0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x71) r3 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r3, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x35, 0x0, r0, 0x0, &(0x7f0000000540)="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", 0x1000, 0x800}, 0x790ac658) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000040)) open(&(0x7f0000000000)='./file0\x00', 0x64482, 0x44) (async) syz_io_uring_setup(0x27bf, &(0x7f0000000240)={0x0, 0xc1dd, 0x400, 0x0, 0x299, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000500)) (async) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x71) (async) open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) (async) fcntl$setstatus(r3, 0x4, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x35, 0x0, r0, 0x0, &(0x7f0000000540)="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", 0x1000, 0x800}, 0x790ac658) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000040)) (async) 13:26:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:18 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) [ 330.289633][ T26] audit: type=1800 audit(1681478773.186:398): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1251 res=0 errno=0 13:26:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:19 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x49}, "12507bc8098b38ced96bbcf36172616882a69cdbd5fdd7a34edd28c96df9808500e0ab48a281bf4b93c893d7341d3598aa700417e6c255cfa65ab3ef512ba6a9c0384ac51687d8e87c"}, 0x4d) [ 331.255500][ T26] audit: type=1800 audit(1681478773.196:399): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1251 res=0 errno=0 13:26:24 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:26:24 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x49}, "12507bc8098b38ced96bbcf36172616882a69cdbd5fdd7a34edd28c96df9808500e0ab48a281bf4b93c893d7341d3598aa700417e6c255cfa65ab3ef512ba6a9c0384ac51687d8e87c"}, 0x4d) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x49}, "12507bc8098b38ced96bbcf36172616882a69cdbd5fdd7a34edd28c96df9808500e0ab48a281bf4b93c893d7341d3598aa700417e6c255cfa65ab3ef512ba6a9c0384ac51687d8e87c"}, 0x4d) 13:26:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 335.976172][ T26] audit: type=1800 audit(1681478773.196:400): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1251 res=0 errno=0 [ 336.007810][ T5114] Bluetooth: hci2: Malformed Event: 0x48 13:26:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:24 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x49}, "12507bc8098b38ced96bbcf36172616882a69cdbd5fdd7a34edd28c96df9808500e0ab48a281bf4b93c893d7341d3598aa700417e6c255cfa65ab3ef512ba6a9c0384ac51687d8e87c"}, 0x4d) [ 336.139720][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 336.177269][ T5113] Bluetooth: hci2: Malformed Event: 0x48 13:26:28 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:26:28 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c9e00c00000001000d14000001040200ff01030005040000020005001f000600f70007006fc5000004000000440000000700f7ff0100060002008100060009020400000200000700000008000000010005000cd30000000001000704f100000500080001000400042c00000600001006ff000000020000110600002000f94ed509ebb24d498783074ad70db2fa286e60a94426a214860f2ec6bd3e17bbb613265b3da656e2308c03336adac3bef99d7dd95bf10ebf"], 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x0, 0x803}}}, 0x7) 13:26:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, 0xffffffffffffffff, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 340.861733][ T26] audit: type=1800 audit(1681478773.196:401): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1251 res=0 errno=0 [ 340.887974][ T26] audit: type=1800 audit(1681478773.196:402): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1251 res=0 errno=0 [ 340.944740][ T26] audit: type=1800 audit(1681478773.196:403): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1251 res=0 errno=0 13:26:29 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c9e00c00000001000d14000001040200ff01030005040000020005001f000600f70007006fc5000004000000440000000700f7ff0100060002008100060009020400000200000700000008000000010005000cd30000000001000704f100000500080001000400042c00000600001006ff000000020000110600002000f94ed509ebb24d498783074ad70db2fa286e60a94426a214860f2ec6bd3e17bbb613265b3da656e2308c03336adac3bef99d7dd95bf10ebf"], 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x0, 0x803}}}, 0x7) [ 341.006236][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 345.107132][ T5113] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 345.115797][ T5113] Bluetooth: hci2: Injecting HCI hardware error event [ 345.116970][ T26] audit: type=1800 audit(1681478773.216:404): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1251 res=0 errno=0 [ 345.126850][ T5113] Bluetooth: hci2: hardware error 0x00 13:26:33 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c9e00c00000001000d14000001040200ff01030005040000020005001f000600f70007006fc5000004000000440000000700f7ff0100060002008100060009020400000200000700000008000000010005000cd30000000001000704f100000500080001000400042c00000600001006ff000000020000110600002000f94ed509ebb24d498783074ad70db2fa286e60a94426a214860f2ec6bd3e17bbb613265b3da656e2308c03336adac3bef99d7dd95bf10ebf"], 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x0, 0x803}}}, 0x7) 13:26:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:33 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, 0xffffffffffffffff, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:33 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:26:33 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c9e00c00000001000d14000001040200ff01030005040000020005001f000600f70007006fc5000004000000440000000700f7ff0100060002008100060009020400000200000700000008000000010005000cd30000000001000704f100000500080001000400042c00000600001006ff000000020000110600002000f94ed509ebb24d498783074ad70db2fa286e60a94426a214860f2ec6bd3e17bbb613265b3da656e2308c03336adac3bef99d7dd95bf10ebf"], 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x0, 0x803}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) (async) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c9e00c00000001000d14000001040200ff01030005040000020005001f000600f70007006fc5000004000000440000000700f7ff0100060002008100060009020400000200000700000008000000010005000cd30000000001000704f100000500080001000400042c00000600001006ff000000020000110600002000f94ed509ebb24d498783074ad70db2fa286e60a94426a214860f2ec6bd3e17bbb613265b3da656e2308c03336adac3bef99d7dd95bf10ebf"], 0x11) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x0, 0x803}}}, 0x7) (async) [ 345.217700][ T26] audit: type=1800 audit(1681478773.216:405): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1251 res=0 errno=0 13:26:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, 0xffffffffffffffff, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, 0xffffffffffffffff, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:33 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="627f9b5c00d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c0200c00080400020005000000000000"], 0x11) [ 345.311831][ T26] audit: type=1800 audit(1681478773.216:406): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1251 res=0 errno=0 [ 345.351894][ T5114] Bluetooth: hci1: Malformed Event: 0x48 13:26:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, 0xffffffffffffffff, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 347.275283][ T26] audit: type=1800 audit(1681478773.226:407): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1251 res=0 errno=0 [ 347.694704][ T26] audit: type=1800 audit(1681478773.226:408): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1251 res=0 errno=0 [ 347.718528][ T26] audit: type=1800 audit(1681478773.226:409): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1251 res=0 errno=0 [ 347.828242][ T26] audit: type=1800 audit(1681478773.226:410): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1251 res=0 errno=0 13:26:36 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="627f9b5c00d8"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c0200c00080400020005000000000000"], 0x11) 13:26:36 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="627f9b5c00d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c0200c00080400020005000000000000"], 0x11) [ 348.039492][ T5113] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 348.085485][ T26] audit: type=1800 audit(1681478773.226:411): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1251 res=0 errno=0 13:26:36 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="627f9b5c00d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c0200c00080400020005000000000000"], 0x11) [ 348.363566][ T26] audit: type=1800 audit(1681478773.226:412): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1251 res=0 errno=0 [ 348.400941][ T5113] Bluetooth: hci4: ACL packet for unknown connection handle 192 13:26:36 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="627f9b5c00d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c0200c00080400020005000000000000"], 0x11) 13:26:36 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="627f9b5c00d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c0200c00080400020005000000000000"], 0x11) [ 348.526254][ T5113] Bluetooth: hci4: ACL packet for unknown connection handle 192 [ 348.535206][ T26] audit: type=1800 audit(1681478773.226:413): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1251 res=0 errno=0 [ 348.691580][ T5113] Bluetooth: hci4: ACL packet for unknown connection handle 192 13:26:37 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:26:37 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES16=0x0], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0xc5, 0x10}, {0x1, 0x9, 0x6, 0x2, [0xfff7, 0x400, 0x8, 0x101]}}}}, 0x1d) 13:26:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, 0xffffffffffffffff, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 352.175546][ T8] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.267107][ T8] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.364088][ T8] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.449378][ T8] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.582346][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 352.582361][ T26] audit: type=1400 audit(1681478800.726:439): avc: denied { read } for pid=4642 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 353.377092][ T26] audit: type=1400 audit(1681478801.516:440): avc: denied { create } for pid=7166 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 353.400884][ T5114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 353.411889][ T5114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 353.420411][ T26] audit: type=1400 audit(1681478801.526:441): avc: denied { ioctl } for pid=7166 comm="syz-executor.2" path="socket:[37661]" dev="sockfs" ino=37661 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 353.420478][ T5114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 353.460907][ T5107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 353.470508][ T5107] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 353.477966][ T5107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 353.722378][ T8] hsr_slave_0: left promiscuous mode [ 353.736348][ T8] hsr_slave_1: left promiscuous mode [ 353.744864][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.752521][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.761872][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.769393][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.778678][ T8] bridge_slave_1: left allmulticast mode [ 353.784434][ T8] bridge_slave_1: left promiscuous mode [ 353.791515][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.803007][ T8] bridge_slave_0: left allmulticast mode [ 353.808664][ T8] bridge_slave_0: left promiscuous mode [ 353.814380][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.826745][ T8] veth1_macvtap: left promiscuous mode [ 353.835950][ T8] veth0_macvtap: left promiscuous mode [ 353.841480][ T8] veth1_vlan: left promiscuous mode [ 353.847085][ T8] veth0_vlan: left promiscuous mode [ 354.012738][ T8] team0 (unregistering): Port device team_slave_1 removed [ 354.026233][ T8] team0 (unregistering): Port device team_slave_0 removed [ 354.037177][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.050758][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.110701][ T8] bond0 (unregistering): Released all slaves [ 354.259273][ T7166] chnl_net:caif_netlink_parms(): no params data found [ 354.364656][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.380554][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.388451][ T7166] bridge_slave_0: entered allmulticast mode [ 354.395628][ T7166] bridge_slave_0: entered promiscuous mode [ 354.404793][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.414985][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.422243][ T7166] bridge_slave_1: entered allmulticast mode [ 354.429299][ T7166] bridge_slave_1: entered promiscuous mode [ 354.467046][ T7166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.483817][ T7166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.544433][ T7166] team0: Port device team_slave_0 added [ 354.558730][ T7166] team0: Port device team_slave_1 added [ 354.663341][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.670324][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.731729][ T7166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.763662][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.770707][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.811235][ T7166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.884822][ T7166] hsr_slave_0: entered promiscuous mode [ 354.921943][ T7166] hsr_slave_1: entered promiscuous mode [ 354.928142][ T7166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.947404][ T7166] Cannot create hsr debugfs directory [ 355.521758][ T5107] Bluetooth: hci1: command 0x0409 tx timeout [ 356.285349][ T26] audit: type=1400 audit(1681478804.426:442): avc: denied { write } for pid=7166 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 356.286588][ T7166] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 356.322271][ T26] audit: type=1400 audit(1681478804.426:443): avc: denied { read } for pid=7166 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 356.323722][ T7166] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 356.356061][ T7166] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 356.365825][ T7166] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 356.464836][ T7166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.479354][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 356.487857][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 356.503746][ T7166] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.518643][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 356.527947][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 356.544306][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.551432][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.580989][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 356.589782][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 356.599006][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.608467][ T6967] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.615624][ T6967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.623762][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 356.632780][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 356.668376][ T7166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.680227][ T7166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.705925][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 356.724285][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 356.733579][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 356.744044][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 356.753346][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 356.762248][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 356.771030][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 356.780012][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 356.792841][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 356.800903][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 357.042199][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 357.054162][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 357.067913][ T7166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.105249][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 357.121154][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 357.144340][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 357.153506][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 357.164802][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 357.172624][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 357.187434][ T7166] veth0_vlan: entered promiscuous mode [ 357.205663][ T7166] veth1_vlan: entered promiscuous mode [ 357.236319][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 357.252724][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 357.262450][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 357.271230][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 357.283131][ T7166] veth0_macvtap: entered promiscuous mode [ 357.298850][ T7166] veth1_macvtap: entered promiscuous mode [ 357.321405][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.340438][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.350777][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.375487][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.392340][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.412386][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.428454][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.440644][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.456588][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.470128][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.487387][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.499415][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 357.515124][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 357.529456][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 357.540002][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 357.565476][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.585280][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.595512][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.606348][ T5107] Bluetooth: hci1: command 0x041b tx timeout [ 357.607320][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.629338][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.640097][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.657549][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.679719][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.696138][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.713605][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.729551][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.746048][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 357.757410][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 357.783810][ T7166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.806656][ T7166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.816821][ T7166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.831365][ T7166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.960520][ T5330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.978343][ T5330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.998159][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 358.030564][ T5330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.040217][ T5330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.054721][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 358.400946][ T26] audit: type=1800 audit(1681478806.376:444): pid=7283 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1212 res=0 errno=0 13:26:47 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:26:47 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:26:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:47 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES16=0x0], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0xc5, 0x10}, {0x1, 0x9, 0x6, 0x2, [0xfff7, 0x400, 0x8, 0x101]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES16=0x0], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0xc5, 0x10}, {0x1, 0x9, 0x6, 0x2, [0xfff7, 0x400, 0x8, 0x101]}}}}, 0x1d) (async) 13:26:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 362.272369][ T5107] Bluetooth: hci1: command 0x040f tx timeout [ 362.344161][ T26] audit: type=1800 audit(1681478809.736:445): pid=7302 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1252 res=0 errno=0 [ 362.377138][ T26] audit: type=1800 audit(1681478809.876:446): pid=7301 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1253 res=0 errno=0 13:26:50 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES16=0x0], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0xc5, 0x10}, {0x1, 0x9, 0x6, 0x2, [0xfff7, 0x400, 0x8, 0x101]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0xc5, 0x10}, {0x1, 0x9, 0x6, 0x2, [0xfff7, 0x400, 0x8, 0x101]}}}}, 0x1d) 13:26:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:26:50 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) [ 362.525764][ T26] audit: type=1800 audit(1681478809.936:447): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1254 res=0 errno=0 [ 365.590558][ T5113] Bluetooth: hci1: command 0x0419 tx timeout 13:26:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:54 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:26:54 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="045d07e300d8"], 0x6) [ 365.869756][ T26] audit: type=1800 audit(1681478813.256:448): pid=7319 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1231 res=0 errno=0 13:26:54 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="045d07e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="045d07e300d8"], 0x6) (async) 13:26:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(0xffffffffffffffff, 0x100000011, 0x82, 0x2811fdff) 13:26:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:26:57 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) [ 369.346511][ T26] audit: type=1800 audit(1681478813.396:449): pid=7326 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1232 res=0 errno=0 13:26:57 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) [ 369.479425][ T26] audit: type=1800 audit(1681478813.456:450): pid=7323 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1233 res=0 errno=0 13:27:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(0xffffffffffffffff, 0x100000011, 0x82, 0x2811fdff) 13:27:00 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:27:00 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="045d07e300d8"], 0x6) 13:27:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(0xffffffffffffffff, 0x100000011, 0x82, 0x2811fdff) 13:27:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:27:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:27:00 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 13:27:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(0xffffffffffffffff, 0x100000011, 0x82, 0x2811fdff) 13:27:02 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) [ 374.469782][ T26] audit: type=1800 audit(1681478816.596:451): pid=7344 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1249 res=0 errno=0 13:27:04 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:27:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:27:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:27:04 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 377.145666][ T26] audit: type=1800 audit(1681478816.816:452): pid=7343 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1250 res=0 errno=0 [ 378.795659][ T1213] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.802345][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.214064][ T26] audit: type=1800 audit(1681478816.886:453): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1251 res=0 errno=0 [ 379.343426][ T26] audit: type=1800 audit(1681478819.946:454): pid=7366 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1249 res=0 errno=0 [ 379.465511][ T26] audit: type=1800 audit(1681478820.316:455): pid=7368 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1250 res=0 errno=0 [ 379.567661][ T26] audit: type=1800 audit(1681478820.356:456): pid=7370 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1251 res=0 errno=0 [ 379.639086][ T26] audit: type=1800 audit(1681478821.936:457): pid=7386 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1226 res=0 errno=0 [ 379.740766][ T26] audit: type=1800 audit(1681478821.976:458): pid=7389 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1235 res=0 errno=0 [ 379.871513][ T26] audit: type=1800 audit(1681478823.796:459): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1155 res=0 errno=0 [ 379.911796][ T26] audit: type=1800 audit(1681478823.846:460): pid=7398 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1205 res=0 errno=0 [ 379.971836][ T26] audit: type=1800 audit(1681478824.586:461): pid=7410 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1205 res=0 errno=0 [ 380.067423][ T26] audit: type=1800 audit(1681478826.616:462): pid=7417 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1220 res=0 errno=0 [ 380.089982][ T26] audit: type=1800 audit(1681478826.926:463): pid=7420 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1223 res=0 errno=0 13:27:08 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:27:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:08 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x3, 0xc9, "a741e3cb94316ef5"}}}, 0xe) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x91}, "768e5e38ffed9b920329fa8123670039215ab63cfece8beeae9285c264308059562409f61d7638f79688b38c7a02266da1f2f7f22901bb69454d32934b3a55ec55e878930e2d7eb1430837463f229a3575cd459eba3bd9c5a1c8e6354810140dafb8eb968a8ed2566f06bec55c5be6027ff8b92f184e4d3c5c7edb18df68ba2f86353df5d2c0c0e8194cc9e1334fad5646"}, 0x95) 13:27:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(0xffffffffffffffff, 0x100000011, 0x82, 0x2811fdff) 13:27:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(0xffffffffffffffff, 0x100000011, 0x82, 0x2811fdff) 13:27:08 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x3, 0xc9, "a741e3cb94316ef5"}}}, 0xe) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x91}, "768e5e38ffed9b920329fa8123670039215ab63cfece8beeae9285c264308059562409f61d7638f79688b38c7a02266da1f2f7f22901bb69454d32934b3a55ec55e878930e2d7eb1430837463f229a3575cd459eba3bd9c5a1c8e6354810140dafb8eb968a8ed2566f06bec55c5be6027ff8b92f184e4d3c5c7edb18df68ba2f86353df5d2c0c0e8194cc9e1334fad5646"}, 0x95) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x3, 0xc9, "a741e3cb94316ef5"}}}, 0xe) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x91}, "768e5e38ffed9b920329fa8123670039215ab63cfece8beeae9285c264308059562409f61d7638f79688b38c7a02266da1f2f7f22901bb69454d32934b3a55ec55e878930e2d7eb1430837463f229a3575cd459eba3bd9c5a1c8e6354810140dafb8eb968a8ed2566f06bec55c5be6027ff8b92f184e4d3c5c7edb18df68ba2f86353df5d2c0c0e8194cc9e1334fad5646"}, 0x95) (async) 13:27:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 383.528063][ T26] audit: type=1800 audit(1681478831.266:464): pid=7443 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1206 res=0 errno=0 13:27:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 384.041585][ T26] audit: type=1800 audit(1681478831.436:465): pid=7444 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1209 res=0 errno=0 [ 385.128082][ T26] audit: type=1800 audit(1681478831.576:466): pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1238 res=0 errno=0 [ 386.289288][ T26] audit: type=1800 audit(1681478832.716:467): pid=7456 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1213 res=0 errno=0 [ 386.398284][ T26] audit: type=1800 audit(1681478833.886:468): pid=7462 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1213 res=0 errno=0 13:27:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:14 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x3, 0xc9, "a741e3cb94316ef5"}}}, 0xe) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x91}, "768e5e38ffed9b920329fa8123670039215ab63cfece8beeae9285c264308059562409f61d7638f79688b38c7a02266da1f2f7f22901bb69454d32934b3a55ec55e878930e2d7eb1430837463f229a3575cd459eba3bd9c5a1c8e6354810140dafb8eb968a8ed2566f06bec55c5be6027ff8b92f184e4d3c5c7edb18df68ba2f86353df5d2c0c0e8194cc9e1334fad5646"}, 0x95) (rerun: 32) [ 389.772969][ T26] audit: type=1800 audit(1681478837.336:469): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1247 res=0 errno=0 [ 390.041902][ T26] audit: type=1800 audit(1681478837.436:470): pid=7482 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1248 res=0 errno=0 [ 390.131741][ T26] audit: type=1800 audit(1681478837.526:471): pid=7483 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1249 res=0 errno=0 13:27:19 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:27:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:19 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) 13:27:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:19 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x2, @raw_data="a1c7e6b9c5b3d395b3ef1ad2c3119f3847ce0239e013a98ad6e01e46fe233371ecac6f3f99e38cb213cefafb5fa01cb664a1d3bd2c4d4f24598e2c531838b9cd1c7d467431b459688911ae1f4d065734cc76f3b501c1ed40d0516354f4046c8c3579faf86c09c8098493826bd4e7fa2be08267cb595386e4aaf1032be129ab0568b323146d7c252bf5112f64b9860c209db3612eba1cde1ea46bc522bc8f30e4355044006720b5c64c29d5c48402ce639791e6ace7acab3d35b425969edac85593b70a1e79797db0"}) r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f00000002c0)=""/153, 0x99, 0x2, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r3 = dup(r0) io_uring_enter(r3, 0x45d4, 0x6bbd, 0x1, &(0x7f0000000380)={[0x47d4b808]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000140)=""/165) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) 13:27:19 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x2, @raw_data="a1c7e6b9c5b3d395b3ef1ad2c3119f3847ce0239e013a98ad6e01e46fe233371ecac6f3f99e38cb213cefafb5fa01cb664a1d3bd2c4d4f24598e2c531838b9cd1c7d467431b459688911ae1f4d065734cc76f3b501c1ed40d0516354f4046c8c3579faf86c09c8098493826bd4e7fa2be08267cb595386e4aaf1032be129ab0568b323146d7c252bf5112f64b9860c209db3612eba1cde1ea46bc522bc8f30e4355044006720b5c64c29d5c48402ce639791e6ace7acab3d35b425969edac85593b70a1e79797db0"}) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x2, @raw_data="a1c7e6b9c5b3d395b3ef1ad2c3119f3847ce0239e013a98ad6e01e46fe233371ecac6f3f99e38cb213cefafb5fa01cb664a1d3bd2c4d4f24598e2c531838b9cd1c7d467431b459688911ae1f4d065734cc76f3b501c1ed40d0516354f4046c8c3579faf86c09c8098493826bd4e7fa2be08267cb595386e4aaf1032be129ab0568b323146d7c252bf5112f64b9860c209db3612eba1cde1ea46bc522bc8f30e4355044006720b5c64c29d5c48402ce639791e6ace7acab3d35b425969edac85593b70a1e79797db0"}) r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f00000002c0)=""/153, 0x99, 0x2, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) (async) fcntl$setstatus(r0, 0x4, 0x0) r3 = dup(r0) io_uring_enter(r3, 0x45d4, 0x6bbd, 0x1, &(0x7f0000000380)={[0x47d4b808]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000140)=""/165) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) [ 391.678408][ T26] audit: type=1800 audit(1681478839.816:472): pid=7491 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1238 res=0 errno=0 13:27:23 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) 13:27:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 395.376674][ T26] audit: type=1800 audit(1681478842.486:473): pid=7504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1213 res=0 errno=0 13:27:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:23 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:27:25 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:27:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:26 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x2, @raw_data="a1c7e6b9c5b3d395b3ef1ad2c3119f3847ce0239e013a98ad6e01e46fe233371ecac6f3f99e38cb213cefafb5fa01cb664a1d3bd2c4d4f24598e2c531838b9cd1c7d467431b459688911ae1f4d065734cc76f3b501c1ed40d0516354f4046c8c3579faf86c09c8098493826bd4e7fa2be08267cb595386e4aaf1032be129ab0568b323146d7c252bf5112f64b9860c209db3612eba1cde1ea46bc522bc8f30e4355044006720b5c64c29d5c48402ce639791e6ace7acab3d35b425969edac85593b70a1e79797db0"}) open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f00000002c0)=""/153, 0x99, 0x2, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r3 = dup(r0) io_uring_enter(r3, 0x45d4, 0x6bbd, 0x1, &(0x7f0000000380)={[0x47d4b808]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000140)=""/165) (async) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000140)=""/165) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) [ 397.927144][ T26] audit: type=1800 audit(1681478842.646:474): pid=7505 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1238 res=0 errno=0 13:27:27 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) [ 399.065245][ T26] audit: type=1800 audit(1681478842.676:475): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1248 res=0 errno=0 [ 399.320913][ T26] audit: type=1800 audit(1681478843.606:476): pid=7513 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1232 res=0 errno=0 [ 399.469755][ T26] audit: type=1800 audit(1681478844.856:477): pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1245 res=0 errno=0 13:27:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 399.941346][ T26] audit: type=1800 audit(1681478845.956:478): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1247 res=0 errno=0 [ 399.997896][ T26] audit: type=1800 audit(1681478846.966:479): pid=7532 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1172 res=0 errno=0 13:27:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:27:30 executing program 1: r0 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)=0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x71) r2 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) r3 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r2, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, 0x0}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r6, 0x4, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x5, 0x0}, 0x0) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) r12 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r12, 0x4, 0x0) syz_io_uring_submit(r13, r14, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r12, 0x0, 0x0}, 0x0) r15 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x401) r16 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r16, 0x4, 0x0) syz_io_uring_submit(r17, r18, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r16, 0x0, 0x0}, 0x0) r19 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_FILES(r12, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff, r15, r9, r16, r3, r19, r3], 0x7) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES32=r11, @ANYRES8=r1, @ANYRESOCT=r6], 0x6) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c8b010000c00050100000000d6000000ff00ee17a2a1dbe0fe1682b298d7bc038c2acb9334c6e963d0334dfee914b88ad7522e3796ea92ed1eb9520203db56c47b356867ed7bc8e7b6fb89253f7dcc8d73c85162c2bb1484f0edbee681daf4b6efc2e8c633779f0bbd5d7b39c4d6dddb34e6e4ed5322df86b05d41a1b79aa8d5fd8893614f74ba958a588583aef4eee001e15276c5908b4cdb514b246654b8334189e7523992ffb1d24e1e2b51d617abcaa282650e925cceb8d899d0cea17663fcd2130b7478db853610e35edd2c0402bbffbb1d847f9a188dda75e197e4af46"], 0x15) 13:27:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 403.424912][ T26] audit: type=1800 audit(1681478847.456:480): pid=7540 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1246 res=0 errno=0 13:27:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 404.425466][ T26] audit: type=1800 audit(1681478848.076:481): pid=7542 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1161 res=0 errno=0 13:27:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 406.462395][ T26] audit: type=1800 audit(1681478848.106:482): pid=7543 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1161 res=0 errno=0 [ 406.541850][ T26] audit: type=1800 audit(1681478849.396:483): pid=7552 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1244 res=0 errno=0 [ 406.645102][ T26] audit: type=1800 audit(1681478850.286:484): pid=7557 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1245 res=0 errno=0 [ 406.782699][ T26] audit: type=1800 audit(1681478850.826:485): pid=7563 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1216 res=0 errno=0 [ 406.891710][ T26] audit: type=1800 audit(1681478851.596:486): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1244 res=0 errno=0 [ 406.961947][ T26] audit: type=1800 audit(1681478851.626:487): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1244 res=0 errno=0 [ 407.035038][ T26] audit: type=1800 audit(1681478851.636:488): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1244 res=0 errno=0 [ 407.184118][ T26] audit: type=1800 audit(1681478851.676:489): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1244 res=0 errno=0 13:27:35 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:27:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:27:35 executing program 1: r0 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)=0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x71) (async) r2 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) r3 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r2, 0x4, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, 0x0}, 0x0) (async) r6 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r6, 0x4, 0x0) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x5, 0x0}, 0x0) (async) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) (async) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) (async) r12 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r12, 0x4, 0x0) syz_io_uring_submit(r13, r14, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r12, 0x0, 0x0}, 0x0) (async) r15 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x401) (async) r16 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r16, 0x4, 0x0) (async) syz_io_uring_submit(r17, r18, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r16, 0x0, 0x0}, 0x0) (async) r19 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_FILES(r12, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff, r15, r9, r16, r3, r19, r3], 0x7) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES32=r11, @ANYRES8=r1, @ANYRESOCT=r6], 0x6) (async) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c8b010000c00050100000000d6000000ff00ee17a2a1dbe0fe1682b298d7bc038c2acb9334c6e963d0334dfee914b88ad7522e3796ea92ed1eb9520203db56c47b356867ed7bc8e7b6fb89253f7dcc8d73c85162c2bb1484f0edbee681daf4b6efc2e8c633779f0bbd5d7b39c4d6dddb34e6e4ed5322df86b05d41a1b79aa8d5fd8893614f74ba958a588583aef4eee001e15276c5908b4cdb514b246654b8334189e7523992ffb1d24e1e2b51d617abcaa282650e925cceb8d899d0cea17663fcd2130b7478db853610e35edd2c0402bbffbb1d847f9a188dda75e197e4af46"], 0x15) 13:27:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00'}) socket$inet6(0xa, 0x3, 0x3) r7 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r7, 0x4, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) recvfrom$inet6(r7, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 409.241054][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 409.241072][ T26] audit: type=1800 audit(1681478857.046:495): pid=7599 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1226 res=0 errno=0 [ 409.582093][ T26] audit: type=1800 audit(1681478857.046:496): pid=7597 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1234 res=0 errno=0 [ 409.693005][ T26] audit: type=1800 audit(1681478857.436:497): pid=7594 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1209 res=0 errno=0 13:27:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00'}) socket$inet6(0xa, 0x3, 0x3) r7 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r7, 0x4, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) recvfrom$inet6(r7, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:38 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:27:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00'}) socket$inet6(0xa, 0x3, 0x3) r7 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r7, 0x4, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) recvfrom$inet6(r7, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:38 executing program 1: syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) (async) r0 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)=0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x71) r2 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) (async) r3 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r2, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, 0x0}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) r6 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r6, 0x4, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x5, 0x0}, 0x0) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) r12 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r12, 0x4, 0x0) syz_io_uring_submit(r13, r14, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r12, 0x0, 0x0}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x401) (async) r15 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x401) open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) r16 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r16, 0x4, 0x0) syz_io_uring_submit(r17, r18, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r16, 0x0, 0x0}, 0x0) r19 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_FILES(r12, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff, r15, r9, r16, r3, r19, r3], 0x7) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES32=r11, @ANYRES8=r1, @ANYRESOCT=r6], 0x6) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES32=r11, @ANYRES8=r1, @ANYRESOCT=r6], 0x6) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c8b010000c00050100000000d6000000ff00ee17a2a1dbe0fe1682b298d7bc038c2acb9334c6e963d0334dfee914b88ad7522e3796ea92ed1eb9520203db56c47b356867ed7bc8e7b6fb89253f7dcc8d73c85162c2bb1484f0edbee681daf4b6efc2e8c633779f0bbd5d7b39c4d6dddb34e6e4ed5322df86b05d41a1b79aa8d5fd8893614f74ba958a588583aef4eee001e15276c5908b4cdb514b246654b8334189e7523992ffb1d24e1e2b51d617abcaa282650e925cceb8d899d0cea17663fcd2130b7478db853610e35edd2c0402bbffbb1d847f9a188dda75e197e4af46"], 0x15) (async) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c8b010000c00050100000000d6000000ff00ee17a2a1dbe0fe1682b298d7bc038c2acb9334c6e963d0334dfee914b88ad7522e3796ea92ed1eb9520203db56c47b356867ed7bc8e7b6fb89253f7dcc8d73c85162c2bb1484f0edbee681daf4b6efc2e8c633779f0bbd5d7b39c4d6dddb34e6e4ed5322df86b05d41a1b79aa8d5fd8893614f74ba958a588583aef4eee001e15276c5908b4cdb514b246654b8334189e7523992ffb1d24e1e2b51d617abcaa282650e925cceb8d899d0cea17663fcd2130b7478db853610e35edd2c0402bbffbb1d847f9a188dda75e197e4af46"], 0x15) 13:27:38 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:27:39 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) [ 410.873134][ T26] audit: type=1800 audit(1681478859.016:498): pid=7613 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1205 res=0 errno=0 13:27:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:27:40 executing program 1: r0 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x71) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nf_conntrack_expect\x00') bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x400}) [ 412.467138][ T26] audit: type=1800 audit(1681478860.166:499): pid=7616 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1210 res=0 errno=0 13:27:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00'}) socket$inet6(0xa, 0x3, 0x3) r7 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r7, 0x4, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) recvfrom$inet6(r7, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 412.527476][ T26] audit: type=1800 audit(1681478860.236:500): pid=7621 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1235 res=0 errno=0 13:27:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00'}) socket$inet6(0xa, 0x3, 0x3) r7 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r7, 0x4, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) recvfrom$inet6(r7, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 413.438375][ T26] audit: type=1800 audit(1681478860.566:501): pid=7613 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1205 res=0 errno=0 13:27:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 414.632228][ T26] audit: type=1800 audit(1681478860.566:502): pid=7614 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1205 res=0 errno=0 [ 414.858087][ T26] audit: type=1800 audit(1681478860.566:503): pid=7613 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1205 res=0 errno=0 13:27:43 executing program 1: r0 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x71) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nf_conntrack_expect\x00') bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x400}) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x71) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nf_conntrack_expect\x00') (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x400}) (async) 13:27:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00'}) socket$inet6(0xa, 0x3, 0x3) r7 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r7, 0x4, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) recvfrom$inet6(r7, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 416.345339][ T26] audit: type=1800 audit(1681478860.576:504): pid=7614 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1205 res=0 errno=0 [ 416.367303][ T26] audit: type=1800 audit(1681478860.576:505): pid=7613 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1205 res=0 errno=0 [ 416.389415][ T26] audit: type=1800 audit(1681478860.576:506): pid=7614 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1205 res=0 errno=0 [ 416.417852][ T26] audit: type=1800 audit(1681478860.576:507): pid=7623 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1205 res=0 errno=0 [ 417.411832][ T26] audit: type=1800 audit(1681478860.756:508): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1226 res=0 errno=0 [ 417.506429][ T26] audit: type=1800 audit(1681478862.526:509): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1233 res=0 errno=0 [ 417.532526][ T26] audit: type=1800 audit(1681478862.666:510): pid=7633 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1245 res=0 errno=0 [ 417.560042][ T26] audit: type=1800 audit(1681478862.866:511): pid=7647 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1161 res=0 errno=0 13:27:46 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:27:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:27:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:46 executing program 1: r0 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x71) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nf_conntrack_expect\x00') bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x400}) 13:27:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:27:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:49 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0x8aa6cc13a1664136, 0x5}, "80d25a204b"}, 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0xb0}, @l2cap_cid_signaling={{0xac}, [@l2cap_conf_rsp={{0x5, 0x4, 0x2b}, {0xfff8, 0x1f, 0xff34, [@l2cap_conf_rfc={0x4, 0x9, {0x4, 0x9, 0x3, 0xfff8, 0x3f, 0x6}}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x3, 0x9, 0x0, 0x200, 0x6}}, @l2cap_conf_ews={0x7, 0x2, 0xbb}, @l2cap_conf_flushto={0x2, 0x2}]}}, @l2cap_info_req={{0xa, 0x1, 0x2}, {0x401}}, @l2cap_conf_req={{0x4, 0x3, 0x22}, {0x2, 0x7, [@l2cap_conf_flushto={0x2, 0x2, 0x50}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x1, 0x1, 0x1, 0x5, 0x40000000}}, @l2cap_conf_flushto={0x2, 0x2, 0xa800}, @l2cap_conf_mtu={0x1, 0x2, 0x8f}]}}, @l2cap_move_chan_rsp={{0xf, 0x40, 0x4}, {0x3f, 0x8001}}, @l2cap_disconn_rsp={{0x7, 0xb7, 0x4}, {0x0, 0x2}}, @l2cap_disconn_rsp={{0x7, 0x2, 0x4}, {0x6, 0x6}}, @l2cap_conf_req={{0x4, 0x7f, 0xa}, {0x3ff, 0x0, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x27}, {0x401, 0x9, 0x4ff4, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x1, 0x8, 0x1, 0x9, 0xd221}}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x2, 0x8000, 0x6, 0x40, 0x100}}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}]}}, 0xb5) 13:27:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:27:49 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) 13:27:49 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0x8aa6cc13a1664136, 0x5}, "80d25a204b"}, 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0xb0}, @l2cap_cid_signaling={{0xac}, [@l2cap_conf_rsp={{0x5, 0x4, 0x2b}, {0xfff8, 0x1f, 0xff34, [@l2cap_conf_rfc={0x4, 0x9, {0x4, 0x9, 0x3, 0xfff8, 0x3f, 0x6}}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x3, 0x9, 0x0, 0x200, 0x6}}, @l2cap_conf_ews={0x7, 0x2, 0xbb}, @l2cap_conf_flushto={0x2, 0x2}]}}, @l2cap_info_req={{0xa, 0x1, 0x2}, {0x401}}, @l2cap_conf_req={{0x4, 0x3, 0x22}, {0x2, 0x7, [@l2cap_conf_flushto={0x2, 0x2, 0x50}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x1, 0x1, 0x1, 0x5, 0x40000000}}, @l2cap_conf_flushto={0x2, 0x2, 0xa800}, @l2cap_conf_mtu={0x1, 0x2, 0x8f}]}}, @l2cap_move_chan_rsp={{0xf, 0x40, 0x4}, {0x3f, 0x8001}}, @l2cap_disconn_rsp={{0x7, 0xb7, 0x4}, {0x0, 0x2}}, @l2cap_disconn_rsp={{0x7, 0x2, 0x4}, {0x6, 0x6}}, @l2cap_conf_req={{0x4, 0x7f, 0xa}, {0x3ff, 0x0, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x27}, {0x401, 0x9, 0x4ff4, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x1, 0x8, 0x1, 0x9, 0xd221}}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x2, 0x8000, 0x6, 0x40, 0x100}}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}]}}, 0xb5) [ 421.570952][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 421.570967][ T26] audit: type=1800 audit(1681478869.706:516): pid=7695 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1245 res=0 errno=0 13:27:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) fcntl$setstatus(r9, 0x4, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 423.647623][ T26] audit: type=1800 audit(1681478870.986:517): pid=7701 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1248 res=0 errno=0 13:27:51 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0x8aa6cc13a1664136, 0x5}, "80d25a204b"}, 0x9) (rerun: 64) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0xb0}, @l2cap_cid_signaling={{0xac}, [@l2cap_conf_rsp={{0x5, 0x4, 0x2b}, {0xfff8, 0x1f, 0xff34, [@l2cap_conf_rfc={0x4, 0x9, {0x4, 0x9, 0x3, 0xfff8, 0x3f, 0x6}}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x3, 0x9, 0x0, 0x200, 0x6}}, @l2cap_conf_ews={0x7, 0x2, 0xbb}, @l2cap_conf_flushto={0x2, 0x2}]}}, @l2cap_info_req={{0xa, 0x1, 0x2}, {0x401}}, @l2cap_conf_req={{0x4, 0x3, 0x22}, {0x2, 0x7, [@l2cap_conf_flushto={0x2, 0x2, 0x50}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x1, 0x1, 0x1, 0x5, 0x40000000}}, @l2cap_conf_flushto={0x2, 0x2, 0xa800}, @l2cap_conf_mtu={0x1, 0x2, 0x8f}]}}, @l2cap_move_chan_rsp={{0xf, 0x40, 0x4}, {0x3f, 0x8001}}, @l2cap_disconn_rsp={{0x7, 0xb7, 0x4}, {0x0, 0x2}}, @l2cap_disconn_rsp={{0x7, 0x2, 0x4}, {0x6, 0x6}}, @l2cap_conf_req={{0x4, 0x7f, 0xa}, {0x3ff, 0x0, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x27}, {0x401, 0x9, 0x4ff4, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x1, 0x8, 0x1, 0x9, 0xd221}}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x2, 0x8000, 0x6, 0x40, 0x100}}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}]}}, 0xb5) 13:27:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) fcntl$setstatus(r9, 0x4, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 425.405413][ T26] audit: type=1800 audit(1681478871.086:518): pid=7702 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1249 res=0 errno=0 [ 426.349477][ T26] audit: type=1800 audit(1681478871.886:519): pid=7715 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1212 res=0 errno=0 [ 426.395730][ T26] audit: type=1800 audit(1681478872.566:520): pid=7717 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1226 res=0 errno=0 [ 426.436893][ T26] audit: type=1800 audit(1681478873.086:521): pid=7720 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1248 res=0 errno=0 [ 426.476281][ T26] audit: type=1800 audit(1681478874.106:522): pid=7724 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1222 res=0 errno=0 13:27:55 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:27:55 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:27:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) fcntl$setstatus(r9, 0x4, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:55 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) [ 429.104059][ T26] audit: type=1800 audit(1681478875.676:523): pid=7735 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1233 res=0 errno=0 [ 429.592211][ T26] audit: type=1800 audit(1681478876.806:524): pid=7739 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1236 res=0 errno=0 [ 429.618207][ T26] audit: type=1800 audit(1681478877.036:525): pid=7738 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1238 res=0 errno=0 13:27:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) fcntl$setstatus(r9, 0x4, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:27:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 432.815280][ T26] audit: type=1800 audit(1681478880.766:526): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1245 res=0 errno=0 [ 433.287073][ T26] audit: type=1800 audit(1681478880.796:527): pid=7756 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1246 res=0 errno=0 13:28:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:28:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 433.519836][ T26] audit: type=1800 audit(1681478880.826:528): pid=7764 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1247 res=0 errno=0 [ 434.496098][ T26] audit: type=1800 audit(1681478881.576:529): pid=7768 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1216 res=0 errno=0 [ 434.581737][ T26] audit: type=1800 audit(1681478881.836:530): pid=7774 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1234 res=0 errno=0 [ 434.766591][ T6443] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.922180][ T6443] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.055379][ T6443] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.162668][ T6443] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.883762][ T5107] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 435.892302][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 435.903204][ T5107] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 435.910749][ T5107] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 435.918396][ T5107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 436.668977][ T7782] chnl_net:caif_netlink_parms(): no params data found [ 437.237462][ T7782] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.278714][ T7782] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.302052][ T7782] bridge_slave_0: entered allmulticast mode [ 437.330537][ T7782] bridge_slave_0: entered promiscuous mode [ 437.408090][ T7782] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.436551][ T7782] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.455297][ T7782] bridge_slave_1: entered allmulticast mode [ 437.471939][ T7782] bridge_slave_1: entered promiscuous mode [ 437.609619][ T6443] hsr_slave_0: left promiscuous mode [ 437.630414][ T6443] hsr_slave_1: left promiscuous mode [ 437.656289][ T6443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.663879][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.681266][ T6443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.690876][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.701023][ T6443] bridge_slave_1: left allmulticast mode [ 437.707525][ T6443] bridge_slave_1: left promiscuous mode [ 437.713673][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.724218][ T6443] bridge_slave_0: left allmulticast mode [ 437.729884][ T6443] bridge_slave_0: left promiscuous mode [ 437.735971][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.751226][ T6443] veth1_macvtap: left promiscuous mode [ 437.756905][ T6443] veth0_macvtap: left promiscuous mode [ 437.763776][ T6443] veth1_vlan: left promiscuous mode [ 437.769253][ T6443] veth0_vlan: left promiscuous mode [ 438.001854][ T5107] Bluetooth: hci2: command 0x0409 tx timeout [ 438.161595][ T6443] team0 (unregistering): Port device team_slave_1 removed [ 438.177711][ T6443] team0 (unregistering): Port device team_slave_0 removed [ 438.191453][ T6443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.208443][ T6443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.340357][ T6443] bond0 (unregistering): Released all slaves [ 438.449065][ T7782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.471334][ T7782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.526707][ T7782] team0: Port device team_slave_0 added [ 438.544220][ T7782] team0: Port device team_slave_1 added [ 438.632783][ T7782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.639773][ T7782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.667217][ T7782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.680068][ T7782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.687639][ T7782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.717016][ T7782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.774006][ T7782] hsr_slave_0: entered promiscuous mode [ 438.780383][ T7782] hsr_slave_1: entered promiscuous mode [ 438.787472][ T7782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.803206][ T7782] Cannot create hsr debugfs directory [ 439.924782][ T1213] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.931111][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.091879][ T5107] Bluetooth: hci2: command 0x041b tx timeout [ 440.415104][ T7782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 440.431877][ T7782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 440.441573][ T7782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 440.459192][ T7782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 440.569345][ T7782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.585675][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 440.600638][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 440.620248][ T7782] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.634575][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 440.652675][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 440.661182][ T4391] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.668359][ T4391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.700243][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 440.712495][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 440.721226][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 440.741233][ T6967] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.748404][ T6967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.763559][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 440.772758][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 440.809609][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 440.820486][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 440.830214][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 440.839464][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 440.848548][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 440.857496][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 440.866861][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 440.877255][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 440.886860][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 440.897630][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 441.178726][ T7782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.187389][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 441.196440][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 441.220477][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 441.232870][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 441.274281][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 441.290019][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 441.298941][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 441.307087][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 441.316620][ T7782] veth0_vlan: entered promiscuous mode [ 441.336620][ T7782] veth1_vlan: entered promiscuous mode [ 441.376069][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 441.385856][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 441.394279][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 441.403067][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 441.414214][ T7782] veth0_macvtap: entered promiscuous mode [ 441.433919][ T7782] veth1_macvtap: entered promiscuous mode [ 441.449574][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.460376][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.471175][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.489407][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.499567][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.517323][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.529192][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.548020][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.558247][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.575730][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.589600][ T7782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.606650][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 441.618893][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 441.627414][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 441.637414][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 441.648974][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.660867][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.671444][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.691266][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.701531][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.713136][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.723330][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.734088][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.744758][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.755675][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.769323][ T7782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.778817][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 441.788548][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 441.803462][ T7782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.812912][ T7782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.829500][ T7782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.841446][ T7782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.945708][ T6443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.961159][ T6443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.988751][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 442.000122][ T6443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.008844][ T6443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.020541][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 13:28:10 executing program 1: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="675fa672d19f6d39b3065ccfda1865b566c5c1ac95cbb5e6421a03e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c85012000e00050014810a003f00986950a5fcffff03"], 0x17) 13:28:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:28:10 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) 13:28:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) [ 442.085483][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 442.091402][ T5107] Bluetooth: hci2: SCO packet for unknown connection handle 310 [ 442.091519][ T5107] Bluetooth: hci2: SCO packet for unknown connection handle 310 [ 442.114859][ T5107] Bluetooth: hci2: SCO packet for unknown connection handle 310 [ 442.122798][ T5107] Bluetooth: hci2: SCO packet for unknown connection handle 310 [ 442.130501][ T5107] Bluetooth: hci2: SCO packet for unknown connection handle 310 [ 442.138836][ T5107] Bluetooth: hci2: SCO packet for unknown connection handle 310 [ 442.147398][ T5107] Bluetooth: hci2: SCO packet for unknown connection handle 310 [ 442.155190][ T5107] Bluetooth: hci2: SCO packet for unknown connection handle 310 [ 442.163086][ T5107] Bluetooth: hci2: SCO packet for unknown connection handle 310 13:28:10 executing program 1: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="675fa672d19f6d39b3065ccfda1865b566c5c1ac95cbb5e6421a03e300d8"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c85012000e00050014810a003f00986950a5fcffff03"], 0x17) [ 442.172192][ T5107] Bluetooth: hci2: SCO packet for unknown connection handle 310 [ 442.182986][ T5107] Bluetooth: hci2: command 0x040f tx timeout 13:28:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:13 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) [ 445.521687][ T5107] Bluetooth: hci2: command 0x0419 tx timeout [ 445.531998][ T26] audit: type=1800 audit(1681478893.066:531): pid=7935 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1248 res=0 errno=0 13:28:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:28:13 executing program 1: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="675fa672d19f6d39b3065ccfda1865b566c5c1ac95cbb5e6421a03e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c85012000e00050014810a003f00986950a5fcffff03"], 0x17) [ 447.924485][ T26] audit: type=1800 audit(1681478893.096:532): pid=7939 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1249 res=0 errno=0 13:28:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:16 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x49) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000080)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) [ 448.004266][ T26] audit: type=1800 audit(1681478893.386:533): pid=7936 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1250 res=0 errno=0 13:28:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 450.566585][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 450.771834][ T26] audit: type=1800 audit(1681478893.906:534): pid=7954 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1245 res=0 errno=0 [ 451.837166][ T26] audit: type=1800 audit(1681478895.246:535): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1247 res=0 errno=0 [ 452.761831][ T26] audit: type=1800 audit(1681478895.606:536): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1249 res=0 errno=0 [ 452.905227][ T26] audit: type=1800 audit(1681478896.256:537): pid=7973 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1244 res=0 errno=0 [ 453.051741][ T26] audit: type=1800 audit(1681478896.636:538): pid=7977 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1246 res=0 errno=0 [ 453.128335][ T26] audit: type=1800 audit(1681478897.656:539): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1248 res=0 errno=0 [ 453.261783][ T26] audit: type=1800 audit(1681478898.856:540): pid=7987 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1226 res=0 errno=0 [ 453.396185][ T26] audit: type=1800 audit(1681478899.056:541): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1232 res=0 errno=0 [ 453.521934][ T26] audit: type=1800 audit(1681478900.516:542): pid=7994 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1210 res=0 errno=0 13:28:23 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:28:23 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x49) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000080)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) 13:28:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:28:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:23 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) [ 455.381860][ T26] audit: type=1800 audit(1681478903.416:543): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1250 res=0 errno=0 13:28:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 457.871132][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 457.889499][ T26] audit: type=1800 audit(1681478905.276:544): pid=8064 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1253 res=0 errno=0 13:28:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:28:26 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x49) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000080)) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) [ 458.848922][ T26] audit: type=1800 audit(1681478905.896:545): pid=8065 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1254 res=0 errno=0 13:28:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 458.894932][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 460.295078][ T26] audit: type=1800 audit(1681478908.266:546): pid=8086 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1206 res=0 errno=0 13:28:28 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:28:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:28:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:29 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) r1 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000500)=0x0) r6 = syz_io_uring_setup(0x4404, &(0x7f00000002c0)={0x0, 0x2f50, 0x2, 0x0, 0x138, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x71) r7 = dup3(r1, 0xffffffffffffffff, 0x80000) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r7, 0x8000000) syz_io_uring_setup(0x3f3d, &(0x7f0000000440)={0x0, 0x10001, 0x80, 0x2, 0x12e, 0x0, r6}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000004c0), &(0x7f0000000540)=0x0) r10 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) io_uring_enter(r10, 0x2ff, 0x0, 0x0, 0x0, 0x71) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x12, r10, 0x8000000) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000001580)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9cad, 0x1, &(0x7f0000000580)="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", 0x1ff, 0x0, 0x0, {0x3, r11}}, 0x0) r12 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) io_uring_enter(r12, 0x2ff, 0x0, 0x0, 0x0, 0x71) io_uring_enter(r12, 0x17f9, 0xd1b1, 0x2f, &(0x7f00000015c0)={[0x2]}, 0x8) syz_io_uring_submit(r2, r5, &(0x7f0000000400)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r7, 0x38, &(0x7f00000003c0)="ea0c7a4c562149b6f02b12d6251c55fd559136ddade1c1d4c2", 0x19, 0x0, 0x1}, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x60040, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r13, 0x80489439, &(0x7f0000001680)) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0xe, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000881}, 0x40) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="00a300000000"], 0x6) [ 461.513667][ T26] audit: type=1800 audit(1681478908.436:547): pid=8082 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1209 res=0 errno=0 [ 461.567316][ T26] audit: type=1800 audit(1681478909.706:548): pid=8096 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1213 res=0 errno=0 13:28:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r2, 0x100000011, 0x82, 0x2811fdff) [ 463.564316][ T26] audit: type=1800 audit(1681478910.096:549): pid=8100 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1214 res=0 errno=0 [ 463.674664][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.726752][ T26] audit: type=1800 audit(1681478911.696:550): pid=8111 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1226 res=0 errno=0 [ 463.838186][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.034306][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.198626][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 13:28:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r2, 0x100000011, 0x82, 0x2811fdff) 13:28:32 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) [ 464.683643][ T26] audit: type=1800 audit(1681478912.826:551): pid=8123 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1231 res=0 errno=0 [ 466.845858][ T26] audit: type=1800 audit(1681478914.706:552): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1234 res=0 errno=0 13:28:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 468.685362][ T26] audit: type=1800 audit(1681478916.826:553): pid=8143 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1232 res=0 errno=0 [ 470.177942][ T45] hsr_slave_0: left promiscuous mode [ 470.207685][ T45] hsr_slave_1: left promiscuous mode [ 470.238778][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.264143][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.294929][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.327132][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.358517][ T45] bridge_slave_1: left allmulticast mode [ 470.387600][ T45] bridge_slave_1: left promiscuous mode [ 470.420946][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.502267][ T45] bridge_slave_0: left allmulticast mode [ 470.507944][ T45] bridge_slave_0: left promiscuous mode [ 470.528259][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.565004][ T45] veth1_macvtap: left promiscuous mode [ 470.570511][ T45] veth0_macvtap: left promiscuous mode [ 470.613784][ T45] veth1_vlan: left promiscuous mode [ 470.619145][ T45] veth0_vlan: left promiscuous mode [ 471.214779][ T5107] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 471.223563][ T5107] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 471.231515][ T5107] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 471.240170][ T5107] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 471.247414][ T5107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 471.339661][ T45] team0 (unregistering): Port device team_slave_1 removed [ 471.351965][ T45] team0 (unregistering): Port device team_slave_0 removed [ 471.364501][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.380558][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.441347][ T45] bond0 (unregistering): Released all slaves 13:28:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r2, 0x100000011, 0x82, 0x2811fdff) 13:28:39 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:28:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 471.691278][ T26] audit: type=1800 audit(1681478919.826:554): pid=8180 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1226 res=0 errno=0 [ 472.270713][ T26] audit: type=1800 audit(1681478920.406:555): pid=8188 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1204 res=0 errno=0 [ 472.678406][ T8172] chnl_net:caif_netlink_parms(): no params data found [ 472.877778][ T8172] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.907409][ T8172] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.987667][ T8172] bridge_slave_0: entered allmulticast mode [ 473.069762][ T8172] bridge_slave_0: entered promiscuous mode [ 473.102917][ T8172] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.181707][ T8172] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.221877][ T8172] bridge_slave_1: entered allmulticast mode [ 473.281826][ T5113] Bluetooth: hci2: command 0x0409 tx timeout [ 473.293010][ T8172] bridge_slave_1: entered promiscuous mode [ 473.374586][ T8172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.434736][ T8172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.642274][ T8172] team0: Port device team_slave_0 added [ 473.711168][ T8172] team0: Port device team_slave_1 added [ 473.920610][ T8172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.967835][ T8172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.141729][ T8172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.228100][ T8172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.265306][ T8172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.389875][ T8172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.549466][ T8172] hsr_slave_0: entered promiscuous mode [ 474.606911][ T8172] hsr_slave_1: entered promiscuous mode [ 474.613875][ T8172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.639918][ T8172] Cannot create hsr debugfs directory [ 475.361822][ T5113] Bluetooth: hci2: command 0x041b tx timeout [ 476.118845][ T8172] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 476.137185][ T8172] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 476.155474][ T8172] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 476.172688][ T8172] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 476.286167][ T8172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.308537][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 476.324275][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 476.335379][ T8172] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.357457][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 476.369390][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 476.378443][ T4391] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.385608][ T4391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.406845][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 476.415823][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 476.426150][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 476.440909][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.448092][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.462645][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 476.484783][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 476.494265][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 476.503882][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 476.513413][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 476.522420][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 476.531062][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 476.540360][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 476.553768][ T8172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 476.569830][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 476.579853][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 476.588641][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 476.597794][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 476.809706][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 476.817946][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 476.836576][ T8172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.869150][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 476.880597][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 476.913151][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 476.921536][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 476.932628][ T8172] veth0_vlan: entered promiscuous mode [ 476.946776][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 476.957716][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 476.968695][ T8172] veth1_vlan: entered promiscuous mode [ 476.994647][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 477.003463][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 477.011598][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 477.020925][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 477.040109][ T8172] veth0_macvtap: entered promiscuous mode [ 477.058765][ T8172] veth1_macvtap: entered promiscuous mode [ 477.080754][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.101588][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.111812][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.122836][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.132793][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.143324][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.155584][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.166865][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.176933][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.187402][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.198720][ T8172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.208801][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 477.217809][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 477.225837][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 477.234789][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 477.245993][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.263478][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.279964][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.302616][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.319577][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.330358][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.347352][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.358162][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.376675][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.388675][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.408227][ T8172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.419375][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 477.435567][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 477.444153][ T5107] Bluetooth: hci2: command 0x040f tx timeout [ 477.460604][ T8172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.471193][ T8172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.489277][ T8172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.498349][ T8172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.577441][ T6127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.592666][ T6127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.622163][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 477.637947][ T6127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.646675][ T6127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.660836][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 477.718410][ T26] audit: type=1800 audit(1681478925.856:556): pid=8275 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1211 res=0 errno=0 [ 477.772610][ T26] audit: type=1400 audit(1681478925.916:557): avc: denied { execute } for pid=8274 comm="syz-executor.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 13:28:45 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) r1 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) (async) fcntl$setstatus(r0, 0x4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000500)=0x0) r6 = syz_io_uring_setup(0x4404, &(0x7f00000002c0)={0x0, 0x2f50, 0x2, 0x0, 0x138, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x71) r7 = dup3(r1, 0xffffffffffffffff, 0x80000) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r7, 0x8000000) syz_io_uring_setup(0x3f3d, &(0x7f0000000440)={0x0, 0x10001, 0x80, 0x2, 0x12e, 0x0, r6}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000004c0), &(0x7f0000000540)=0x0) r10 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) io_uring_enter(r10, 0x2ff, 0x0, 0x0, 0x0, 0x71) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x12, r10, 0x8000000) (async) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000001580)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9cad, 0x1, &(0x7f0000000580)="35d8a5aace1a797b5dbcaca2afe3a38d81d502c762f92fbc70778cefafb4ea3a9d601e1b8fffd74df21fc5c70fb529802471d959de381c54fda8c87886bfd6a02b4cdaa015bff95bfa041943324b4d95bce728aea0eb9c60b97dd16e32a476db0eb8bd94afc48632630a0b58188651105837cafbfbbce1e1db6ec48934951a4e497f22d0432a4758fe7c83b976a042d722f19bb1af30eb0bc147d539877a795c48a5f7dd848f5ce01d5d7f1d854f4291b5c45e15dcac8f2bdbd0d50645cb8ce4160e4d3ee163664022a4faa64bae125f2f9f132d9f4217debbe4315770c4004b89c6d56431e1432898c3f1b890216dc92d63430c8926aacebbacc2792ba4984cf2dee026cb06e79205adf72b8fff427b78e0ab6635f00d8d51d725ffab494f0d8d9ccdcc48299509deedd394f4337524e39d822c9eef1f6c4ee87a1eb418614ff2f97cf9435e82ee2746b65360c48a6f96f21154cd9e56c3f0a4f79c8feeabb1e5f10d499771d92b16a075ba172fdaa8a08782bf9e3d6e8913e2aa881a295667ea129437c23d59d7a9a8d0e2e369de99a87c8d000714eec2b123aa611f76a416d23cdca72bfb860d547737014b5e9f95b146fa8813613c3ea1f12014297f30580ccf918bbd3d6652f012967ef703be690ad9071d881626a6e1d815e2da8125be02832f0aa4cd49a192b1ae8c9f712597a63f9ef8dc0995524cca07b8bf048d4fca6b620eb307ef1087d213f0e99058f5483107b5888f153632d535870f67694e40918d01c4e6606fccf4cc75607ab89f2d7196b0535462f106b0bedbaea368f1560e33964c7faeca556b8c9a3dcc45ffc96625fe75a301bb0e517b0a825782c0483c9ddf6e4719b47f9d47a680327c2d87e7b97043c62e49a3a390246e02697709bea212bf768b60a9d8aab93d44aa7ad8c36b7270de925680722056a2b90a09e6831da2c0016fe8c6ca66ddad6d0c60fefaea7d93c85c408a25e669a5c239ad4e6fdaa94d9a939f48ad4a389b7a90898fd6ca8c479e1f41c0b49cca13125107e82caa4b48d06f242364918b821c5847b09d34de3a8fd80ae868ea350618cd6d3c9d1c228739eab3b0cbe78c070296421329813ebb4232cbe05dd959bb76746f039570e818efcf37da2c7c813622c798ed53be2d44dbc51c54fe4c3c3a60c6416602d6c892977dfab4f7684ffc1b6d96549a1bbcbcf74e6a7617e5b73ed61838dda98df1045c350769057d0a0ac4d2faa1f3a2d2d07cd46b8ca59cf3f0d04009ca55b40199d8d00d3777388557e4274d158bea4102dee3d94824f75fd19e949d7455bdafd1f3cdb99c36c6801b2c29a0fcf7d7eb4017c4608dbe67f6cb591ff1520b4482ee6df472e1ffe0fd997f6ada34d02e79e7bb24a782f3356462f1e27a9c230e8dcaa176c9ea90978034f1acfa84762db16036922047cec6b10227332a838c4560d9c19d2d8220693594a6ae7fb336263083c4788ca5d1e0110c385aa211a4b43e7c229423de77dbd15c7adf7e480bb3f8ff3e96b010ef0f56035be0c91b1c5d62fa8d7c57cd028aebae5ff86c8104fbb2d128e9c9c5bcaf28548a6a3802b6a9cec3ac08d53c8a08ce4797cc6169e55e1580199367dd9f8d8d727312128c2ef567b930eba160581bfc6ea86f6e7a61060756fccad6bef652e628c0d67e5c482237c0b0a83945d5be352b179d5d049a533253d3aedc0b174148d79ded72dc9ad646325acb44fdd564e8284786a7d90c7b88481db7971671244f0003f77398d7e2edf0721bcd802dad73a90d6cba3e07967f6c5cf7f63b0ae7393a3ffb927da219eeb2cf1f59ebaeab741f0e8732256e09d82836012753698a0ef7cd54fcee8ee073ca1764c03aef097b8c9dc2e979dc30fcdc9b6354d87a42efe4ae82c8abf257fbc96f63b915a27b92735ba2906650fa98f2d39865bfb73891047bcd340a9d2783ecbcdc9a95ac48b72beacc7d6183f56410f678e93316e4c344bc06d0f7d9cd770550506d945920c3af390b00664a5b39437e4c3f9fac95555d34ead6715029989ed3f67ecd26454f0196572b187704df2e0e1a1f512a8cfd0c43507b07918b578f88da17e288224b0daa988e657f6da7c206c658e99ac854b8695150fc8d0e1561182aef0f4ef77b3427510dff8318e4cbd44c63f1778c7f113dabe00ffbb768723916942d018b036663dff889558e5a057730ac1753a476cd3fffd93d6af0f8451ca9e2263367238e62a888cc1d08c82eefbee6b470546c6d6e175e0d8769fb9d53654ee56ffa76e190a8073fd9a3b7325b8faa87dc537db9a686261dabb1d45a90001a8529edcc38b3fb816b31ceaa486448816b76be55f0858dde2216c17287a51a56600ee7403e243b4fdbaad2cdb69c01615da3b0231f9002271cc4ad56c6c0d61a422a9743b555a16bdb6d03fbc1889cbc3b7d4f99d96cce59e2c246c88b36e457a959f9d494d8a5b96166a70c7122efb8b76f1694bf20bd24bc5be727d7aea726b0059737fd28d8ccb1029564112befe8e56134203c0aa5ad5521bbd994740d9239b0adb797af9baf7b622e0a3b211521ac6e4963a153d5bc93609bc0b4d0bb2e827c3bcdbe54e6d9e6b9f23916fdb4bf544a82672786d64160af0af93b49bc3e1361e3fe79d9295666a306d557954aa058cda934b5dd2225a958c7568751b57b583250738b40d9ac952784da0a5bb753830f37e49a8cafe90f4ca498c2ac25837174f14af2b26f06ba53129e0debfaf2d1a2fecbefc0ece64133a59b3c19551703d835237fc2216978175da0295f2596d17abc9cbf838aac0902f0f0b79d22326984357a84a5ea30dcd72757bf041f176d8d1c3e919ba89c932edeac5dc2908411d733c6cecb20236f18952aa624ee47d2465bf46be7fe491ddb9b343808aabc0f2bb036b69335be245a01eae7af935ebdc5adb9fae72ba34107babe931639f7aacfba570d39e13b3c00075ec77b28a5c84bd0f3370fa5e267f4cf535240ecc40d4bc6b68f7893d6c47993d6cd87adaeb69fe1f43b24ba38511e0c790f6d2a77a1e4d00f9895d5ac7b37b2cccdb7fecccffda91eb28b1a16168620caf6b33ede87eb33c64742157c061815d3878193d9f3c5e05fb80a117c8e244eb0f17339df61cb19df5c98c72cc0e5ead8f7ccc3ddf45756eeca06e83f142aebb7302a79abbfbe46f44fba04f6ddd7ad3955001e8ea827d9250012840c469e49aefcd95a802655ce5b63ccea844666fc94485f23ed27c2fb5356d0f33de81d6f5ceb7c3e30716a89104a0d52d9b721d65cbcd5c5e53a5fc58aa284ed17806a238c21cc063db8b69a4292a0a18c09e8132be082cef067c0647977cb5e9e962327df0d6fa1d9aa6082ce1b0fdc56e5fc59e17e4129d125416c03c13425e8f77f52284adb1ae65e635778a4d7d3359b8028479a258fd6e6eb4771636d52690c16f8679d89e680490aca6872986400d009c036c7ab7292290a525b4c1d83752b1111501d44bfa73bd6c35a39e160772095faa5463b1391ad0b00cfbd7ebd7184873b7229ad471c1044cae22fa3b27e669904f612e87efdbbf7a3e080ffa31442826f6fe57a838f029a71ccd86f193f5f593c5799f6cb2b222421be1b4fb32cb8ec0238ad9e7626c65de57b1578396b5445be98bb111310ab2d064893d4ba5cdba7118ef9df072e696fd949308cb5caefa7c2e39041e474cad5f52cdd3b3c35bbe79571ed7007dfc89b86324597efceb72c4dcd03fbb6731f0655eeb51a59f932803091ea29fe39fcd6782297f7f34a43f96a3ad7de3ad7ac0b1c5260cf7a143d563ebb5dd31c39a6a14255ab45a98e691375bfe2c62fafcb19fe0178177bcbf5a05c1277b36f7fdef0c0e1d3dff348efbfe7dfd8caf276471dcbff7ef31ab2952c0f091370b3b5757e1a9864932a39a937540929287a1619ba637c6d4abac9048663faaa51c605e8efbdea23967caa2c5855f7f078547755e3f92ad7e9eba763ad0a2dcad2d62df73b047d56e27c7411a2c4fa04717b6a7d1d4cb081fdb74e9540fceec335bcd2cef222560298ca973389e0668e186daf554395da5bb499fb683956bebcebc10ac9993058f9c8bf839bb77bded0105e2ea1c3eedd0238d5d7ec2688384a422c27dda9179ffb08f4101a08dced66af0e3998c1611aa7840e74b566858b07de1bf28e474daff2015b83fd51811e3e2bc384fa0a1bba200ae340b191f2822e84a0da0f4de81a11546e60c84e81db54a08595c14af38216f9c8ebc742e832bbf2b151d99e956fd75229b632be73a92ea24799a0bdf07e06b7fc374fa19ff1930fa9c321e422d515d24a8bd2c4bd2ba61de3f00f3b4a0908a60ca7bc3ea8723cb01f8f4d193d320c37600c3d5e535069de648438f70ac2fc145400fb4d14eea74c8d8caf47ff7c53347c1ee899370fd7413278ca71d3a356a6ac0d1aa3f8c6e012a87049c60f6d4974f3f854a490efb58817e32feb574ba8acf4786f9eef297c4737258c873f04563ca32a1daabf434a5d52d855e4f1ab73b664d0b82b96d6cd6ddd78a9720b91a75c4efe1c774916cceb52e5c783732bea2e36176b92c26f8f450b8b20813c605210d99b6cff5ff67ee4f7c0e0643c9d356a4da0e0f8e06c0453da826c396d8b790a430be4327cc010f6c95e5cf6f0f53e5167660d717ad17c4bdbed3be3129cc3af45654ac56181b7c3bf74dd20e69aed919e402b2ed734df169dc2e0d01d1ee9fceefb67a31e803d2f2666ac1819bc2627eaf6384c6766c11c93da0253906f55274dfd3750573e162263a74612c46dc60dfd80a44b94e1609e471b67875cf639d251d865709be83f3589fe5443f1e657351c57a65ed25bc18cb60e1f3469ad2e2421051a3498f49af8b2b442d937c0020d8b396a1a998378063021ca773bf4433e4e9759999225ef3a1d32bb3e4c67454158b737723506028df61c7ff7dc6cf3aab1d2cee7719380ee74ad4f0f5e3f9827e8c5c2f438a939ab0cd569f70337a6297b67a9bde6461b138c7244cd54150f887ef8716abd849e2be857a5aaa5e2f79ad564b78f8fb8fc3fd0d6f7569d33a6a7f0f6f73d478f06589dcec2c53bf7ee5cf1668ead0a2bd564ab5e0dd4523417b1e7b63d50d6d972ef8000054287f00e4fde1db4acf6960808b63497f3d19726515e9d9fd741ea4ebfe5858b68e8da3f1199cf4462773bfe448e5757b291649c457a0d170ee3d7995fc4d7179175fd1eb8415ab5f9af3c392610ef062af665c182251c532f224041288561fc42558af47e2b74d3a12970c4ab7ffa939d1b929bef4c683a5160723798ab66f9cbac95db393aad5bc861eb8f19712608d6438519e7222170be10eedab71401348e13b57c3c51056f813882078c8362ba5ba277ee0bf933933f94b3b4f88b35e4505efc715e869a6fbb81896ff111b0db19d690112db141f77afe1ffe08cbf15734b6ef4380425cf65634c674fe187e33fe6370623bfcd25f6f190e7fafe717987a5fcb3e5abccce8ba10e6cf3c4dddf7f538c64176b6eb8e2e7e72e2e4f6f117aa8f94476cb7a9620058f9ae0d34c2a67203d66bdd51c4fe1b9656519b076f2775d07b608b40e2b1358e2106bfc671f0304e9b2408ae7aa71d5f7059cd00134296994b8d0f7f5d6daa6e3963a4d0cb74c1af1b98f2fed0bf68838a0e0bc7e782ef945464ecc8b2d8d53a9fa7c196ffaaeab203caf890e00b2e2423774527915a718471a93aed3c5509b3abe78c6b57da6c4f15c20875bc1f0804b18937ae4edaf64fe6b63ca252cd256583eed12b467431b7a43dca15be", 0x1ff, 0x0, 0x0, {0x3, r11}}, 0x0) (async) r12 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) io_uring_enter(r12, 0x2ff, 0x0, 0x0, 0x0, 0x71) io_uring_enter(r12, 0x17f9, 0xd1b1, 0x2f, &(0x7f00000015c0)={[0x2]}, 0x8) (async) syz_io_uring_submit(r2, r5, &(0x7f0000000400)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r7, 0x38, &(0x7f00000003c0)="ea0c7a4c562149b6f02b12d6251c55fd559136ddade1c1d4c2", 0x19, 0x0, 0x1}, 0x0) (async) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x60040, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r13, 0x80489439, &(0x7f0000001680)) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0xe, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000881}, 0x40) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="00a300000000"], 0x6) 13:28:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x3, 0x3) r7 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r7, 0x4, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) recvfrom$inet6(r7, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:45 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:28:45 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) [ 477.841942][ T5107] Bluetooth: hci1: command 0x0406 tx timeout [ 477.902726][ T26] audit: type=1800 audit(1681478926.046:558): pid=8290 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1247 res=0 errno=0 13:28:48 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) [ 479.951095][ T5107] Bluetooth: hci2: command 0x0419 tx timeout [ 479.952851][ T26] audit: type=1800 audit(1681478927.816:559): pid=8300 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1252 res=0 errno=0 13:28:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x3, 0x3) r7 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r7, 0x4, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) recvfrom$inet6(r7, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:48 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) r1 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000500)=0x0) r6 = syz_io_uring_setup(0x4404, &(0x7f00000002c0)={0x0, 0x2f50, 0x2, 0x0, 0x138, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) (async) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x71) (async) r7 = dup3(r1, 0xffffffffffffffff, 0x80000) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r7, 0x8000000) (async) syz_io_uring_setup(0x3f3d, &(0x7f0000000440)={0x0, 0x10001, 0x80, 0x2, 0x12e, 0x0, r6}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000004c0), &(0x7f0000000540)=0x0) r10 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) io_uring_enter(r10, 0x2ff, 0x0, 0x0, 0x0, 0x71) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x12, r10, 0x8000000) (async) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000001580)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9cad, 0x1, &(0x7f0000000580)="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", 0x1ff, 0x0, 0x0, {0x3, r11}}, 0x0) (async) r12 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) io_uring_enter(r12, 0x2ff, 0x0, 0x0, 0x0, 0x71) (async) io_uring_enter(r12, 0x17f9, 0xd1b1, 0x2f, &(0x7f00000015c0)={[0x2]}, 0x8) (async) syz_io_uring_submit(r2, r5, &(0x7f0000000400)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r7, 0x38, &(0x7f00000003c0)="ea0c7a4c562149b6f02b12d6251c55fd559136ddade1c1d4c2", 0x19, 0x0, 0x1}, 0x0) (async) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x60040, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r13, 0x80489439, &(0x7f0000001680)) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0xe, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000881}, 0x40) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="00a300000000"], 0x6) [ 480.172075][ T26] audit: type=1800 audit(1681478928.316:560): pid=8310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1226 res=0 errno=0 [ 480.378461][ T26] audit: type=1800 audit(1681478928.516:561): pid=8319 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1251 res=0 errno=0 [ 481.325997][ T26] audit: type=1800 audit(1681478929.236:562): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1253 res=0 errno=0 13:28:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x3, 0x3) r7 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r7, 0x4, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) recvfrom$inet6(r7, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 482.108031][ T26] audit: type=1800 audit(1681478930.236:563): pid=8335 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1252 res=0 errno=0 13:28:50 executing program 1: r0 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)=0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x71) r2 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, 0x0}, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) r6 = syz_io_uring_setup(0x21b8, &(0x7f0000000080)={0x0, 0x83c7, 0x800, 0x0, 0x1ca}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x5449, &(0x7f00000002c0)={0x0, 0xed14, 0x800, 0x1, 0x289, 0x0, r6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000340)) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r5, 0x4, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r4, @ANYRES64=r7, @ANYRESDEC=r1, @ANYRES32=r2], 0x6) 13:28:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 482.602844][ T26] audit: type=1800 audit(1681478930.726:564): pid=8340 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1155 res=0 errno=0 13:28:51 executing program 1: r0 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)=0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x71) r2 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, 0x0}, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) r6 = syz_io_uring_setup(0x21b8, &(0x7f0000000080)={0x0, 0x83c7, 0x800, 0x0, 0x1ca}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x5449, &(0x7f00000002c0)={0x0, 0xed14, 0x800, 0x1, 0x289, 0x0, r6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000340)) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r5, 0x4, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r4, @ANYRES64=r7, @ANYRESDEC=r1, @ANYRES32=r2], 0x6) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x71) (async) open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, 0x0}, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) syz_io_uring_setup(0x21b8, &(0x7f0000000080)={0x0, 0x83c7, 0x800, 0x0, 0x1ca}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async) syz_io_uring_setup(0x5449, &(0x7f00000002c0)={0x0, 0xed14, 0x800, 0x1, 0x289, 0x0, r6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000340)) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) (async) fcntl$setstatus(r5, 0x4, 0x0) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r4, @ANYRES64=r7, @ANYRESDEC=r1, @ANYRES32=r2], 0x6) (async) [ 483.635590][ T26] audit: type=1800 audit(1681478930.776:565): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1155 res=0 errno=0 13:28:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 483.841823][ T26] audit: type=1800 audit(1681478931.306:566): pid=8344 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1251 res=0 errno=0 13:28:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 484.832911][ T26] audit: type=1800 audit(1681478931.936:567): pid=8351 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1243 res=0 errno=0 [ 485.961877][ T26] audit: type=1800 audit(1681478932.526:568): pid=8356 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1251 res=0 errno=0 [ 486.081727][ T26] audit: type=1800 audit(1681478932.556:569): pid=8354 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1243 res=0 errno=0 [ 486.201755][ T26] audit: type=1800 audit(1681478933.066:570): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1243 res=0 errno=0 [ 486.301796][ T26] audit: type=1800 audit(1681478933.596:571): pid=8372 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1251 res=0 errno=0 13:28:55 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 487.175918][ T26] audit: type=1800 audit(1681478935.316:572): pid=8386 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1209 res=0 errno=0 13:28:56 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:28:57 executing program 1: r0 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)=0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x71) r2 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, 0x0}, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) r6 = syz_io_uring_setup(0x21b8, &(0x7f0000000080)={0x0, 0x83c7, 0x800, 0x0, 0x1ca}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x5449, &(0x7f00000002c0)={0x0, 0xed14, 0x800, 0x1, 0x289, 0x0, r6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000340)) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r5, 0x4, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r4, @ANYRES64=r7, @ANYRESDEC=r1, @ANYRES32=r2], 0x6) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x71) (async) open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, 0x0}, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) syz_io_uring_setup(0x21b8, &(0x7f0000000080)={0x0, 0x83c7, 0x800, 0x0, 0x1ca}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async) syz_io_uring_setup(0x5449, &(0x7f00000002c0)={0x0, 0xed14, 0x800, 0x1, 0x289, 0x0, r6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000340)) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) (async) fcntl$setstatus(r5, 0x4, 0x0) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r4, @ANYRES64=r7, @ANYRESDEC=r1, @ANYRES32=r2], 0x6) (async) 13:28:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:28:57 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) [ 489.290838][ T26] audit: type=1800 audit(1681478937.426:573): pid=8410 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1141 res=0 errno=0 13:28:59 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:28:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 491.482835][ T26] audit: type=1800 audit(1681478937.426:574): pid=8410 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1141 res=0 errno=0 13:29:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:29:00 executing program 1: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x4, 0x70bd2b, 0x25dfdbf9, {}, ["", "", ""]}, 0xff0c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180), 0xc, &(0x7f0000000600)={&(0x7f0000000300)=@can_delroute={0x2c8, 0x19, 0x8, 0x70bd27, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_FILTER={0xc, 0xb, {{0x0, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}}}, @CGW_CS_CRC8={0x11e, 0x6, {0x32, 0x23, 0x2, 0x81, 0x9, "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", 0x1, "d36a2c6c23f335f9decd0337362316c3bfac76e3"}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "90ceb7d292c94ed7"}, 0x3}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x0, 0x0, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "ee9e6709fc52ca71"}, 0x6}}, @CGW_CS_CRC8={0x11e, 0x6, {0x72, 0x50, 0x50, 0x81, 0x7a, "daa6ee3f852a1b2f24db36e35d056301e2d0e730ebe02821bdbe738992332a778381806030c052b85551167dc1eaa22ed419fef99e1fe3e0bdd6fe9c9ef74d80e065295038908935b6d13f777e9de978f6f44a06ee2d453a991f4959e26001a416a1f82b2445c316e250674ef41ec7b771b74403089b5508aab603996066189609775f8f208899e5f294ced9c2f5ec2c927edd3e68b4fd8311e2ff2cb20637df6d683a670f7c9d1db3fbe7e3950fd6f3d3a52a35b009c17d8d5637e6d0b763a3a3a087082add0847cf1f2d81f6df4111e86104811cf8b1cabddbcd3e41d6abf9623d8e871a237338119271135940d2a703d83c4897e3d1e2519f20ed7024dee5", 0x3, "36e338c3d5c100fe0d8d40b1a055f12887b435d4"}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "03aa650e12f5c8f0"}, 0x4}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3}, 0x4, 0x0, 0x0, 0x0, "5fd629575b6f45cf"}}}, @CGW_MOD_UID={0x8, 0xe, r1}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20080000}, 0x8000) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x4, @bearer=@l2={'eth', 0x3a, 'pimreg0\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4) 13:29:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r6 = socket$inet6(0xa, 0x3, 0x3) r7 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r7, 0x4, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) recvfrom$inet6(r7, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r5}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 493.390078][ T26] audit: type=1800 audit(1681478938.636:575): pid=8412 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1238 res=0 errno=0 13:29:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r6 = socket$inet6(0xa, 0x3, 0x3) r7 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r7, 0x4, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) recvfrom$inet6(r7, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r5}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 494.245431][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 494.314166][ T26] audit: type=1800 audit(1681478939.146:576): pid=8415 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1244 res=0 errno=0 [ 495.353035][ T26] audit: type=1800 audit(1681478940.126:577): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1244 res=0 errno=0 [ 495.591834][ T26] audit: type=1800 audit(1681478941.086:578): pid=8439 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1213 res=0 errno=0 13:29:03 executing program 1: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x4, 0x70bd2b, 0x25dfdbf9, {}, ["", "", ""]}, 0xff0c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180), 0xc, &(0x7f0000000600)={&(0x7f0000000300)=@can_delroute={0x2c8, 0x19, 0x8, 0x70bd27, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_FILTER={0xc, 0xb, {{0x0, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}}}, @CGW_CS_CRC8={0x11e, 0x6, {0x32, 0x23, 0x2, 0x81, 0x9, "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", 0x1, "d36a2c6c23f335f9decd0337362316c3bfac76e3"}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "90ceb7d292c94ed7"}, 0x3}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x0, 0x0, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "ee9e6709fc52ca71"}, 0x6}}, @CGW_CS_CRC8={0x11e, 0x6, {0x72, 0x50, 0x50, 0x81, 0x7a, "daa6ee3f852a1b2f24db36e35d056301e2d0e730ebe02821bdbe738992332a778381806030c052b85551167dc1eaa22ed419fef99e1fe3e0bdd6fe9c9ef74d80e065295038908935b6d13f777e9de978f6f44a06ee2d453a991f4959e26001a416a1f82b2445c316e250674ef41ec7b771b74403089b5508aab603996066189609775f8f208899e5f294ced9c2f5ec2c927edd3e68b4fd8311e2ff2cb20637df6d683a670f7c9d1db3fbe7e3950fd6f3d3a52a35b009c17d8d5637e6d0b763a3a3a087082add0847cf1f2d81f6df4111e86104811cf8b1cabddbcd3e41d6abf9623d8e871a237338119271135940d2a703d83c4897e3d1e2519f20ed7024dee5", 0x3, "36e338c3d5c100fe0d8d40b1a055f12887b435d4"}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "03aa650e12f5c8f0"}, 0x4}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3}, 0x4, 0x0, 0x0, 0x0, "5fd629575b6f45cf"}}}, @CGW_MOD_UID={0x8, 0xe, r1}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20080000}, 0x8000) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x4, @bearer=@l2={'eth', 0x3a, 'pimreg0\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x4, 0x70bd2b, 0x25dfdbf9, {}, ["", "", ""]}, 0xff0c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@remote, @in=@initdev}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180), 0xc, &(0x7f0000000600)={&(0x7f0000000300)=@can_delroute={0x2c8, 0x19, 0x8, 0x70bd27, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_FILTER={0xc, 0xb, {{0x0, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}}}, @CGW_CS_CRC8={0x11e, 0x6, {0x32, 0x23, 0x2, 0x81, 0x9, "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", 0x1, "d36a2c6c23f335f9decd0337362316c3bfac76e3"}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "90ceb7d292c94ed7"}, 0x3}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x0, 0x0, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "ee9e6709fc52ca71"}, 0x6}}, @CGW_CS_CRC8={0x11e, 0x6, {0x72, 0x50, 0x50, 0x81, 0x7a, "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", 0x3, "36e338c3d5c100fe0d8d40b1a055f12887b435d4"}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "03aa650e12f5c8f0"}, 0x4}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3}, 0x4, 0x0, 0x0, 0x0, "5fd629575b6f45cf"}}}, @CGW_MOD_UID={0x8, 0xe, r1}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20080000}, 0x8000) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x4, @bearer=@l2={'eth', 0x3a, 'pimreg0\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) [ 495.769756][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 495.777598][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 495.849085][ T26] audit: type=1800 audit(1681478941.626:579): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1243 res=0 errno=0 [ 495.950631][ T26] audit: type=1800 audit(1681478942.646:580): pid=8455 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1226 res=0 errno=0 13:29:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:29:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r6 = socket$inet6(0xa, 0x3, 0x3) r7 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r7, 0x4, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) recvfrom$inet6(r7, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r5}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:29:04 executing program 1: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x4, 0x70bd2b, 0x25dfdbf9, {}, ["", "", ""]}, 0xff0c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) (async, rerun: 64) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180), 0xc, &(0x7f0000000600)={&(0x7f0000000300)=@can_delroute={0x2c8, 0x19, 0x8, 0x70bd27, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_FILTER={0xc, 0xb, {{0x0, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}}}, @CGW_CS_CRC8={0x11e, 0x6, {0x32, 0x23, 0x2, 0x81, 0x9, "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", 0x1, "d36a2c6c23f335f9decd0337362316c3bfac76e3"}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "90ceb7d292c94ed7"}, 0x3}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x0, 0x0, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "ee9e6709fc52ca71"}, 0x6}}, @CGW_CS_CRC8={0x11e, 0x6, {0x72, 0x50, 0x50, 0x81, 0x7a, "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", 0x3, "36e338c3d5c100fe0d8d40b1a055f12887b435d4"}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "03aa650e12f5c8f0"}, 0x4}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3}, 0x4, 0x0, 0x0, 0x0, "5fd629575b6f45cf"}}}, @CGW_MOD_UID={0x8, 0xe, r1}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20080000}, 0x8000) (async) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x4, @bearer=@l2={'eth', 0x3a, 'pimreg0\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4) 13:29:04 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) [ 496.370785][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.377649][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.384416][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.390289][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.396008][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.404105][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.409813][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.467772][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.482079][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.487838][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.493632][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.499331][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.505089][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.510790][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.516564][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.546762][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.547869][ T26] audit: type=1800 audit(1681478944.676:581): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1244 res=0 errno=0 [ 496.552681][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.580661][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.961998][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.968017][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.974057][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.990055][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 496.996589][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.003233][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.009407][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.015602][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.021929][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.027837][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.036430][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.042993][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.048936][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.055047][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.062180][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.068164][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.074189][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.080168][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.086228][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.092268][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.098198][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.104044][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.109971][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.116066][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.124498][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.130879][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.137444][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.143460][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.150341][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.156515][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.162267][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.167974][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.173748][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.192388][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.198125][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.203853][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.209506][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.215183][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.220833][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.226543][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.232247][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.238345][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.244134][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.249837][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.261774][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.267760][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.273779][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 497.487725][ T26] audit: type=1800 audit(1681478945.616:582): pid=8485 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1146 res=0 errno=0 13:29:09 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:29:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:29:09 executing program 1: fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@random={'trusted.', ']{}\x00'}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) 13:29:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:29:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:29:09 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:29:09 executing program 1: fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@random={'trusted.', ']{}\x00'}) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) [ 501.145590][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 502.963918][ T1213] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.085179][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 13:29:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 503.211695][ T26] audit: type=1800 audit(1681478950.946:583): pid=8511 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1246 res=0 errno=0 13:29:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 503.377560][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 503.395814][ T26] audit: type=1800 audit(1681478951.086:584): pid=8515 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1247 res=0 errno=0 13:29:11 executing program 1: fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@random={'trusted.', ']{}\x00'}) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) [ 503.418122][ T26] audit: type=1800 audit(1681478951.526:585): pid=8520 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1214 res=0 errno=0 [ 505.471725][ T26] audit: type=1800 audit(1681478953.546:586): pid=8534 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1248 res=0 errno=0 13:29:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:29:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 505.823633][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 505.917841][ T26] audit: type=1800 audit(1681478953.556:587): pid=8529 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1249 res=0 errno=0 [ 506.894928][ T26] audit: type=1800 audit(1681478954.196:588): pid=8544 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1222 res=0 errno=0 13:29:15 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:29:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:29:15 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0448e8e200d8a9eaf3cefb082c30ec1752fab3496ef339cefecca7432f8f2a4119a4279d218a5fd89ea74925d468869595252adb8b8f26a67d70675c8ca87ed1475ef54d74b55d72a5fdde40188c42b7e62e590ce4c7a0da17abcce43222fbfc37d7c92896bd4ef8d9b3e1c5d82e77d847fa"], 0x6) 13:29:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r4, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 507.529892][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 510.677274][ T26] audit: type=1800 audit(1681478957.626:589): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1236 res=0 errno=0 [ 510.719283][ T26] audit: type=1800 audit(1681478957.626:590): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1238 res=0 errno=0 13:29:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:29:18 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0448e8e200d8a9eaf3cefb082c30ec1752fab3496ef339cefecca7432f8f2a4119a4279d218a5fd89ea74925d468869595252adb8b8f26a67d70675c8ca87ed1475ef54d74b55d72a5fdde40188c42b7e62e590ce4c7a0da17abcce43222fbfc37d7c92896bd4ef8d9b3e1c5d82e77d847fa"], 0x6) 13:29:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r4, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:29:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 511.013223][ T26] audit: type=1800 audit(1681478959.156:591): pid=8568 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1233 res=0 errno=0 [ 511.914301][ T26] audit: type=1800 audit(1681478959.296:592): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1235 res=0 errno=0 [ 511.953084][ T26] audit: type=1800 audit(1681478959.996:593): pid=8580 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1238 res=0 errno=0 13:29:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r4, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 512.313203][ T26] audit: type=1800 audit(1681478960.386:594): pid=8586 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1235 res=0 errno=0 13:29:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(0xffffffffffffffff, 0x100000011, 0x82, 0x2811fdff) [ 513.690711][ T26] audit: type=1800 audit(1681478961.826:595): pid=8591 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1206 res=0 errno=0 13:29:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(0xffffffffffffffff, 0x100000011, 0x82, 0x2811fdff) 13:29:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 516.610639][ T26] audit: type=1800 audit(1681478964.746:596): pid=8598 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1209 res=0 errno=0 [ 517.128084][ T26] audit: type=1800 audit(1681478965.266:597): pid=8600 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1161 res=0 errno=0 [ 517.632223][ T5113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 517.640900][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 517.648810][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 517.660227][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 517.668132][ T5113] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 517.675835][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 517.758214][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.872459][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.951552][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.054147][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.240294][ T8603] chnl_net:caif_netlink_parms(): no params data found [ 518.497814][ T8603] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.505150][ T8603] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.513216][ T8603] bridge_slave_0: entered allmulticast mode [ 518.520146][ T8603] bridge_slave_0: entered promiscuous mode [ 518.528702][ T8603] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.537659][ T8603] bridge0: port 2(bridge_slave_1) entered disabled state 13:29:26 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) [ 518.549518][ T8603] bridge_slave_1: entered allmulticast mode [ 518.556828][ T8603] bridge_slave_1: entered promiscuous mode 13:29:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:29:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:29:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(0xffffffffffffffff, 0x100000011, 0x82, 0x2811fdff) 13:29:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 518.648811][ T8603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.700611][ T8603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.301435][ T8603] team0: Port device team_slave_0 added [ 519.321734][ T8603] team0: Port device team_slave_1 added [ 519.420210][ T8603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.427405][ T8603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.453543][ T8603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.532452][ T26] audit: type=1800 audit(1681478967.286:598): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1234 res=0 errno=0 [ 519.623470][ T26] audit: type=1800 audit(1681478967.726:599): pid=8635 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1235 res=0 errno=0 [ 519.697083][ T26] audit: type=1800 audit(1681478967.836:600): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1243 res=0 errno=0 [ 519.732871][ T8603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.740748][ T8603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.771871][ T5107] Bluetooth: hci2: command 0x0409 tx timeout [ 519.837182][ T8603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.110336][ T8603] hsr_slave_0: entered promiscuous mode [ 520.150421][ T8603] hsr_slave_1: entered promiscuous mode [ 520.174843][ T8603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.192253][ T8603] Cannot create hsr debugfs directory [ 520.531378][ T40] hsr_slave_0: left promiscuous mode [ 520.556038][ T40] hsr_slave_1: left promiscuous mode [ 520.586407][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.604150][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.624719][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.644968][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.669598][ T40] bridge_slave_1: left allmulticast mode [ 520.688776][ T40] bridge_slave_1: left promiscuous mode [ 520.712145][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.744391][ T40] bridge_slave_0: left allmulticast mode [ 520.769415][ T40] bridge_slave_0: left promiscuous mode [ 520.795259][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.846147][ T40] veth1_macvtap: left promiscuous mode [ 520.865062][ T40] veth0_macvtap: left promiscuous mode [ 520.887874][ T40] veth1_vlan: left promiscuous mode [ 520.913416][ T40] veth0_vlan: left promiscuous mode [ 521.637857][ T40] team0 (unregistering): Port device team_slave_1 removed [ 521.650952][ T40] team0 (unregistering): Port device team_slave_0 removed [ 521.665036][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.680280][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.742089][ T40] bond0 (unregistering): Released all slaves [ 521.841861][ T5113] Bluetooth: hci2: command 0x041b tx timeout [ 523.921905][ T5113] Bluetooth: hci2: command 0x040f tx timeout [ 524.115568][ T8603] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 524.129808][ T8603] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 524.142802][ T8603] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 524.152789][ T8603] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 524.230683][ T8603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.244828][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 524.254034][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 524.270360][ T8603] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.282186][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 524.290950][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 524.300477][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.307637][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.335233][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 524.346168][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 524.355329][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 524.364280][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.371399][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.380421][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 524.400155][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 524.409812][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 524.427305][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 524.436613][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 524.445876][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 524.469987][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 524.481006][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 524.495190][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 524.507648][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 524.519830][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 524.532762][ T8603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 524.774807][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 524.783918][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 524.806512][ T8603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.857099][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 524.867135][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 524.891834][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 524.900844][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 524.912768][ T8603] veth0_vlan: entered promiscuous mode [ 524.922462][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 524.930295][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 524.944590][ T8603] veth1_vlan: entered promiscuous mode [ 524.977966][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 525.010030][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 525.032638][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 525.041297][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 525.064840][ T8603] veth0_macvtap: entered promiscuous mode [ 525.078424][ T8603] veth1_macvtap: entered promiscuous mode [ 525.111482][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.138015][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.164034][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.200009][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.231801][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.251712][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.261566][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.282109][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.292414][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.304354][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.324954][ T8603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.340730][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 525.362647][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 525.370859][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 525.414998][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 525.431360][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.451746][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.461601][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.496748][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.515044][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.530726][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.542184][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.553494][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.570461][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.581576][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.600516][ T8603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.609390][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 525.629066][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 525.657154][ T8603] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.671999][ T8603] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.680736][ T8603] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.731707][ T8603] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.863720][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.908810][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.919697][ T5327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.932075][ T5327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.949028][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 525.963882][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 526.003221][ T5113] Bluetooth: hci2: command 0x0419 tx timeout 13:29:34 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0448e8e200d8a9eaf3cefb082c30ec1752fab3496ef339cefecca7432f8f2a4119a4279d218a5fd89ea74925d468869595252adb8b8f26a67d70675c8ca87ed1475ef54d74b55d72a5fdde40188c42b7e62e590ce4c7a0da17abcce43222fbfc37d7c92896bd4ef8d9b3e1c5d82e77d847fa"], 0x6) 13:29:34 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:29:34 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:29:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:29:34 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:29:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 526.049652][ T5107] Bluetooth: hci2: Malformed Event: 0x48 13:29:34 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd5}, "8c7408199a78ef867f3dcebd7f636e42c400f1fe6382b8ed7303f889d7fc7522a08cd7677d8caf2fd74b9c7b57214d686b461af9d6f1363e3d23c7df1f6d2692eb8cc566f9a8027d357a304bbbf38d3d42d4fc49c2c758f94be4f3fd6b02b02c383c01adc4b34d7279758f8aea1adeef9c63679837fbcf8d7e815566d557ea9f6ab1a55f2eaf7acc446e1bf6742d95d5478ec39e144a8823fa8abe880b6ff2475c3e7e479821b8b1f64f79577919c6daeae7e4c39aca213dc9fb59e7d52aa954b5f70411456fee07cae45c35c9093ed37985c908e0"}, 0xd9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 526.141182][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 526.402905][ T26] audit: type=1800 audit(1681478974.546:601): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1244 res=0 errno=0 [ 526.497860][ T5107] Bluetooth: hci2: Malformed Event: 0x48 13:29:35 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd5}, "8c7408199a78ef867f3dcebd7f636e42c400f1fe6382b8ed7303f889d7fc7522a08cd7677d8caf2fd74b9c7b57214d686b461af9d6f1363e3d23c7df1f6d2692eb8cc566f9a8027d357a304bbbf38d3d42d4fc49c2c758f94be4f3fd6b02b02c383c01adc4b34d7279758f8aea1adeef9c63679837fbcf8d7e815566d557ea9f6ab1a55f2eaf7acc446e1bf6742d95d5478ec39e144a8823fa8abe880b6ff2475c3e7e479821b8b1f64f79577919c6daeae7e4c39aca213dc9fb59e7d52aa954b5f70411456fee07cae45c35c9093ed37985c908e0"}, 0xd9) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 527.291671][ T26] audit: type=1800 audit(1681478975.126:602): pid=8745 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1250 res=0 errno=0 13:29:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:29:35 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd5}, "8c7408199a78ef867f3dcebd7f636e42c400f1fe6382b8ed7303f889d7fc7522a08cd7677d8caf2fd74b9c7b57214d686b461af9d6f1363e3d23c7df1f6d2692eb8cc566f9a8027d357a304bbbf38d3d42d4fc49c2c758f94be4f3fd6b02b02c383c01adc4b34d7279758f8aea1adeef9c63679837fbcf8d7e815566d557ea9f6ab1a55f2eaf7acc446e1bf6742d95d5478ec39e144a8823fa8abe880b6ff2475c3e7e479821b8b1f64f79577919c6daeae7e4c39aca213dc9fb59e7d52aa954b5f70411456fee07cae45c35c9093ed37985c908e0"}, 0xd9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 527.455388][ T5107] Bluetooth: hci2: Malformed Event: 0x48 13:29:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 528.436196][ T26] audit: type=1800 audit(1681478976.176:603): pid=8761 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1205 res=0 errno=0 [ 528.472485][ T5107] Bluetooth: hci2: Malformed Event: 0x48 13:29:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:29:36 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x2}}}, 0xd) [ 529.123627][ T26] audit: type=1800 audit(1681478977.246:604): pid=8775 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1248 res=0 errno=0 [ 529.165452][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 529.665940][ T26] audit: type=1800 audit(1681478977.726:605): pid=8778 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1141 res=0 errno=0 13:29:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 533.490572][ T26] audit: type=1800 audit(1681478981.606:606): pid=8820 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1212 res=0 errno=0 13:29:42 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:29:42 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x2}}}, 0xd) 13:29:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:29:42 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:29:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:29:42 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:29:42 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x2}}}, 0xd) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x2}}}, 0xd) [ 534.309983][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 536.052274][ T26] audit: type=1800 audit(1681478983.466:607): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1251 res=0 errno=0 13:29:44 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x41}, @l2cap_cid_signaling={{0x3d}, [@l2cap_conf_req={{0x4, 0x11, 0x2d}, {0x9, 0x1, [@l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x2, 0x3, 0x1ff, 0x3, 0x7}}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_mtu={0x1, 0x2, 0x8086}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x38, 0x1, 0x2, 0x0, 0xdf}}]}}, @l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x0, 0x9, 0xfff9, 0x1b5d}}]}}, 0x46) 13:29:44 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x41}, @l2cap_cid_signaling={{0x3d}, [@l2cap_conf_req={{0x4, 0x11, 0x2d}, {0x9, 0x1, [@l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x2, 0x3, 0x1ff, 0x3, 0x7}}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_mtu={0x1, 0x2, 0x8086}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x38, 0x1, 0x2, 0x0, 0xdf}}]}}, @l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x0, 0x9, 0xfff9, 0x1b5d}}]}}, 0x46) [ 536.052327][ T26] audit: type=1800 audit(1681478984.146:608): pid=8840 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1252 res=0 errno=0 13:29:44 executing program 5: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:29:44 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x41}, @l2cap_cid_signaling={{0x3d}, [@l2cap_conf_req={{0x4, 0x11, 0x2d}, {0x9, 0x1, [@l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x2, 0x3, 0x1ff, 0x3, 0x7}}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_mtu={0x1, 0x2, 0x8086}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x38, 0x1, 0x2, 0x0, 0xdf}}]}}, @l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x0, 0x9, 0xfff9, 0x1b5d}}]}}, 0x46) [ 536.150424][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 536.278800][ T5107] Bluetooth: hci2: Malformed Event: 0x48 13:29:44 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000400)="5fba5e67e125afc03500b2ea7c6d31995c9f5819a43fc99d9a3da6999289ee591215c2d5f7714203c1aee7", 0x2b) fcntl$setstatus(r3, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f0000000140)=""/69, 0x45}, {&(0x7f00000001c0)=""/10, 0xa}], 0x4, 0x3ff, 0x3) r6 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r6, 0x4, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="044803e300d8", @ANYRESDEC=r7, @ANYRESDEC, @ANYRES16=r1], 0x6) [ 536.430855][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 536.587723][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 536.637005][ T26] audit: type=1800 audit(1681478984.776:609): pid=8862 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1172 res=0 errno=0 [ 536.729309][ T26] audit: type=1800 audit(1681478984.866:610): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1252 res=0 errno=0 [ 536.756478][ T26] audit: type=1800 audit(1681478984.886:611): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1252 res=0 errno=0 [ 536.782515][ T26] audit: type=1800 audit(1681478984.926:612): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1252 res=0 errno=0 [ 536.831166][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 537.048876][ T8837] tty tty1: ldisc open failed (-12), clearing slot 0 13:29:47 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:29:47 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) (async, rerun: 64) r3 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000400)="5fba5e67e125afc03500b2ea7c6d31995c9f5819a43fc99d9a3da6999289ee591215c2d5f7714203c1aee7", 0x2b) (async, rerun: 32) fcntl$setstatus(r3, 0x4, 0x0) (async, rerun: 32) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f0000000140)=""/69, 0x45}, {&(0x7f00000001c0)=""/10, 0xa}], 0x4, 0x3ff, 0x3) r6 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async, rerun: 64) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (rerun: 64) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) (async) fcntl$setstatus(r6, 0x4, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="044803e300d8", @ANYRESDEC=r7, @ANYRESDEC, @ANYRES16=r1], 0x6) 13:29:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 539.284580][ T26] audit: type=1800 audit(1681478987.426:613): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1226 res=0 errno=0 [ 539.360717][ T26] audit: type=1800 audit(1681478987.466:614): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1226 res=0 errno=0 [ 540.270222][ T26] audit: type=1800 audit(1681478988.076:615): pid=8875 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1235 res=0 errno=0 [ 540.326110][ T26] audit: type=1800 audit(1681478988.456:616): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1226 res=0 errno=0 [ 540.416312][ T26] audit: type=1800 audit(1681478988.466:617): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1226 res=0 errno=0 [ 540.556870][ T26] audit: type=1800 audit(1681478988.506:618): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1226 res=0 errno=0 13:29:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:29:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:29:49 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) (async) r3 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000400)="5fba5e67e125afc03500b2ea7c6d31995c9f5819a43fc99d9a3da6999289ee591215c2d5f7714203c1aee7", 0x2b) (async) fcntl$setstatus(r3, 0x4, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) (async) preadv(r3, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f0000000140)=""/69, 0x45}, {&(0x7f00000001c0)=""/10, 0xa}], 0x4, 0x3ff, 0x3) r6 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r6, 0x4, 0x0) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="044803e300d8", @ANYRESDEC=r7, @ANYRESDEC, @ANYRES16=r1], 0x6) 13:29:49 executing program 5: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:29:49 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) [ 541.077082][ T26] audit: type=1800 audit(1681478989.216:619): pid=8890 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1231 res=0 errno=0 [ 541.976266][ T26] audit: type=1800 audit(1681478989.756:620): pid=8895 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1247 res=0 errno=0 13:29:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:29:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 543.046706][ T26] audit: type=1800 audit(1681478990.146:621): pid=8898 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1231 res=0 errno=0 13:29:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 544.117889][ T26] audit: type=1800 audit(1681478990.286:622): pid=8902 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1232 res=0 errno=0 13:29:52 executing program 1: setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x6b2f7852}, 0x10) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04c803e300d8407de0e1437e6799843696aa4f814e2af3be5524ca71c127321bc2880176c585e7e407d6af5f351417370e21e48d7c383327e99dc464c7df95e5da9581c06676e62ef68d5077b5ccd6a9af3da5bc36f828fc5f42d0f84ed8fc369dd9b38858931cdd5bfee76887a04063bdb586249df68890ad21d06122147dd81e3a1a013fb600"], 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x83, &(0x7f00000023c0)={r1}, &(0x7f0000001800)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x4}}, 0x5, 0x2, 0x2, 0x2, 0x20, 0xffffffff}, 0x9c) [ 544.310971][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 544.310986][ T26] audit: type=1400 audit(1681478992.446:626): avc: denied { create } for pid=8923 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 544.416224][ T26] audit: type=1400 audit(1681478992.476:627): avc: denied { getopt } for pid=8923 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 13:29:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:29:53 executing program 1: setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x6b2f7852}, 0x10) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04c803e300d8407de0e1437e6799843696aa4f814e2af3be5524ca71c127321bc2880176c585e7e407d6af5f351417370e21e48d7c383327e99dc464c7df95e5da9581c06676e62ef68d5077b5ccd6a9af3da5bc36f828fc5f42d0f84ed8fc369dd9b38858931cdd5bfee76887a04063bdb586249df68890ad21d06122147dd81e3a1a013fb600"], 0x6) (async) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x83, &(0x7f00000023c0)={r1}, &(0x7f0000001800)=0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x4}}, 0x5, 0x2, 0x2, 0x2, 0x20, 0xffffffff}, 0x9c) 13:29:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:29:53 executing program 1: setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x6b2f7852}, 0x10) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04c803e300d8407de0e1437e6799843696aa4f814e2af3be5524ca71c127321bc2880176c585e7e407d6af5f351417370e21e48d7c383327e99dc464c7df95e5da9581c06676e62ef68d5077b5ccd6a9af3da5bc36f828fc5f42d0f84ed8fc369dd9b38858931cdd5bfee76887a04063bdb586249df68890ad21d06122147dd81e3a1a013fb600"], 0x6) (async, rerun: 32) r0 = socket$inet(0x2, 0x80001, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x83, &(0x7f00000023c0)={r1}, &(0x7f0000001800)=0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x4}}, 0x5, 0x2, 0x2, 0x2, 0x20, 0xffffffff}, 0x9c) [ 546.040641][ T26] audit: type=1800 audit(1681478994.156:628): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1223 res=0 errno=0 [ 546.715044][ T26] audit: type=1800 audit(1681478994.216:629): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1246 res=0 errno=0 13:29:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:29:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:29:56 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="15ec83e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc8}, "1f238857d269d57ce6ef84ab5422e7d25cee7e175d74075e218ea44eb1872f88daa76ceddb8d8710f34d5a947419b5c223e1e616d822c559b954c0262cd59546b188b498a1c4970d86dff7857d0200f3cfc9f61206ebb41f521d77f7a6678fde931c6875f0abbbc345666a006986f6c2a23f2e4bd93531d15d44dc623721fa7be22a4e3fa301489ffd70deeb1bf5e69d670a975a0e91eb268211d4c3a18082a0aaf0a3769f01517441bd6e2c93da27a5198661d74660f4af3baa2f7a6c0f10f94482ec1c6d9117c9"}, 0xcc) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 548.733683][ T26] audit: type=1800 audit(1681478996.656:630): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1233 res=0 errno=0 [ 549.205922][ T26] audit: type=1800 audit(1681478996.736:631): pid=8952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1234 res=0 errno=0 13:29:57 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:29:57 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:29:57 executing program 5: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:29:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:29:57 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="15ec83e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc8}, "1f238857d269d57ce6ef84ab5422e7d25cee7e175d74075e218ea44eb1872f88daa76ceddb8d8710f34d5a947419b5c223e1e616d822c559b954c0262cd59546b188b498a1c4970d86dff7857d0200f3cfc9f61206ebb41f521d77f7a6678fde931c6875f0abbbc345666a006986f6c2a23f2e4bd93531d15d44dc623721fa7be22a4e3fa301489ffd70deeb1bf5e69d670a975a0e91eb268211d4c3a18082a0aaf0a3769f01517441bd6e2c93da27a5198661d74660f4af3baa2f7a6c0f10f94482ec1c6d9117c9"}, 0xcc) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 13:29:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:29:57 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="15ec83e300d8"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc8}, "1f238857d269d57ce6ef84ab5422e7d25cee7e175d74075e218ea44eb1872f88daa76ceddb8d8710f34d5a947419b5c223e1e616d822c559b954c0262cd59546b188b498a1c4970d86dff7857d0200f3cfc9f61206ebb41f521d77f7a6678fde931c6875f0abbbc345666a006986f6c2a23f2e4bd93531d15d44dc623721fa7be22a4e3fa301489ffd70deeb1bf5e69d670a975a0e91eb268211d4c3a18082a0aaf0a3769f01517441bd6e2c93da27a5198661d74660f4af3baa2f7a6c0f10f94482ec1c6d9117c9"}, 0xcc) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 549.960504][ T26] audit: type=1800 audit(1681478997.586:632): pid=8967 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1233 res=0 errno=0 13:29:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 550.325148][ T26] audit: type=1800 audit(1681478998.436:633): pid=8969 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1235 res=0 errno=0 13:29:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 550.378485][ T26] audit: type=1800 audit(1681478998.516:634): pid=8971 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1216 res=0 errno=0 13:29:58 executing program 1: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000080, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname}, {@noextend}, {@privport}, {@uname={'uname', 0x3d, '%#'}}, {@access_user}], [{@subj_role={'subj_role', 0x3d, '&\\+L\r+,*\\^\xde\''}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@euid_gt={'euid>', 0xee01}}, {@euid_gt={'euid>', r0}}, {@obj_type={'obj_type', 0x3d, '/]^'}}, {@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '`%:.^['}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) 13:29:58 executing program 1: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000080, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname}, {@noextend}, {@privport}, {@uname={'uname', 0x3d, '%#'}}, {@access_user}], [{@subj_role={'subj_role', 0x3d, '&\\+L\r+,*\\^\xde\''}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@euid_gt={'euid>', 0xee01}}, {@euid_gt={'euid>', r0}}, {@obj_type={'obj_type', 0x3d, '/]^'}}, {@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '`%:.^['}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]}}) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) [ 550.539813][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 551.064002][ T26] audit: type=1800 audit(1681478998.786:635): pid=8987 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1235 res=0 errno=0 13:29:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 551.791442][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 552.500749][ T26] audit: type=1800 audit(1681478999.196:636): pid=8989 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1250 res=0 errno=0 [ 552.550928][ T26] audit: type=1800 audit(1681478999.846:637): pid=8996 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1222 res=0 errno=0 13:30:02 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:30:02 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:30:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:30:02 executing program 1: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000080, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname}, {@noextend}, {@privport}, {@uname={'uname', 0x3d, '%#'}}, {@access_user}], [{@subj_role={'subj_role', 0x3d, '&\\+L\r+,*\\^\xde\''}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@euid_gt={'euid>', 0xee01}}, {@euid_gt={'euid>', r0}}, {@obj_type={'obj_type', 0x3d, '/]^'}}, {@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '`%:.^['}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]}}) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) 13:30:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:30:02 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:30:02 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 554.469246][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 556.053177][ T26] audit: type=1800 audit(1681479003.816:638): pid=9015 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1238 res=0 errno=0 13:30:04 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:30:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r2, 0x100000011, 0x82, 0x2811fdff) [ 556.448072][ T26] audit: type=1800 audit(1681479004.006:639): pid=9016 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1243 res=0 errno=0 [ 556.521937][ T5113] Bluetooth: hci2: Malformed Event: 0x48 13:30:04 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (rerun: 64) [ 556.564207][ T26] audit: type=1800 audit(1681479004.706:640): pid=9019 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1249 res=0 errno=0 [ 556.769020][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 556.774966][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 556.780803][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 556.787116][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 556.793043][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 556.810215][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 556.817596][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 556.825493][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 556.857388][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 556.888360][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 556.905254][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 556.940664][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 556.968370][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 556.987535][ T26] audit: type=1800 audit(1681479004.846:641): pid=9033 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1252 res=0 errno=0 [ 556.987625][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.015979][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.021750][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.027478][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.033316][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.039863][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.046464][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.052395][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.058115][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.064620][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.070334][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.078844][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.084632][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.090853][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.098124][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.104027][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.109720][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.115473][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.121221][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.127073][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.132928][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.138746][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.145007][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.150772][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.156677][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.162503][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.168415][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.174290][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.180075][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.186095][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.192991][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.198900][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.204797][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.210625][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.216607][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.222526][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.228355][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.234259][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.240091][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.246601][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.252524][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.258370][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.264303][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.270392][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.276253][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.282189][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.287978][ T5113] Bluetooth: hci2: Malformed Event: 0x48 13:30:05 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) [ 557.293842][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.299675][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.305758][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.311700][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.317581][ T5113] Bluetooth: hci2: Malformed Event: 0x48 13:30:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r2, 0x100000011, 0x82, 0x2811fdff) [ 557.431375][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.450181][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 557.594853][ T26] audit: type=1800 audit(1681479005.706:642): pid=9047 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1251 res=0 errno=0 13:30:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r2, 0x100000011, 0x82, 0x2811fdff) 13:30:08 executing program 1: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{}, {0x6, 0xc8}}}, 0xfffffffffffffe0c) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xcd}, @l2cap_cid_signaling={{0xc9}, [@l2cap_info_rsp={{0xb, 0x8, 0xa7}, {0x6, 0x5, "3815cca71555c5794de8cff213dd9dbee86eb9dc1f127fb78e3eaa980e830aa7f8fc86950954b494c6366fec1ed9f2e63329129d29bcd582e3b801b9a99b36c551ddacd6b9d030cb5f0dddb05754eca50b7c132491138f3fd6c15f4fc67015ac8f9552d734368c73046e6c8d1c77f2eff4a9de932dd0a790781237135ed6cd9baa234ee58b7f70b93698337b7bb1997ee071de3094930a9e92027c8fa6d20a29c0fc09"}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x6, 0xff}}, @l2cap_conn_req={{0x2, 0x4, 0x4}, {0x1000}}, @l2cap_conn_req={{0x2, 0x9b, 0x4}, {0x8, 0xfff9}}, @l2cap_cmd_rej_unk={{0x1, 0x32, 0x2}, {0x2}}]}}, 0xd2) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4a}, "6afc5d52edf807927743a6247b51e2da4022407736a090423cf6ded11d714ca61bbd5c7ef0038160dab8981697fd7566e9b0ff64ef512c4671f0a36f54dc8b047858df3ccaf0542f9272"}, 0x4e) 13:30:08 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:30:08 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:30:08 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) [ 560.716832][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 560.724607][ T5113] [ 560.726953][ T5113] ===================================== [ 560.732493][ T5113] WARNING: bad unlock balance detected! [ 560.738049][ T5113] 6.3.0-rc6-syzkaller-00138-g44149752e998 #0 Not tainted [ 560.745054][ T5113] ------------------------------------- [ 560.750576][ T5113] kworker/u5:5/5113 is trying to release lock (&conn->chan_lock) at: [ 560.758659][ T5113] [] l2cap_recv_frame+0x4ad8/0x9390 [ 560.765540][ T5113] but there are no more locks to release! [ 560.771237][ T5113] [ 560.771237][ T5113] other info that might help us debug this: [ 560.779278][ T5113] 2 locks held by kworker/u5:5/5113: [ 560.784545][ T5113] #0: ffff88801d77d938 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 560.794946][ T5113] #1: ffffc9000368fda8 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 560.806346][ T5113] [ 560.806346][ T5113] stack backtrace: [ 560.812241][ T5113] CPU: 1 PID: 5113 Comm: kworker/u5:5 Not tainted 6.3.0-rc6-syzkaller-00138-g44149752e998 #0 [ 560.822462][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 560.832513][ T5113] Workqueue: hci2 hci_rx_work [ 560.837612][ T5113] Call Trace: [ 560.840894][ T5113] [ 560.843836][ T5113] dump_stack_lvl+0xd9/0x150 [ 560.848452][ T5113] lock_release+0x4f1/0x670 [ 560.852965][ T5113] ? l2cap_recv_frame+0x4ad8/0x9390 [ 560.858158][ T5113] ? lock_downgrade+0x690/0x690 [ 560.862998][ T5113] ? __mutex_lock+0x231/0x1350 [ 560.867794][ T5113] __mutex_unlock_slowpath+0x99/0x5e0 [ 560.873159][ T5113] ? wait_for_completion_io_timeout+0x20/0x20 [ 560.879219][ T5113] l2cap_recv_frame+0x4ad8/0x9390 [ 560.884257][ T5113] ? hci_rx_work+0x6e5/0x1340 [ 560.888928][ T5113] ? lock_downgrade+0x690/0x690 [ 560.893775][ T5113] ? rcu_is_watching+0x12/0xb0 [ 560.898570][ T5113] ? l2cap_info_timeout+0x80/0x80 [ 560.903600][ T5113] ? __mutex_lock+0x231/0x1350 [ 560.908353][ T5113] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 560.913972][ T5113] ? wait_for_completion_io_timeout+0x20/0x20 [ 560.920023][ T5113] ? hci_rx_work+0x6b9/0x1340 [ 560.924695][ T5113] ? hci_conn_enter_active_mode+0x129/0x360 [ 560.930577][ T5113] ? lock_downgrade+0x690/0x690 [ 560.935415][ T5113] ? hci_conn_check_link_mode+0x550/0x550 [ 560.941120][ T5113] l2cap_recv_acldata+0xa80/0xbf0 [ 560.946135][ T5113] hci_rx_work+0x709/0x1340 [ 560.950629][ T5113] process_one_work+0x991/0x15c0 [ 560.955580][ T5113] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 560.960950][ T5113] ? spin_bug+0x1c0/0x1c0 [ 560.965283][ T5113] ? _raw_spin_lock_irq+0x45/0x50 [ 560.970342][ T5113] worker_thread+0x669/0x1090 [ 560.975006][ T5113] ? process_one_work+0x15c0/0x15c0 [ 560.980188][ T5113] kthread+0x2e8/0x3a0 [ 560.984240][ T5113] ? kthread_complete_and_exit+0x40/0x40 [ 560.989857][ T5113] ret_from_fork+0x1f/0x30 [ 560.994271][ T5113] 13:30:09 executing program 1: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{}, {0x6, 0xc8}}}, 0xfffffffffffffe0c) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xcd}, @l2cap_cid_signaling={{0xc9}, [@l2cap_info_rsp={{0xb, 0x8, 0xa7}, {0x6, 0x5, "3815cca71555c5794de8cff213dd9dbee86eb9dc1f127fb78e3eaa980e830aa7f8fc86950954b494c6366fec1ed9f2e63329129d29bcd582e3b801b9a99b36c551ddacd6b9d030cb5f0dddb05754eca50b7c132491138f3fd6c15f4fc67015ac8f9552d734368c73046e6c8d1c77f2eff4a9de932dd0a790781237135ed6cd9baa234ee58b7f70b93698337b7bb1997ee071de3094930a9e92027c8fa6d20a29c0fc09"}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x6, 0xff}}, @l2cap_conn_req={{0x2, 0x4, 0x4}, {0x1000}}, @l2cap_conn_req={{0x2, 0x9b, 0x4}, {0x8, 0xfff9}}, @l2cap_cmd_rej_unk={{0x1, 0x32, 0x2}, {0x2}}]}}, 0xd2) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4a}, "6afc5d52edf807927743a6247b51e2da4022407736a090423cf6ded11d714ca61bbd5c7ef0038160dab8981697fd7566e9b0ff64ef512c4671f0a36f54dc8b047858df3ccaf0542f9272"}, 0x4e) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="044803e300d8"], 0x6) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{}, {0x6, 0xc8}}}, 0xfffffffffffffe0c) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xcd}, @l2cap_cid_signaling={{0xc9}, [@l2cap_info_rsp={{0xb, 0x8, 0xa7}, {0x6, 0x5, "3815cca71555c5794de8cff213dd9dbee86eb9dc1f127fb78e3eaa980e830aa7f8fc86950954b494c6366fec1ed9f2e63329129d29bcd582e3b801b9a99b36c551ddacd6b9d030cb5f0dddb05754eca50b7c132491138f3fd6c15f4fc67015ac8f9552d734368c73046e6c8d1c77f2eff4a9de932dd0a790781237135ed6cd9baa234ee58b7f70b93698337b7bb1997ee071de3094930a9e92027c8fa6d20a29c0fc09"}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x6, 0xff}}, @l2cap_conn_req={{0x2, 0x4, 0x4}, {0x1000}}, @l2cap_conn_req={{0x2, 0x9b, 0x4}, {0x8, 0xfff9}}, @l2cap_cmd_rej_unk={{0x1, 0x32, 0x2}, {0x2}}]}}, 0xd2) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4a}, "6afc5d52edf807927743a6247b51e2da4022407736a090423cf6ded11d714ca61bbd5c7ef0038160dab8981697fd7566e9b0ff64ef512c4671f0a36f54dc8b047858df3ccaf0542f9272"}, 0x4e) (async) [ 561.060561][ T26] audit: type=1800 audit(1681479009.196:643): pid=9062 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1250 res=0 errno=0 13:30:09 executing program 1: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="044803e300d8"], 0x6) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{}, {0x6, 0xc8}}}, 0xfffffffffffffe0c) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xcd}, @l2cap_cid_signaling={{0xc9}, [@l2cap_info_rsp={{0xb, 0x8, 0xa7}, {0x6, 0x5, "3815cca71555c5794de8cff213dd9dbee86eb9dc1f127fb78e3eaa980e830aa7f8fc86950954b494c6366fec1ed9f2e63329129d29bcd582e3b801b9a99b36c551ddacd6b9d030cb5f0dddb05754eca50b7c132491138f3fd6c15f4fc67015ac8f9552d734368c73046e6c8d1c77f2eff4a9de932dd0a790781237135ed6cd9baa234ee58b7f70b93698337b7bb1997ee071de3094930a9e92027c8fa6d20a29c0fc09"}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x6, 0xff}}, @l2cap_conn_req={{0x2, 0x4, 0x4}, {0x1000}}, @l2cap_conn_req={{0x2, 0x9b, 0x4}, {0x8, 0xfff9}}, @l2cap_cmd_rej_unk={{0x1, 0x32, 0x2}, {0x2}}]}}, 0xd2) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4a}, "6afc5d52edf807927743a6247b51e2da4022407736a090423cf6ded11d714ca61bbd5c7ef0038160dab8981697fd7566e9b0ff64ef512c4671f0a36f54dc8b047858df3ccaf0542f9272"}, 0x4e) [ 561.151551][ T5113] Bluetooth: hci2: Malformed Event: 0x48 [ 561.159036][ T26] audit: type=1800 audit(1681479009.296:644): pid=9065 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1251 res=0 errno=0 [ 561.159694][ T5107] Bluetooth: hci2: Malformed Event: 0x48 13:30:09 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:30:09 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x6) [ 561.277106][ T5107] Bluetooth: hci2: Malformed Event: 0x48 13:30:09 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x6) 13:30:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:30:09 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x6) [ 561.819631][ T26] audit: type=1800 audit(1681479009.956:645): pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1205 res=0 errno=0 13:30:10 executing program 1: ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="046503e300d8"], 0x6) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x370a, &(0x7f0000000340)={0x0, 0x332e, 0x200, 0x0, 0x80000000, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000140)) ioctl$VHOST_VDPA_GET_AS_NUM(0xffffffffffffffff, 0x8004af7a, &(0x7f00000001c0)) 13:30:10 executing program 1: ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000040)) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="046503e300d8"], 0x6) (async) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) (async) r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x370a, &(0x7f0000000340)={0x0, 0x332e, 0x200, 0x0, 0x80000000, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000500)=0x0) (async) fcntl$setstatus(r0, 0x4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000140)) ioctl$VHOST_VDPA_GET_AS_NUM(0xffffffffffffffff, 0x8004af7a, &(0x7f00000001c0)) [ 562.008651][ T26] audit: type=1800 audit(1681479010.136:646): pid=9099 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1249 res=0 errno=0 13:30:11 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:30:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:30:11 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:30:11 executing program 1: ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="046503e300d8"], 0x6) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x370a, &(0x7f0000000340)={0x0, 0x332e, 0x200, 0x0, 0x80000000, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) (async) fcntl$setstatus(r0, 0x4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000140)) ioctl$VHOST_VDPA_GET_AS_NUM(0xffffffffffffffff, 0x8004af7a, &(0x7f00000001c0)) (async) ioctl$VHOST_VDPA_GET_AS_NUM(0xffffffffffffffff, 0x8004af7a, &(0x7f00000001c0)) 13:30:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:30:11 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) [ 563.084555][ T26] audit: type=1800 audit(1681479011.226:647): pid=9113 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1235 res=0 errno=0 13:30:11 executing program 1: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x1, 0x1ff, 0x4, 0x80080, 0xffffffffffffffff}) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x2023}, {0xffffffffffffffff, 0x16}, {0xffffffffffffffff, 0x400}, {r0, 0x2a0}, {r1, 0x1200}, {r2, 0x200}], 0x6, &(0x7f0000000140), &(0x7f0000000180)={[0x80000000]}, 0x8) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="d8000035acde"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3c}, "ef61430900000000000000ea98d8cb405f84931ed63dc3bf458ddcba801e546661cbaa6cf548bbed1e38f8881ed1bc03d04f9ba23db6371148380f28"}, 0x40) [ 563.226353][ T26] audit: type=1800 audit(1681479011.306:648): pid=9118 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1220 res=0 errno=0 [ 563.456392][ T26] audit: type=1800 audit(1681479011.596:649): pid=9124 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1235 res=0 errno=0 13:30:11 executing program 1: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x1, 0x1ff, 0x4, 0x80080, 0xffffffffffffffff}) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x2023}, {0xffffffffffffffff, 0x16}, {0xffffffffffffffff, 0x400}, {r0, 0x2a0}, {r1, 0x1200}, {r2, 0x200}], 0x6, &(0x7f0000000140), &(0x7f0000000180)={[0x80000000]}, 0x8) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="d8000035acde"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3c}, "ef61430900000000000000ea98d8cb405f84931ed63dc3bf458ddcba801e546661cbaa6cf548bbed1e38f8881ed1bc03d04f9ba23db6371148380f28"}, 0x40) 13:30:11 executing program 1: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x1, 0x1ff, 0x4, 0x80080, 0xffffffffffffffff}) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x2023}, {0xffffffffffffffff, 0x16}, {0xffffffffffffffff, 0x400}, {r0, 0x2a0}, {r1, 0x1200}, {r2, 0x200}], 0x6, &(0x7f0000000140), &(0x7f0000000180)={[0x80000000]}, 0x8) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="d8000035acde"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3c}, "ef61430900000000000000ea98d8cb405f84931ed63dc3bf458ddcba801e546661cbaa6cf548bbed1e38f8881ed1bc03d04f9ba23db6371148380f28"}, 0x40) [ 563.510836][ T26] audit: type=1400 audit(1681479011.646:650): avc: denied { create } for pid=9120 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 13:30:11 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) 13:30:11 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) (async) 13:30:11 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) [ 563.534180][ T26] audit: type=1800 audit(1681479011.676:651): pid=9127 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1252 res=0 errno=0 [ 563.737839][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 563.787779][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 563.787824][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 563.842080][ T5107] Bluetooth: hci2: Malformed Event: 0x48 13:30:12 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:30:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) [ 564.415854][ T26] audit: type=1800 audit(1681479012.556:652): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1216 res=0 errno=0 [ 564.492646][ T26] audit: type=1800 audit(1681479012.636:653): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1222 res=0 errno=0 13:30:12 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="76d0d2006e26cdd279cd886680afb8228337ee2c0eae0ab1bb7afb488ffad08f1cb7be4cea563e7ca093605dff3ee6210f32d68377db56526d763aa8a38213d8e8c82af3c13473f525b3c97c35d04f10d688011b1213f45341998b4a1a144c1cb21bcb9afa6426a6ca82d215b7b0ec140b49ba62690ff50d8a802dc48e60", @ANYRESDEC=r1, @ANYRESOCT=r2], 0x9) 13:30:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:30:12 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:30:12 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:30:12 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="76d0d2006e26cdd279cd886680afb8228337ee2c0eae0ab1bb7afb488ffad08f1cb7be4cea563e7ca093605dff3ee6210f32d68377db56526d763aa8a38213d8e8c82af3c13473f525b3c97c35d04f10d688011b1213f45341998b4a1a144c1cb21bcb9afa6426a6ca82d215b7b0ec140b49ba62690ff50d8a802dc48e60", @ANYRESDEC=r1, @ANYRESOCT=r2], 0x9) (async) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="76d0d2006e26cdd279cd886680afb8228337ee2c0eae0ab1bb7afb488ffad08f1cb7be4cea563e7ca093605dff3ee6210f32d68377db56526d763aa8a38213d8e8c82af3c13473f525b3c97c35d04f10d688011b1213f45341998b4a1a144c1cb21bcb9afa6426a6ca82d215b7b0ec140b49ba62690ff50d8a802dc48e60", @ANYRESDEC=r1, @ANYRESOCT=r2], 0x9) 13:30:13 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="76d0d2006e26cdd279cd886680afb8228337ee2c0eae0ab1bb7afb488ffad08f1cb7be4cea563e7ca093605dff3ee6210f32d68377db56526d763aa8a38213d8e8c82af3c13473f525b3c97c35d04f10d688011b1213f45341998b4a1a144c1cb21bcb9afa6426a6ca82d215b7b0ec140b49ba62690ff50d8a802dc48e60", @ANYRESDEC=r1, @ANYRESOCT=r2], 0x9) 13:30:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r9, 0x4, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) recvfrom$inet6(r9, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r7}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r3, 0x100000011, 0x82, 0x2811fdff) 13:30:13 executing program 1: r0 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x71) r1 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) r2 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r1, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r5, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) r8 = socket$bt_hidp(0x1f, 0x3, 0x6) r9 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) io_uring_enter(r9, 0x2ff, 0x0, 0x0, 0x0, 0x71) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x10010, r2, 0x8000000) syz_open_dev$vim2m(&(0x7f0000000180), 0x101, 0x2) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1, &(0x7f0000003cc0)=[{0x10}, {0x10}, {0x10, 0x1, 0x7f}, {0x10, 0xff, 0x80}, {0x2a0, 0x102, 0x0, "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"}], 0x2e0}, 0x0, 0x4000000, 0x0, {0x0, r11}}, 0x0) r12 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x180, 0x0) r13 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(r10, r7, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x20, 0x0, r12, &(0x7f0000000300)={0x20000010}, r13, 0x1, 0x0, 0x1}, 0xe5ce) r14 = socket$inet_smc(0x2b, 0x1, 0x0) poll(&(0x7f0000000100)=[{r0, 0x40}, {r1, 0x85d5}, {r5, 0x4104}, {r8, 0x3040}, {0xffffffffffffffff, 0x280}, {r9, 0x108}, {0xffffffffffffffff, 0x5340}, {0xffffffffffffffff, 0x40}, {r14, 0x80}, {0xffffffffffffffff, 0xa0}], 0xa, 0xc1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x15}, {0x5, [{0xc9, 0x7}, {0xc9, 0x9}, {0xc8, 0x8000}, {0xc8, 0x8}, {0xc9, 0x7}]}}}, 0x18) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="e6c80029a4aa7dd68a2cda595cde01050006000100f9"], 0x12) 13:30:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) [ 565.478559][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 565.486314][ T5107] Bluetooth: hci2: link tx timeout [ 565.491549][ T5107] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa 13:30:13 executing program 1: r0 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x71) r1 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) r2 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r1, 0x4, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0) (async) r5 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r5, 0x4, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) (async) r8 = socket$bt_hidp(0x1f, 0x3, 0x6) r9 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) io_uring_enter(r9, 0x2ff, 0x0, 0x0, 0x0, 0x71) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x10010, r2, 0x8000000) syz_open_dev$vim2m(&(0x7f0000000180), 0x101, 0x2) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1, &(0x7f0000003cc0)=[{0x10}, {0x10}, {0x10, 0x1, 0x7f}, {0x10, 0xff, 0x80}, {0x2a0, 0x102, 0x0, "b808445982d5922a161bdd15a3f4077aa506015f0d3ae06d444681e889ce17e3d686c470d8aa7fd0fcc42f487cb6f19995ed1a8c2182319d43c9c544a20eea110b0c0cd5c9204c6aadf7da23c35f282128b59f10ed6d8824b4da3130c6f31920bf70df35ec3d11187f583daa585ede9e303296003f044eb19b089b45b09b9f4ee26a38bfe6e8c4815a5b01c7d50f887e836a75eb7d44b94f9a3c8c19319a289895dd8260d71a61ab88821c984c3b5c4cf8f5ee9722c127df6caeb990afa6a405dde11c065a455c5ff09acfdbaa356c927953a35158ac5265cf8bd0d4c2127251f4163dd96d95d4a8cde362fab88ed8fbda19b6019f4ae316ef413d16e9b5e1cee8f4aa3258ee511f0eb54827cd4ca6842568e420a31049c189f9f2590082094d4bd68e8b0a609b140c3b6a32b84fbafa3647d78cb7c7cd641d3ad961b6d8abed8497167b35d5d5206ec00f7092af8b6337d5c96ed79dcd5dc0e3c792028d86a174f52fe964bde002117efaeb7d342f6c4c13c87667549a7395d101aa6bc1aa3b84700b891b64b5567efc2531d440cef73c4b3abb114f8fd74d2c2e6bba50958517bbc83f6c0011533dceeec082214c3e255cb8095ce670057b8d4d2fc0ca474458aed69f19fd48602431507d659504fd06e54d2b80b38db7e79d435f66629c2b4ef19fb1dd6821165997b33552d30a782e7082f94b448e89614d04845a9dbd918f4285d06c11c8d8a279dd2a6295ba880f27508b2abb6cac475adb81fe6a44556ec40df8870f2cc130365c1105b9a4aecdacdb9530a2137cec5dc5a419a504454c79926ed8a3b259b5d454353bf67a7781d0cb78a486962e56bca29919b776436b7c2e4c446ac8e4789ef86b870a072ca775543d24442b2549926683ba941706f31184a120e7249737"}], 0x2e0}, 0x0, 0x4000000, 0x0, {0x0, r11}}, 0x0) (async) r12 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x180, 0x0) (async) r13 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(r10, r7, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x20, 0x0, r12, &(0x7f0000000300)={0x20000010}, r13, 0x1, 0x0, 0x1}, 0xe5ce) (async) r14 = socket$inet_smc(0x2b, 0x1, 0x0) poll(&(0x7f0000000100)=[{r0, 0x40}, {r1, 0x85d5}, {r5, 0x4104}, {r8, 0x3040}, {0xffffffffffffffff, 0x280}, {r9, 0x108}, {0xffffffffffffffff, 0x5340}, {0xffffffffffffffff, 0x40}, {r14, 0x80}, {0xffffffffffffffff, 0xa0}], 0xa, 0xc1) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x15}, {0x5, [{0xc9, 0x7}, {0xc9, 0x9}, {0xc8, 0x8000}, {0xc8, 0x8}, {0xc9, 0x7}]}}}, 0x18) (async) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="e6c80029a4aa7dd68a2cda595cde01050006000100f9"], 0x12) [ 565.711398][ T5107] Bluetooth: hci2: Malformed Event: 0x48 13:30:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r6 = socket$inet6(0xa, 0x3, 0x3) r7 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r7, 0x4, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) recvfrom$inet6(r7, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r5}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r1, 0x100000011, 0x82, 0x2811fdff) 13:30:13 executing program 1: r0 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x71) (async, rerun: 32) r1 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async, rerun: 32) r2 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r1, 0x4, 0x0) (async, rerun: 32) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0) (rerun: 32) r5 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r5, 0x4, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) (async) r8 = socket$bt_hidp(0x1f, 0x3, 0x6) r9 = syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) io_uring_enter(r9, 0x2ff, 0x0, 0x0, 0x0, 0x71) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x10010, r2, 0x8000000) (async, rerun: 32) syz_open_dev$vim2m(&(0x7f0000000180), 0x101, 0x2) (async, rerun: 32) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1, &(0x7f0000003cc0)=[{0x10}, {0x10}, {0x10, 0x1, 0x7f}, {0x10, 0xff, 0x80}, {0x2a0, 0x102, 0x0, "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"}], 0x2e0}, 0x0, 0x4000000, 0x0, {0x0, r11}}, 0x0) (async, rerun: 32) r12 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x180, 0x0) (rerun: 32) r13 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(r10, r7, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x20, 0x0, r12, &(0x7f0000000300)={0x20000010}, r13, 0x1, 0x0, 0x1}, 0xe5ce) r14 = socket$inet_smc(0x2b, 0x1, 0x0) poll(&(0x7f0000000100)=[{r0, 0x40}, {r1, 0x85d5}, {r5, 0x4104}, {r8, 0x3040}, {0xffffffffffffffff, 0x280}, {r9, 0x108}, {0xffffffffffffffff, 0x5340}, {0xffffffffffffffff, 0x40}, {r14, 0x80}, {0xffffffffffffffff, 0xa0}], 0xa, 0xc1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x15}, {0x5, [{0xc9, 0x7}, {0xc9, 0x9}, {0xc8, 0x8000}, {0xc8, 0x8}, {0xc9, 0x7}]}}}, 0x18) (async) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="e6c80029a4aa7dd68a2cda595cde01050006000100f9"], 0x12) 13:30:13 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:30:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r6 = socket$inet6(0xa, 0x3, 0x3) r7 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r7, 0x4, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) recvfrom$inet6(r7, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r5}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r1, 0x100000011, 0x82, 0x2811fdff) 13:30:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) [ 566.205607][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 566.205617][ T26] audit: type=1800 audit(1681479014.346:683): pid=9200 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1222 res=0 errno=0 [ 566.358134][ T26] audit: type=1800 audit(1681479014.386:684): pid=9199 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1222 res=0 errno=0 [ 566.460659][ T26] audit: type=1800 audit(1681479014.396:685): pid=9212 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1140 res=0 errno=0 [ 566.485114][ T26] audit: type=1800 audit(1681479014.406:686): pid=9200 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1222 res=0 errno=0 [ 566.595659][ T26] audit: type=1800 audit(1681479014.406:687): pid=9200 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1222 res=0 errno=0 [ 566.696455][ T26] audit: type=1800 audit(1681479014.406:688): pid=9200 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1222 res=0 errno=0 13:30:15 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:30:15 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) 13:30:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r6 = socket$inet6(0xa, 0x3, 0x3) r7 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r7, 0x4, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) recvfrom$inet6(r7, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r5}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r1, 0x100000011, 0x82, 0x2811fdff) 13:30:15 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x200, 0x0, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 13:30:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) 13:30:15 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) [ 567.099076][ T26] audit: type=1800 audit(1681479015.236:689): pid=9221 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1238 res=0 errno=0 [ 567.245556][ T26] audit: type=1800 audit(1681479015.346:690): pid=9223 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1244 res=0 errno=0 [ 567.268277][ T26] audit: type=1800 audit(1681479015.376:691): pid=9225 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1246 res=0 errno=0 [ 567.291644][ T5107] Bluetooth: hci2: Malformed Event: 0x48 13:30:15 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x200, 0x0, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x200, 0x0, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) (async) fcntl$setstatus(r0, 0x4, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) 13:30:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r8, 0x4, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r6}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r2, 0x100000011, 0x82, 0x2811fdff) [ 567.426962][ T26] audit: type=1800 audit(1681479015.566:692): pid=9232 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1250 res=0 errno=0 [ 567.453860][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.470949][ T5107] Bluetooth: hci2: Malformed Event: 0x48 13:30:15 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x200, 0x0, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x200, 0x0, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000500)) (async) fcntl$setstatus(r0, 0x4, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) [ 567.521799][ T5107] Bluetooth: hci2: command 0x0406 tx timeout 13:30:15 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x21}, "1655f2606a610bd03b7aefadccc122787d7778cd3535002d168e79a8c1dd83834a"}, 0x25) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x0, 0x8}, {0x80, 0xa89, 0x8001, 0x9}}}}, 0x15) 13:30:15 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x21}, "1655f2606a610bd03b7aefadccc122787d7778cd3535002d168e79a8c1dd83834a"}, 0x25) (rerun: 32) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x0, 0x8}, {0x80, 0xa89, 0x8001, 0x9}}}}, 0x15) [ 567.604409][ T5107] Bluetooth: hci2: Malformed Event: 0x48 13:30:16 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803e300d8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x21}, "1655f2606a610bd03b7aefadccc122787d7778cd3535002d168e79a8c1dd83834a"}, 0x25) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x0, 0x8}, {0x80, 0xa89, 0x8001, 0x9}}}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x0, 0x8}, {0x80, 0xa89, 0x8001, 0x9}}}}, 0x15) [ 567.638991][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.728160][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.811159][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.813677][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.814166][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.814962][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.815259][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.815534][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.816007][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.816381][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.816786][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.817186][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.817344][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.817897][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.818370][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.818794][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.819099][ T5107] Bluetooth: hci2: Malformed Event: 0x48 13:30:16 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) [ 567.819333][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.819747][ T5107] Bluetooth: hci2: Malformed Event: 0x48 13:30:16 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x0, 0xfffffffffffffffb, 0x95, 0x5, @scatter={0x9, 0x0, &(0x7f00000017c0)=[{&(0x7f00000007c0)=""/183, 0xb7}, {&(0x7f00000001c0)=""/4, 0x4}, {&(0x7f0000001200)=""/184, 0xb8}, {&(0x7f00000012c0)=""/144, 0x90}, {&(0x7f0000001380)=""/141, 0x8d}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f0000001500)=""/193, 0xc1}, {&(0x7f0000001600)=""/211, 0xd3}, {&(0x7f0000001700)=""/132, 0x84}]}, &(0x7f0000001880)="73ef2d9a58f350f211f5b09ed64ce2161f0ea2b908d826039cf1cb4e9170147a4cb9e60ae256cc54e14d523167cec71bbeaa0869e9def57833aaa6ac2f0c81f86d18ac9b64a471d5deabbac2ee53cd81728aa174ca350c26b024e47d2ccc62b405c5fd0ccc7126e2b5900ce6e262ff8848a3495d2c3b204e9031bee040e6cc962947bd094b9b1062e0c845290c5440c6edc4138429", &(0x7f0000001940)=""/139, 0xfffffffc, 0x1, 0x1, &(0x7f0000000880)}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc00, &(0x7f0000002f80)=ANY=[@ANYRES8=r3, @ANYRES8, @ANYBLOB="e3c40bec70f87ce5874b4f4aad6444eae18f5fa1f3f5c7c390414deb2ba4522c147d1ac24de27ad627e89957e970a4b92c84a6f4740b9bc826d0eb5ce1a3960b3a84aa", @ANYRES16=r4, @ANYRESOCT, @ANYBLOB="4182058ea897b6cafa0821044349ebded3c18e5ecd459527e10e40b4733cd776d643ed21c0356360cada1ec27293fa661095f2ad901dde4d809b5688047ada7edb4d"], 0x0, 0x451, &(0x7f0000000900)="$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") ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r4) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002d00), 0x2, 0x0) readahead(r5, 0xfffffffffffffffa, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r6, 0x4, 0x0) syz_io_uring_setup(0x5902, &(0x7f0000001a80)={0x0, 0xe33d, 0x4, 0x0, 0x182, 0x0, r6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000001b00)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1, &(0x7f0000003cc0)=[{0x10}, {0x10}, {0x10, 0x1, 0x7f}, {0x10, 0xff, 0x80}, {0x2a0, 0x102, 0x0, "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"}], 0x2e0}, 0x0, 0x4000000, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000002cc0)=@IORING_OP_SENDMSG={0x9, 0x20, 0x0, r0, 0x0, &(0x7f0000002c80)={&(0x7f0000001b40)=@pptp={0x18, 0x2, {0x3, @remote}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001bc0)="a17dfae804ec6d6457e3879bc66d2b4a6609f96594752cb7f769cfc525017df46fe9cfaa47c2559e101d4c56b91a64911a1d2d04ef55bac2ea98cb1ecd92f2a88ceede573e33e6e5ac20f5fa8df71af2f4028310264fd4c6f47fc016bff3bb1781c8f8132cca8965f33c3b4aecc9831ba9a6e8bf96d05c8937312278f69a40fd62ed9cdde302d0679350556ab4240dae064f0d961564919c91d99c9a4f3ad0734101bc1f7f26ca53dcec117658843ba807172797b3e936c9a135c1e3a0c74c8faa5ffcabb17622f41843173b797312454de2f888f03e65e3b65c9241a887d8104c421662684e516688158caf15ee6b5693f02e86721303ec430c277099fbeb9016e98fb670e44ef12cfc3c2b097de94a4b2da02eaeede0251835e7dedf7e9a85db51268759c32fb822b9eff1985cf202c74a7e429a745cad9161105e4c6ab83bddfc334d12920ec29b119c670f98e18418a1682a10243ec93b7974d648e02881c0bc1e41bb2fb9bda4e9f7f3c065a0eb2302c1652bd865ee0a64121af6a78c726f77275a49374426be4457d29dda176dcac4a1a2a3e10e9dd9b9330bfbc00bef1006d8553a5ec2bdd8b2272ccb0e1b115a0d98e5663c3016efed4ef13e9ead47fc48de155cc76e603986c1e1700978c2c8caab73c478c62eca6909dc8c3e1ea30223eea167c400f44183a22869899518c4009735970e836b2563071c60b494159c3962a99b20efe158d388679d13b43c8dcae754397b4f42a6f447fcc16709dc2be31e1880eb277fc4a7ffbe0050d9b3637177b9ab532cdd44096917bb10a2ae2e2416c681a850cd78b5615e20ec810d760b23e1ebe8edd63ea7c4d6caacfe8201138a6d177e8995acc3143b43732b8f8bba22b2b7e7e7b02774af1df53d590fd4f3ad08278177760b56bbcc345a38a68f9c7b17af03fa2fbf8a6324658f83a45ba81bdfd689c6babdceb4c00215b300f29316ffa40e25b63c98c8e62086259cd95220c5b0efa123522a373bbbc2ba57eee40774e5b850a6915bffb87bb007dbaf64a78e7594e05a7f1fd4bd009aed25f310ba0406f86191cdde1df16339fdd71a8120165c62615f5737d960a09b5d9b2cc4d11693d1ea91161ab6282feaa35e9b8a7598ca5c706786bd2fc070d4ad57be236b0f57e5cedddb56e8a845d86125f679d3e008fdbab4f3d0b87e062667359e5caa88d9859594daa026fb5a0c7d98f705c293c539d919d37ad3cd53b4f749b0a141385bf7a3a2ca94a1f4b9def906e0b1417b76e79f096a16654879e73f205a5236477c842f09d71cb50737ed9516a3c3e98ea9bdc695405cf272bc46139b46c4d22c041453023431a4fda12b9774bd10d5d12e5dccc9a0338c884cc072499e9ab74c9e16ddac8865452ee3473429cf153f50ac29df0feae92e9c93931dd29f50074a6f8331b913b22acf7e0c89fd2bcb65f563c8b53944f50be8007e4a57e4b26686538c78514da62918fe4ee35ae30ad92dde01322418d8fb2632a8ac6b2846fd3911918a3ad18f99bcff8f77af7badc5d2d357da0f617d7e5131dbf126268eaf6bee8b69e017faec18339a3c046f010545a9c866ee676207c30f0f480b62de59fc0f157c7f0d1a7794355d90222dcfbac22382766749c952a24592925c77586bedcfa2c4e312d32e21581b966d457019b8f0cd51a7be397bd5f4b8fa0c22c6a4d5769694043d0532bc1ebac914aed032eaaa8ea9ffc5496ce870ccba222edfc38db9150ef33e4f5081c6a5d0463d4ca3dfce158ce903433279881cedc4c64a2cee54a6589f9a4e0d942b1638797aba30ded4363eee88c8732ce4310c7c9142ca0a03887ff2d10cdc2b6f261a24a905781675f5afcb7c84e2e4dab9a6d13eeb7fbee62fa7c380179177d73a835cd0d0d573cef2eb095aa54d9a56ecb46bc036b2cccb35e9a7ed7e6fe18b2fb20ba746a50ccd4febc117f15b8db3903669c940189817945a7d091e8b37adb36de395d7762458807c023c3ddbe768e2b44e4699de12a8f16052be3271987ba7b888d64a3874eb8a57b7b4ca513447c05134c9eff9f23d85622c47e535d5e17250f111e4596a0f4faf677f10d2857115047ab6f0088de14d307494673d26c769d29bd46f5b3974591f790aa497ca6905c62b9973932063fd1f6405b84b69671e329087afd9d6ac1b3b99fb8cc0cadb3fb27e3e4de734f2273873202cc514577ba5c98d6714f968d0521f265e9528ece16fb9bf6052162d53a13831c1b2c52b0fe275e67d3c2be8c53f92acafb3240af50c22add71b45f7ffabffbc8574cba7e0eae037252b1695806e2d9df8666f60d68696be0ecdf89846a1386840095adc96ea1974a26ef69a4ab872550544bddf5a1e962a931187b5e3ba4e91d6f9da77e0912ffc0c6bb2698201c1cf3c84a3736ccdde1685b62600546a6eb2a1e384ce83c5c036cf35a2bba474ca8e4fa944e42a7db3d06be0697f8bcfbd81f6a407e20138314971b32c1058b4793ee60983b95ac54af33f5d2adb393d314c38c5f0e5ff730b9bb22c83eeb5a5dd9e808e3f22622a55562c854f6c411f789e2d49df85a453604e713791c39c27fdbc8d1536e0129ed4a850f4cd0f77c3916f77e05bcebd28ad056240202bba3ca57c633b3be119d3a8c0136c90d14165d9e0ba43df3b436e87ddddb6ef7b35ee34c72fb159fdb35c7c2202302f9e1473403a7924d6957bfa2f9c362542ed48111dbd4a25e41382682905f3615525410d3989e77c1bf762b6ef66ff07e079a0ec15f3df7150c72c4b5265aed836e7532aef403e1e0fd225787425bc918376eb16815f0e2e961504ec8e014e684d3615217de8198657f8520d138a468f39e9fc8e0cfa5cde0ce997507fca27835b1d71ab73acaf7f842a71e29b952bb448b432f0f1fc9e6c0cb137333dfb94a46a0950e1edc3d35670b273543c39b096959f1ca89f8871b3baf5891e0a5157ff19def310bb64fab3dd9fb2ad7244038969262ef0cd350741496094e8c1209982a31e4a1e425dc7cda25a14aa5b5899e919ab0dda6066a0841e1eedc1add4c412a817b3a80e608d4309d5a37de9e437fb99fff1349a9fcfa211b80535b990ee4c52968f8042de701051f3f5f74ea7411e491b64d3bae83d0b8710048563c78245fedf25a0a99a68aa1830b20c827790c46db75680c8e8a7ae7fe658bc3782f2b42ac917247ec269680a2d001e603070450297ef8777822dd766b116e938a79cce441ca44a20e3f43755ec7bc64c8b36daedde1f327aaf3053f2f1f750f9214b51b49d1ea1a393df233b9076f86a0c3037600e7e1a703c6c183b9a2f2624a71a1a16216fd92a952c7996bc2ebb677b04830f72936d4ea26e7d6c3765fca0b2a12e65a263603d05faf82748d4a084734d1c7059c428bdc3ec07ef0485690187dee8555acb85798eb07f0ac3714e0f1f0c55d5453fb1659c76c3231b7377263ad8040b10c282a3117f2a70cee0b23a1cd00f780cd334fca61aacf26ac79eb86214d1f08a803eb3752b1c46ca7f8b63417d71c034ce5967d84cc2a8cc8d2f2f84a8bf63822b96ba410c7d44fae188586da735a172db34e1c9e84d7c8d9529235491c56b44a428115eff49cfc968054f38ae7c48e509ba3eff5444ff8138cd2bfa646dc140080e72b9ce3f2618696c75b5b3cfc7a0b3a001b1c17638407d04fab8757d6e752ffb0389c3c3108da843b16b37530413af7bd3867339622d0cad868ffe60a1801d0619fe22f2a8de1a0192cb66eae39793555cdb7207a95f7c119b1818b726c13bb1ec91195cb96359c1a3b11e738872036b0eeb416b7594e17c9f661e2534c856fb155f505463d6c9e6bb29c3422b390190b8aa53c88b05b6a1d3d49e742dc32a1592c473bd06071422f7514b2d7dfd65e0a554f94a3a338b2d602753258973ddddbaf51c56974b497613668041be54b6c5358ae31e35492f9a1846bafacb30f31e1352d939417285e4d06572dbe0cf175f114e6a865ad34ecbccd27dac5c6e85b254a7aa6d74b28eba45bcbfd12517c1d0f619674d267fd4a0ef686add98dec431636a19cca4385fde356afd78145dfda77e316129752776e0ea4d397b70a95ecf5ec8bec926def35839bd69ec3ec0b397b6495214e3a02e1423dd1d1b87023936e83cfeae982057e61ecb5078c5a4dcacee58a954f6e9897d69becc3494f74b2d003b64d827a34f49f7a4e92e98c836a59d83ddbd8bc9d369985d5828e48f993e96b2a37a115fa53a1520f10fcef2ece8d87ecb63c18b7015a9d53aa1884982df6e55d4030dac819b4c6c7d296bc824427931b93f720bc36fb0ec6b8b5281d759d6b4b454ec16fc6ab7e85533069e65efc42dfecca308103d47e4376265600ecbd43d6ab050da5fb10c49433de12ac8ed8ba069523901e1be3fed7b225450ae7c120397ab4707072c0e979d0c507413a6fa4cb8965a39628232c72f68bcb9860e057d7a30f2dd2dc61998ca826179639ccfb30cbe4a5fac1f539d2b2b2c47ce26518589782d4d0ca4cad6ace4bb3aa33ae7aab237ee1525519f9349beeef5a0df36b21cbae29e2c3ae8a012d14743731fb37474c6053450d6d9f6048aaeb5cf4fa3bf76859ba6cb6535ff473bc078e5f61a09ba4cda8e7140532dd717d009a3d979f1da85c61b4d14c7c748c3138bb491cab0c14997ef2821026b92b2f1c1c33aa1c9851c163bf17f99742e97c454128f042a7d4059a3b7cf3e555c83f731b3f7b438ea05d3b82a078f9212b460ca41b320ce87a5e4dc07bfd9606fcdb1be0883e2a7f7019e8278f425bf2f3a770a16e306f621cdf577a21f73c991683d439226f8d485fa08df1e33e8a4a21038d419975d7004d50341a9f998964526f0e72bb84479208070d919f1db126f5143ed18c540b9d3aff701edfc0c34b445c3806b06a5017756704df45abb9c0c5e1bec9c1e1197dc91e2587f1688221c827aa513d2e7723d9ba5f98c8a9443e2424b624d8599f6d45925cabbee42521acf3df9aecd3218b7526d31748f0ca4a69dbcacb592312346d16e5098b6d293fcdcba5fb8b5cc2e88e9ece73820c5eb992a7a286661be7f8611e6e9a48adcf19d13265e92a842a7a58ea0fedeccef2f652b76e3198c757f9cac9144cdd4dcca349bfee2aaaf09f4d295516677542c5789da96d50081b49be6690d61f129e0904a81bc4f63ed98bb4b0de3f1e15908c9fc9707a2335754f7a02902181d65181f07077047a0edd4c72054af62f3b643dcd42651b9d5b658aecc5a82519759df5735c3a2f1692ac9d8651ab7ff2efc93a94004b9d62766525e98d190d2d02622eb05c818a2fba29c8bc7cf6e0f1f98af52a47dfbdd42e285f33088fa5118e028bf6e0f8a1a899e0b236e02a7326e85c5ef37d609e1349678e550a56892831323566295925c8cec444edd28709a8a8156e56444202d7f6c2941f58d1d3dbe1216ca7648e049770a21340422b8b14eda89242d5d8b0b55adb1fcf47f1c113f31fac74735341abd927d500562c7de58959c258d4826b2747460ca3e6a847a8879c0be097b9c5a10a24b3ab8fca4ffe18b9d0e270fd5cede681715fba4b19bc11faf654cf3c8bb99e7903efc73e12d20acf82ad367d2b2fac0bc5c6c0531b722cc16b3aa85e5593cb85d4faf6adcfa46bc180f92acceb8d57021eaa55a92591ea1c524127d484cfd1f3ad858a0b1af06b8cbc4fc3e9d31395812a061cb101708b72ef57995652795865ba674a1611443f4f39811b1fca2e0c958ded26603952e7ab97934fa5675e7d998ef3cc0f35ced3fb0", 0x1000}, {&(0x7f0000002bc0)="812f7b9d8321dfbf81efb112a37267dfea33ff67df66dc9a87aac75255f90dc2aa2ecf1100f68e2aec739f912ca4f46b5739d987c5684f61b091a14bd5a16403e2eaaceeb5c42173b360952b29980247a8df6840a2e8b32a51bd9a4e6559e984a303bbce21d14c9ee64989be7c3a224e6e6876210fbca49ca38f68b14f14", 0x7e}], 0x2}, 0x0, 0x40800, 0x1, {0x0, r10}}, 0xffffff01) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @remote}, 0x0, 0x2, 0x1, 0x2}}, 0x80, &(0x7f0000000740)=[{&(0x7f00000000c0)="0917bc5bfa28206769d9", 0xa}, {&(0x7f00000002c0)="8d925e87d5ef2b0d339aeeea7c82d9f8507aa84b5ebbaf7c157333011baf665d344f04b8835b5cacd8fed4332e439c5e6ea8217d3376a123e43d0ebfa591760d964dbe81e20633b0937d3ff5174b216151fb2c07e33e6db51d7341231298dd9e3350f3058dbbb51f1f1b314c09db9535454fa7569eba1315c8e630fd44d5a45627085c550f2cb446944bdd4acf4d56a05e0306dc6c20c03577044c7b1d7b363f0825a58631210200a2335e8e17edeee19bb1a8c534a23b9a", 0xb8}, {&(0x7f0000000380)="63bd88cd5fdda56d90fbf073504f2be4a3ff002f8f4028f03a9015bdffc1bbc868c72ee03589c57e841d59319cb2a5f0659e5dcbf8f476f8315e0c921005f764f979a16a742c33436a593e256d63da220b7a59043dd6527dba00364a7900dfc05439ed2a03e68fef409c4ff7a93737298b6497f87b06e5b260918499c927de76e04841f08313ffa28e97210c0c360ad9c280f9b9d4b39927c6521e82f728fffe9fbe30", 0xa3}, {&(0x7f0000000540)="26cdce466e09ddfe80ec01ab3b1b7c3e3cf9da6f96a645b7a04cea80abd4064ed3d296b2201e55ad049f7c57407615c0533e95515ec0fcd6c83300ddf1bb6f6a777158e480f57f47d1eaf6356e92851206379496610fbab574b4436587e560d5e58b7d1917fbd81d6fa31fe04801fb1c4e2dacfc91da0aa660666cd091390a40e186d5ef240f45143c4707d34ab35fd81086a26298", 0x95}, {&(0x7f0000000480)="d9cf46a70b767d88e6ccea6e9dadc65201d765e610106791a4d9609e7cd4610770132095d494ad83ddb75ef820b17d21baafd85d6b073a850e4f439602cc5b5a498601d8c5be566ea670ff57d7e8b66db9f1292ebafb69441e08ba4af21c342c9e73b3bf6db146671120fcb57e2cb69216ea7b22972938463d722c8af6", 0x7d}, {&(0x7f0000000600)="328108b0119950cc43f47c36cc437e448cd37b2e1c0943af6f50060d53430392bcc4450dce4d0c637fd5219c850f537a15be4b4bfe530c6b967f5496513513f389f4fc8e120cc6d5050cc5504c802fd5", 0x50}, {&(0x7f0000000680)="1ffabd2bb07d3c29372d2dc3be4d6ce8f5849f290478a33dd8b1d86f5583ab36ba2732980e47bdf2f6af5a864960b76582098abc857d97b8c36498dd42dc68e73495ed122f31ac008da9384beff56494edb46fee0cff34d45011cc248ceb131320c463d4d573174773b6207239e92276073da0910003936d9dc79e7e004baf245ea4beb2cd67d7ce0ceae8eeadd2b36acb992f279c878861f9705f7f0e4fa9ed0dc3ab8799e5cb2132fff72d95526a24694d9a0fc8367e0e7b819f22567a", 0xbe}], 0x7, &(0x7f0000000d80)=[{0xa8, 0x113, 0x5, "6b5cba6d1cbc1ea01d4251fde727195f7a0d6b7e443fc6a300a68a4527401e7d375379b57c7b34cbe8323864c6c3a02e3393df8aa038aa8f4b02cfe07c5cf69138cf21d2416af4010bff8214ee4a5682dac85ec9c4286b99607d420ef59c98aeae378984882775979c0f809fa173eb2fa2573356ecd4158f9cc2bc122e19d31e4e52f720cd6f19f5c2f8baafc618888155bb921545dd"}, {0xb8, 0x13b, 0x4, "5acfa4b55c49066c82fb34ae81f1f6c1bb9d79a286a6f505d8d61c57d091562fd52146999952456cb9b03aef84389a7bdb00c0cc76e726ddced166ef22703ec2a1702e645043c442e37d19e7442bc78f71881f1e187a141048ddf96cdc7b95ab5dfffb46a67efc5de98603244ee49bd6b787e43b4a0c48da444e8c18801f3db2f10d0b12c786fba66cd40f4d3df4d813a46d1226a465efbcaebf7f6515e73bb2d1fa5b8ef7"}, {0xb8, 0x1d, 0x4, "d7927678fcdf5264aa7aabec28c4f5d4cf867b8102338fd535f2a8ff222b4c2fe5ffe0dc65a2ce82627a9902f43513b53fc82c45a64034e4e7f3454b40a3287a0ac97c19b405e07883e33e9b71f62f29120bd8f2ddeb734f3fb6c709459566e674004b7722f7393e6a5a9eb619f8bfb8c5eb1ce85178469adfefa505a02f5419264eeaca0dc0014b3838aaf25e5203359103267646a17c98b77a6256b7020abb33052f03"}, {0x58, 0x112, 0x3, "1b00da396910cc631e758ae645d733d6d8b8b03505df246bc4ac05b839c45cdcc16e2c015d78a7f0dde8b9fa9e996a62b8615e25adb43548a4b3e0715bd016f922fc87e4"}, {0x48, 0x109, 0x5, "bf591efe9179027937b03ca108668015d1e39d36771e87257aa4c9f7e23fa17a7150035164b43b985598d621dc9301b6ed68"}, {0xe8, 0x29, 0x10000, "1607541f33c938442855222f3d7620139e6deca37662dd96f714d5151c92edd3fb7ab75188a275025d8a14c22ae5696178ec53bb8a8fe839df0967573e79ec0810188d27dfe1dfe10c270cb26871fbc1334499f615ff7707486b33b164541d7651aae7daebd2ca2ca2ea83053976970538f3007ceea3a9a50fcaa78af0b2cb1eafd67130b05bb0aa65b564e244977fc7b80e72338c35c6ac9a53eb8ad38aa0b47e4c0030ce718bddf834a22b9d78b781af8e80f1d0adcdd34dc3b9c3294e553df275b8a7e5e43bb8d6572fda366ee2302076"}, {0x28, 0x10d, 0x2, "f58a2d20e7a05383d4ab4189e50e2020109e"}, {0xa0, 0x6, 0x4, "59a087114795a141a8e9f19f398ae9bbd68099937ecfe29775b307b2936a7ab394b17764bd978bb7a043447f19ee5fbce85bbe50c009bbb2c9d04a3ecd0aa5a89133c0076a290795aea8d2529b66f48a08616ce1f1416e211bc558555424882015f00e00f8b3b19ee9ad4f62732fb37ce7c1ef17f000c613a67bbdf3b2deb0b69ff12a39cc43bb2d6c1f"}, {0x18, 0x107, 0x7, '('}], 0x480}, 0x10) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000000)='*\xaf/$-^\x00') 13:30:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00'}) socket$inet6(0xa, 0x3, 0x3) r6 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r6, 0x4, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) recvfrom$inet6(r6, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) 13:30:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x4, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x26) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850002000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r10, 0x4, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) recvfrom$inet6(r10, &(0x7f0000000280)=""/12, 0xc, 0x41, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r8}) statx(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x800, 0x200, &(0x7f0000001b40)) fallocate(r4, 0x100000011, 0x82, 0x2811fdff) 13:30:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)='0', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.clone_children\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fbffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="038ea476b6fdbf704aca3e5f470a06708b8ae50a4bca3dd4afa0f9eecb734f016523e6bc32f0fef2b461635e5f10cc0469b073f4288a"], 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x3020}, 0x8, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) [ 567.820062][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.820370][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.821232][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.821523][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.828166][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.830406][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.830777][ T5107] Bluetooth: hci2: Malformed Event: 0x48 [ 567.831055][ T5107] Bluetooth: hci2: Malformed Event: 0x48 13:30:17 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x0, 0xfffffffffffffffb, 0x95, 0x5, @scatter={0x9, 0x0, &(0x7f00000017c0)=[{&(0x7f00000007c0)=""/183, 0xb7}, {&(0x7f00000001c0)=""/4, 0x4}, {&(0x7f0000001200)=""/184, 0xb8}, {&(0x7f00000012c0)=""/144, 0x90}, {&(0x7f0000001380)=""/141, 0x8d}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f0000001500)=""/193, 0xc1}, {&(0x7f0000001600)=""/211, 0xd3}, {&(0x7f0000001700)=""/132, 0x84}]}, &(0x7f0000001880)="73ef2d9a58f350f211f5b09ed64ce2161f0ea2b908d826039cf1cb4e9170147a4cb9e60ae256cc54e14d523167cec71bbeaa0869e9def57833aaa6ac2f0c81f86d18ac9b64a471d5deabbac2ee53cd81728aa174ca350c26b024e47d2ccc62b405c5fd0ccc7126e2b5900ce6e262ff8848a3495d2c3b204e9031bee040e6cc962947bd094b9b1062e0c845290c5440c6edc4138429", &(0x7f0000001940)=""/139, 0xfffffffc, 0x1, 0x1, &(0x7f0000000880)}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) (async) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) (async) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc00, &(0x7f0000002f80)=ANY=[@ANYRES8=r3, @ANYRES8, @ANYBLOB="e3c40bec70f87ce5874b4f4aad6444eae18f5fa1f3f5c7c390414deb2ba4522c147d1ac24de27ad627e89957e970a4b92c84a6f4740b9bc826d0eb5ce1a3960b3a84aa", @ANYRES16=r4, @ANYRESOCT, @ANYBLOB="4182058ea897b6cafa0821044349ebded3c18e5ecd459527e10e40b4733cd776d643ed21c0356360cada1ec27293fa661095f2ad901dde4d809b5688047ada7edb4d"], 0x0, 0x451, &(0x7f0000000900)="$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") (async) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc00, &(0x7f0000002f80)=ANY=[@ANYRES8=r3, @ANYRES8, @ANYBLOB="e3c40bec70f87ce5874b4f4aad6444eae18f5fa1f3f5c7c390414deb2ba4522c147d1ac24de27ad627e89957e970a4b92c84a6f4740b9bc826d0eb5ce1a3960b3a84aa", @ANYRES16=r4, @ANYRESOCT, @ANYBLOB="4182058ea897b6cafa0821044349ebded3c18e5ecd459527e10e40b4733cd776d643ed21c0356360cada1ec27293fa661095f2ad901dde4d809b5688047ada7edb4d"], 0x0, 0x451, &(0x7f0000000900)="$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") ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r4) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002d00), 0x2, 0x0) readahead(r5, 0xfffffffffffffffa, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) (async) r6 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) syz_io_uring_setup(0x27c2, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) fcntl$setstatus(r6, 0x4, 0x0) (async) fcntl$setstatus(r6, 0x4, 0x0) syz_io_uring_setup(0x5902, &(0x7f0000001a80)={0x0, 0xe33d, 0x4, 0x0, 0x182, 0x0, r6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000001b00)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1, &(0x7f0000003cc0)=[{0x10}, {0x10}, {0x10, 0x1, 0x7f}, {0x10, 0xff, 0x80}, {0x2a0, 0x102, 0x0, "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"}], 0x2e0}, 0x0, 0x4000000, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000002cc0)=@IORING_OP_SENDMSG={0x9, 0x20, 0x0, r0, 0x0, &(0x7f0000002c80)={&(0x7f0000001b40)=@pptp={0x18, 0x2, {0x3, @remote}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001bc0)="a17dfae804ec6d6457e3879bc66d2b4a6609f96594752cb7f769cfc525017df46fe9cfaa47c2559e101d4c56b91a64911a1d2d04ef55bac2ea98cb1ecd92f2a88ceede573e33e6e5ac20f5fa8df71af2f4028310264fd4c6f47fc016bff3bb1781c8f8132cca8965f33c3b4aecc9831ba9a6e8bf96d05c8937312278f69a40fd62ed9cdde302d0679350556ab4240dae064f0d961564919c91d99c9a4f3ad0734101bc1f7f26ca53dcec117658843ba807172797b3e936c9a135c1e3a0c74c8faa5ffcabb17622f41843173b797312454de2f888f03e65e3b65c9241a887d8104c421662684e516688158caf15ee6b5693f02e86721303ec430c277099fbeb9016e98fb670e44ef12cfc3c2b097de94a4b2da02eaeede0251835e7dedf7e9a85db51268759c32fb822b9eff1985cf202c74a7e429a745cad9161105e4c6ab83bddfc334d12920ec29b119c670f98e18418a1682a10243ec93b7974d648e02881c0bc1e41bb2fb9bda4e9f7f3c065a0eb2302c1652bd865ee0a64121af6a78c726f77275a49374426be4457d29dda176dcac4a1a2a3e10e9dd9b9330bfbc00bef1006d8553a5ec2bdd8b2272ccb0e1b115a0d98e5663c3016efed4ef13e9ead47fc48de155cc76e603986c1e1700978c2c8caab73c478c62eca6909dc8c3e1ea30223eea167c400f44183a22869899518c4009735970e836b2563071c60b494159c3962a99b20efe158d388679d13b43c8dcae754397b4f42a6f447fcc16709dc2be31e1880eb277fc4a7ffbe0050d9b3637177b9ab532cdd44096917bb10a2ae2e2416c681a850cd78b5615e20ec810d760b23e1ebe8edd63ea7c4d6caacfe8201138a6d177e8995acc3143b43732b8f8bba22b2b7e7e7b02774af1df53d590fd4f3ad08278177760b56bbcc345a38a68f9c7b17af03fa2fbf8a6324658f83a45ba81bdfd689c6babdceb4c00215b300f29316ffa40e25b63c98c8e62086259cd95220c5b0efa123522a373bbbc2ba57eee40774e5b850a6915bffb87bb007dbaf64a78e7594e05a7f1fd4bd009aed25f310ba0406f86191cdde1df16339fdd71a8120165c62615f5737d960a09b5d9b2cc4d11693d1ea91161ab6282feaa35e9b8a7598ca5c706786bd2fc070d4ad57be236b0f57e5cedddb56e8a845d86125f679d3e008fdbab4f3d0b87e062667359e5caa88d9859594daa026fb5a0c7d98f705c293c539d919d37ad3cd53b4f749b0a141385bf7a3a2ca94a1f4b9def906e0b1417b76e79f096a16654879e73f205a5236477c842f09d71cb50737ed9516a3c3e98ea9bdc695405cf272bc46139b46c4d22c041453023431a4fda12b9774bd10d5d12e5dccc9a0338c884cc072499e9ab74c9e16ddac8865452ee3473429cf153f50ac29df0feae92e9c93931dd29f50074a6f8331b913b22acf7e0c89fd2bcb65f563c8b53944f50be8007e4a57e4b26686538c78514da62918fe4ee35ae30ad92dde01322418d8fb2632a8ac6b2846fd3911918a3ad18f99bcff8f77af7badc5d2d357da0f617d7e5131dbf126268eaf6bee8b69e017faec18339a3c046f010545a9c866ee676207c30f0f480b62de59fc0f157c7f0d1a7794355d90222dcfbac22382766749c952a24592925c77586bedcfa2c4e312d32e21581b966d457019b8f0cd51a7be397bd5f4b8fa0c22c6a4d5769694043d0532bc1ebac914aed032eaaa8ea9ffc5496ce870ccba222edfc38db9150ef33e4f5081c6a5d0463d4ca3dfce158ce903433279881cedc4c64a2cee54a6589f9a4e0d942b1638797aba30ded4363eee88c8732ce4310c7c9142ca0a03887ff2d10cdc2b6f261a24a905781675f5afcb7c84e2e4dab9a6d13eeb7fbee62fa7c380179177d73a835cd0d0d573cef2eb095aa54d9a56ecb46bc036b2cccb35e9a7ed7e6fe18b2fb20ba746a50ccd4febc117f15b8db3903669c940189817945a7d091e8b37adb36de395d7762458807c023c3ddbe768e2b44e4699de12a8f16052be3271987ba7b888d64a3874eb8a57b7b4ca513447c05134c9eff9f23d85622c47e535d5e17250f111e4596a0f4faf677f10d2857115047ab6f0088de14d307494673d26c769d29bd46f5b3974591f790aa497ca6905c62b9973932063fd1f6405b84b69671e329087afd9d6ac1b3b99fb8cc0cadb3fb27e3e4de734f2273873202cc514577ba5c98d6714f968d0521f265e9528ece16fb9bf6052162d53a13831c1b2c52b0fe275e67d3c2be8c53f92acafb3240af50c22add71b45f7ffabffbc8574cba7e0eae037252b1695806e2d9df8666f60d68696be0ecdf89846a1386840095adc96ea1974a26ef69a4ab872550544bddf5a1e962a931187b5e3ba4e91d6f9da77e0912ffc0c6bb2698201c1cf3c84a3736ccdde1685b62600546a6eb2a1e384ce83c5c036cf35a2bba474ca8e4fa944e42a7db3d06be0697f8bcfbd81f6a407e20138314971b32c1058b4793ee60983b95ac54af33f5d2adb393d314c38c5f0e5ff730b9bb22c83eeb5a5dd9e808e3f22622a55562c854f6c411f789e2d49df85a453604e713791c39c27fdbc8d1536e0129ed4a850f4cd0f77c3916f77e05bcebd28ad056240202bba3ca57c633b3be119d3a8c0136c90d14165d9e0ba43df3b436e87ddddb6ef7b35ee34c72fb159fdb35c7c2202302f9e1473403a7924d6957bfa2f9c362542ed48111dbd4a25e41382682905f3615525410d3989e77c1bf762b6ef66ff07e079a0ec15f3df7150c72c4b5265aed836e7532aef403e1e0fd225787425bc918376eb16815f0e2e961504ec8e014e684d3615217de8198657f8520d138a468f39e9fc8e0cfa5cde0ce997507fca27835b1d71ab73acaf7f842a71e29b952bb448b432f0f1fc9e6c0cb137333dfb94a46a0950e1edc3d35670b273543c39b096959f1ca89f8871b3baf5891e0a5157ff19def310bb64fab3dd9fb2ad7244038969262ef0cd350741496094e8c1209982a31e4a1e425dc7cda25a14aa5b5899e919ab0dda6066a0841e1eedc1add4c412a817b3a80e608d4309d5a37de9e437fb99fff1349a9fcfa211b80535b990ee4c52968f8042de701051f3f5f74ea7411e491b64d3bae83d0b8710048563c78245fedf25a0a99a68aa1830b20c827790c46db75680c8e8a7ae7fe658bc3782f2b42ac917247ec269680a2d001e603070450297ef8777822dd766b116e938a79cce441ca44a20e3f43755ec7bc64c8b36daedde1f327aaf3053f2f1f750f9214b51b49d1ea1a393df233b9076f86a0c3037600e7e1a703c6c183b9a2f2624a71a1a16216fd92a952c7996bc2ebb677b04830f72936d4ea26e7d6c3765fca0b2a12e65a263603d05faf82748d4a084734d1c7059c428bdc3ec07ef0485690187dee8555acb85798eb07f0ac3714e0f1f0c55d5453fb1659c76c3231b7377263ad8040b10c282a3117f2a70cee0b23a1cd00f780cd334fca61aacf26ac79eb86214d1f08a803eb3752b1c46ca7f8b63417d71c034ce5967d84cc2a8cc8d2f2f84a8bf63822b96ba410c7d44fae188586da735a172db34e1c9e84d7c8d9529235491c56b44a428115eff49cfc968054f38ae7c48e509ba3eff5444ff8138cd2bfa646dc140080e72b9ce3f2618696c75b5b3cfc7a0b3a001b1c17638407d04fab8757d6e752ffb0389c3c3108da843b16b37530413af7bd3867339622d0cad868ffe60a1801d0619fe22f2a8de1a0192cb66eae39793555cdb7207a95f7c119b1818b726c13bb1ec91195cb96359c1a3b11e738872036b0eeb416b7594e17c9f661e2534c856fb155f505463d6c9e6bb29c3422b390190b8aa53c88b05b6a1d3d49e742dc32a1592c473bd06071422f7514b2d7dfd65e0a554f94a3a338b2d602753258973ddddbaf51c56974b497613668041be54b6c5358ae31e35492f9a1846bafacb30f31e1352d939417285e4d06572dbe0cf175f114e6a865ad34ecbccd27dac5c6e85b254a7aa6d74b28eba45bcbfd12517c1d0f619674d267fd4a0ef686add98dec431636a19cca4385fde356afd78145dfda77e316129752776e0ea4d397b70a95ecf5ec8bec926def35839bd69ec3ec0b397b6495214e3a02e1423dd1d1b87023936e83cfeae982057e61ecb5078c5a4dcacee58a954f6e9897d69becc3494f74b2d003b64d827a34f49f7a4e92e98c836a59d83ddbd8bc9d369985d5828e48f993e96b2a37a115fa53a1520f10fcef2ece8d87ecb63c18b7015a9d53aa1884982df6e55d4030dac819b4c6c7d296bc824427931b93f720bc36fb0ec6b8b5281d759d6b4b454ec16fc6ab7e85533069e65efc42dfecca308103d47e4376265600ecbd43d6ab050da5fb10c49433de12ac8ed8ba069523901e1be3fed7b225450ae7c120397ab4707072c0e979d0c507413a6fa4cb8965a39628232c72f68bcb9860e057d7a30f2dd2dc61998ca826179639ccfb30cbe4a5fac1f539d2b2b2c47ce26518589782d4d0ca4cad6ace4bb3aa33ae7aab237ee1525519f9349beeef5a0df36b21cbae29e2c3ae8a012d14743731fb37474c6053450d6d9f6048aaeb5cf4fa3bf76859ba6cb6535ff473bc078e5f61a09ba4cda8e7140532dd717d009a3d979f1da85c61b4d14c7c748c3138bb491cab0c14997ef2821026b92b2f1c1c33aa1c9851c163bf17f99742e97c454128f042a7d4059a3b7cf3e555c83f731b3f7b438ea05d3b82a078f9212b460ca41b320ce87a5e4dc07bfd9606fcdb1be0883e2a7f7019e8278f425bf2f3a770a16e306f621cdf577a21f73c991683d439226f8d485fa08df1e33e8a4a21038d419975d7004d50341a9f998964526f0e72bb84479208070d919f1db126f5143ed18c540b9d3aff701edfc0c34b445c3806b06a5017756704df45abb9c0c5e1bec9c1e1197dc91e2587f1688221c827aa513d2e7723d9ba5f98c8a9443e2424b624d8599f6d45925cabbee42521acf3df9aecd3218b7526d31748f0ca4a69dbcacb592312346d16e5098b6d293fcdcba5fb8b5cc2e88e9ece73820c5eb992a7a286661be7f8611e6e9a48adcf19d13265e92a842a7a58ea0fedeccef2f652b76e3198c757f9cac9144cdd4dcca349bfee2aaaf09f4d295516677542c5789da96d50081b49be6690d61f129e0904a81bc4f63ed98bb4b0de3f1e15908c9fc9707a2335754f7a02902181d65181f07077047a0edd4c72054af62f3b643dcd42651b9d5b658aecc5a82519759df5735c3a2f1692ac9d8651ab7ff2efc93a94004b9d62766525e98d190d2d02622eb05c818a2fba29c8bc7cf6e0f1f98af52a47dfbdd42e285f33088fa5118e028bf6e0f8a1a899e0b236e02a7326e85c5ef37d609e1349678e550a56892831323566295925c8cec444edd28709a8a8156e56444202d7f6c2941f58d1d3dbe1216ca7648e049770a21340422b8b14eda89242d5d8b0b55adb1fcf47f1c113f31fac74735341abd927d500562c7de58959c258d4826b2747460ca3e6a847a8879c0be097b9c5a10a24b3ab8fca4ffe18b9d0e270fd5cede681715fba4b19bc11faf654cf3c8bb99e7903efc73e12d20acf82ad367d2b2fac0bc5c6c0531b722cc16b3aa85e5593cb85d4faf6adcfa46bc180f92acceb8d57021eaa55a92591ea1c524127d484cfd1f3ad858a0b1af06b8cbc4fc3e9d31395812a061cb101708b72ef57995652795865ba674a1611443f4f39811b1fca2e0c958ded26603952e7ab97934fa5675e7d998ef3cc0f35ced3fb0", 0x1000}, {&(0x7f0000002bc0)="812f7b9d8321dfbf81efb112a37267dfea33ff67df66dc9a87aac75255f90dc2aa2ecf1100f68e2aec739f912ca4f46b5739d987c5684f61b091a14bd5a16403e2eaaceeb5c42173b360952b29980247a8df6840a2e8b32a51bd9a4e6559e984a303bbce21d14c9ee64989be7c3a224e6e6876210fbca49ca38f68b14f14", 0x7e}], 0x2}, 0x0, 0x40800, 0x1, {0x0, r10}}, 0xffffff01) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @remote}, 0x0, 0x2, 0x1, 0x2}}, 0x80, &(0x7f0000000740)=[{&(0x7f00000000c0)="0917bc5bfa28206769d9", 0xa}, {&(0x7f00000002c0)="8d925e87d5ef2b0d339aeeea7c82d9f8507aa84b5ebbaf7c157333011baf665d344f04b8835b5cacd8fed4332e439c5e6ea8217d3376a123e43d0ebfa591760d964dbe81e20633b0937d3ff5174b216151fb2c07e33e6db51d7341231298dd9e3350f3058dbbb51f1f1b314c09db9535454fa7569eba1315c8e630fd44d5a45627085c550f2cb446944bdd4acf4d56a05