open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={0x0, r6, 0x7}, 0x10) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x1b, 0x5, 0x550, 0x368, 0x230, 0xffffffff, 0x0, 0xf0, 0x480, 0x480, 0xffffffff, 0x480, 0x480, 0x5, &(0x7f0000000700), {[{{@ipv6={@dev={0xfe, 0x80, [], 0x27}, @local, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff000000, 0x7fffffff, 0xff, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {0xff}, {}, 0x89, 0x4, 0x1, 0x76}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@rand_addr="15627045f3c1c6f465020ffb6bcb873b", @ipv6=@ipv4={[], [], @multicast1}, @gre_key=0x6, @port=0x4e23}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x4, 0x40}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x81, 0x34, 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv6=@rand_addr="c2d80dd03185a87ae27be35726a8a7b6", @ipv6=@loopback, @port=0x4e23, @icmp_id=0x65}}}, {{@ipv6={@ipv4={[], [], @remote}, @rand_addr="3068f081fc27567a238a32cc05fb814b", [0xff000000, 0xff000000, 0xff000000, 0xffffffff], [0xff, 0xff, 0x0, 0xffffffff], 'bond0\x00', 'gre0\x00', {}, {}, 0x1, 0x3, 0x5, 0x14}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}, {0x100, 0x6, 0x0, [0x3ff, 0x6, 0x401, 0x6, 0x3, 0x54b, 0x7, 0x4, 0x6, 0x3, 0x58f7, 0x1000, 0x9, 0x5, 0x0, 0x7], 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x18, @ipv4=@multicast1, @ipv4=@loopback, @gre_key=0x3, @port=0x4e23}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x84, 0x6e, 0x1}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x20, @ipv4=@multicast2, @ipv6=@mcast2, @port=0x4e24, @port=0x4e24}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) getsockopt(r0, 0x3, 0x3, &(0x7f0000000000)=""/80, &(0x7f00000000c0)=0x50) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f00000003c0)) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000080)={0x3, "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"}) getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x41c1, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x501082, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) write$fb(r1, &(0x7f0000000000)="3407ac7a1aa7e08f83c74f9ba522077b12e308c4c3c0d832c972987edcb5c73871b453", 0x23) 07:25:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0x0, 0x401, 0x4, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990a2c, 0x9, [], @p_u16=&(0x7f0000000080)=0x1000}}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, {0x7, 0x7ff, 0x0, 0x3}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r1, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$nfc_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x27, 0x1, 0x2, 0x2}, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x210000, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @loopback, 0x6}, 0x1c) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) fsetxattr$security_ima(r2, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@v1={0x2, "4798b09abea07d40634d5dadc4d3bac623a3c128"}, 0x15, 0x1) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x40, 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000240)) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'filter\x00', 0x0, 0x4, 0x70, [], 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f00000000c0)=""/112}, &(0x7f00000001c0)=0x78) 07:25:31 executing program 5: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r1 = socket(0x10, 0x3, 0x0) close(r1) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={r4, 0x1000, "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"}, &(0x7f00000000c0)=0x1008) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r6, 0x80605414, &(0x7f0000000000)) 07:25:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x101000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000140)={0xfffffffffffffffd}) getdents(r1, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfe, 0x1, 0x0, 0x3, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x0, 0x7e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:31 executing program 1: getdents(0xffffffffffffffff, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) r0 = getpid() r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$setopts(0x4200, r2, 0x49ba, 0x80040) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x2d0000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x3, 0xebdc, 0x1ff}}, 0x30) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x400, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, r4, 0x5}) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f00000000c0)=0x2, 0x4) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r5, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x9, 0x5, 0x2, 0x7fff}, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000080), 0x6) 07:25:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x24}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x109) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r5 = fcntl$dupfd(r4, 0x406, r1) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x800, 0x0) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x1, 0x0) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cachefiles\x00', 0x200c00, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="c8000000", @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf25030000000c00040000fcffffffffffff0c00040000080000000000002c00078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0c00020003000000000000004c00078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100f2919ac1e37b49973b399ab119d9a6c34864a45571b41230d913be8b198247b5d730c22e0905ec4805a97767332dfdda0e378df3c613ddfbfd8819ac30213ad6c17a38301f583400b099ca918170334286354816a13d6f96e0e77cab80a0bbcf7eadd25c136aa3c6732f46515d8ba868e706fa2c444ef82c3c79b0bd60c556d36e5f7287f0b41a297ffda2882365d5a4", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="0c00020008000000000000000c0006000100000000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x40) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0xffffffc1, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4}, 0xc) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x1ca4, 0x7, 0x1, 0xe7fe, 0x4, 0x401}) 07:25:33 executing program 5: write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x1}, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x82, 0x0) recvfrom$l2tp(r1, &(0x7f00000000c0)=""/113, 0x71, 0x2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) close(r0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r3, 0x1000, 0x10, 0x8, 0x38}, &(0x7f0000000040)=0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r6, 0xc040564b, &(0x7f0000000140)={0x50, 0x0, 0x2018, 0xc5c, 0xfff, {0x4, 0x8}, 0x1}) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@llc={0x1a, 0x103, 0xba, 0x6, 0xff, 0xfc, @random="51938f3a8a3b"}, {&(0x7f00000000c0)=""/28, 0x1c}, &(0x7f0000000100), 0x3}, 0xa0) 07:25:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x3, "a4263c", 0x1, 0x56}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x26}, 0x10) 07:25:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffff00000032000000fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480002006563622863697068657200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d0014006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000d4490000000000000000000000000000000008000000000000000200"/318], 0x188}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000003c0)='nr0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) close(r3) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) accept4$phonet_pipe(r6, &(0x7f0000000500), &(0x7f0000000540)=0x10, 0x800) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="02ab76b9d72700007e9517502209fad8e9798bb923dac41d14c026ce8377447034dcf80b27106ca82e0b9c4abe8a344b01315d670447ae5b236e359ba05151167c75782b971307926be2f0beb403850b601ac290925560ecb2138f1701971d93e9cac0ded05d36f71425960b3e67b4d3c051fdd2d1cc65f648d0209163eef586e2d60e2ee1856421e9159e8ac3649b6d192e55c334bfc43f98ac600af79ef6affeae3e13645859b26a09b09bf317ce0138ad08c30933ff34e33e304dee89295b873e9c0a5ccf14c6049ffe6e8800"/221, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f00000001c0)=0x20) llistxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=""/188, 0xbc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x4e24, @multicast1}}, 0xcb, 0xb3a, 0x80, 0xffff0000, 0x2, 0x9, 0x7f}, &(0x7f0000000000)=0x9c) recvfrom$packet(0xffffffffffffffff, &(0x7f00000000c0)=""/174, 0xae, 0x10022, 0x0, 0x0) [ 601.986052] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.5'. [ 602.023320] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.5'. 07:25:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x8, 0xffffffffffffffff, 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x7}]}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', r4}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x3, &(0x7f0000000040)=0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:33 executing program 5: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x81, 0x81, 0xc0, 0x7f, 0x5, 0x87, 0x5, 0x8, 0xf8, 0xde, 0x0, 0x7, 0x1}, 0xe) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x6, 0x7, 0x4, 0x410000, 0xfffffffe, {0x0, 0x2710}, {0x1, 0x8, 0xfa, 0x7f, 0x7, 0x9, "87784fca"}, 0x7ff, 0x2, @userptr=0x2, 0x4, 0x0, 0xffffffffffffffff}) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x2000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000004008000, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x4) sendto$phonet(r1, &(0x7f00000000c0)="70057f64946afbed4ca3c4adfc99aca154daac8de3c2edf7f8e34279add173ba897017da8f241beea18d10dc99c0063a84e9eed52169764cb1e3ee8c2e5cb992d04b0c9b68869a59e6c16ca429dcbd47008c32c71805327da1c69790dee4ad36e114af69c8bd226e01", 0x69, 0x0, &(0x7f0000000140)={0x23, 0x5, 0x1, 0x6}, 0x10) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x210102, 0x0) ioctl$FBIOGET_FSCREENINFO(r3, 0x4602, &(0x7f0000000200)) 07:25:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$poke(0x5, r1, &(0x7f0000000000), 0x8) 07:25:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x3, 0x80) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) fstatfs(r0, &(0x7f0000000000)=""/95) 07:25:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x2, {{0x20, 0x5, 0x1}, 0x5}}, 0x18) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x9d0000, 0x1, 0x3, r0, 0x0, &(0x7f00000000c0)={0x9b0951, 0xffffff28, [], @string=&(0x7f0000000040)=0x9}}) write$P9_RREAD(r2, &(0x7f00000001c0)={0x60, 0x75, 0x1, {0x55, "e93f361228b7c73a5ba27244cd8b169f1b66cb09cc36b9ad1ba7d86f59a4953baf6b3f62697ff9b4f74cc9ec3fe072961c2441e989412284198b5fa4b9c8ab1b38ce08eb1ef71468c9286f7f11eb87f291bee74920"}}, 0x60) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000100)={0x0, 0x9, 0x8, [], &(0x7f00000000c0)=0x1f}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000140)={0x200, {0x200, 0x5, 0xfffffffc, 0x80, 0xffffffff, 0x1}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240), &(0x7f00000001c0)=0x2) 07:25:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5}) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x9, 0x6, 0x4d6, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f00000000c0)={r7}) dup2(r4, r1) 07:25:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x7}]}}}]}, 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x7}]}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r8 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f00000002c0)={r9}) r10 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) dup(r10) dup2(r8, r1) 07:25:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = socket(0x10, 0x3, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0xadd5, @mcast2, 0x7}}, [0x1, 0x4, 0x401, 0xfffffffffffffff7, 0x0, 0x945c, 0x0, 0x7, 0x7, 0x1, 0x3, 0x2854, 0x6, 0x80000000, 0x66f]}, &(0x7f0000000000)=0x100) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0xce20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = open(&(0x7f0000000080)='./file0\x00', 0x103001, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000140)=""/246, &(0x7f00000000c0)=0xf6) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000002c0)={r6}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000300)=0x4) dup2(r5, r1) 07:25:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000004, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 07:25:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000300)={0xa9, [[0x100, 0x7, 0x45, 0x5, 0x5, 0x8, 0xff, 0xf3c], [0x80, 0x40, 0xffffffff, 0x6f6, 0x8, 0x7, 0x7, 0x85], [0x3, 0x101, 0x6, 0x80, 0x6, 0x2, 0x5, 0x2]], [], [{0x1, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x80000001, 0x80, 0x0, 0x1}, {0x4, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x3}, {0x5, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x1}, {0xffffffff, 0x3e52, 0x0, 0x1}, {0x80000001, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x81, 0xfffff801, 0x1, 0x0, 0x1}, {0x56, 0x5, 0x0, 0x0, 0x1, 0x1}, {0x1000, 0x7, 0x0, 0x1, 0x1}, {0x3, 0x7ff, 0x0, 0x0, 0x1, 0x1}], [], 0x3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x6}, 0x16, 0x7) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r4}) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f00000002c0)={r7}) dup2(r6, r1) 07:25:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880100001000ffff000000000000000000000000ff01000000000000000000000000000100"/52, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000004d0014006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000002000000"], 0x188}}, 0x0) dup2(r6, r1) [ 603.896051] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. 07:25:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x8, 0x0, 0x2}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}}, 0x4000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000002c0)={r6}) dup2(r5, r1) 07:25:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r7 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$EVIOCGVERSION(r7, 0x80044501, &(0x7f0000000340)=""/240) r8 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f0000000140)=""/66, &(0x7f00000001c0)=0x42) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5}) dup2(r4, r1) 07:25:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000001c0)=""/218, &(0x7f0000000000)=0xda) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$getsig(0x4202, r2, 0x5, &(0x7f00000000c0)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x398, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@broadcast}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {0x0, 0xffffffff}, 0x1, 0x0, 0xa}, [@algo_auth={0x8a, 0x1, {{'hmac(sha1-generic)\x00'}, 0x210, "874d65b77af82923861d0753ea8a4a69f5c10f9440734b8cbe3b88e12025c2153ce56bf3a0dd1461003f86eb3257567cae390bbd80a333166cba36bfe56b159d8575"}}, @migrate={0x9c, 0x11, [{@in=@loopback, @in6=@dev={0xfe, 0x80, [], 0x2e}, @in=@rand_addr=0x6, @in6=@local, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0xa}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr="601c86fb9f2698c1cbfb5726b1a4183e", @in6=@remote, @in6=@loopback, 0xff, 0x2, 0x0, 0x34ff, 0x2, 0x2}]}, @migrate={0x180, 0x11, [{@in=@broadcast, @in6=@loopback, @in6=@dev={0xfe, 0x80, [], 0x35}, @in6=@mcast1, 0x32, 0x1, 0x0, 0x3502, 0x2, 0x2}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@loopback, @in6=@loopback, @in6=@loopback, 0x33, 0x3, 0x0, 0x3502, 0x2}, {@in6=@dev={0xfe, 0x80, [], 0x3d}, @in=@loopback, @in6=@mcast2, @in6=@mcast1, 0x32, 0x2, 0x0, 0x34ff, 0x2, 0xa}, {@in6=@rand_addr="6c6a4a05096100e5625ccae8ee98a8ae", @in6=@loopback, @in=@loopback, @in=@remote, 0x6c, 0x3, 0x0, 0x3506, 0xa, 0xa}, {@in=@loopback, @in6=@local, @in=@remote, @in=@loopback, 0x3c, 0x4, 0x0, 0x3502, 0xa, 0x2}]}]}, 0x398}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="88010000100013070000000000000000ff7fffff000000000000000000000000ff01000000000000000000000100000000770400000000000000080000000000fb0f27b6c530af93f4816cdc05ce6391a8d84d2e01a5280e58768cbdcbe549457f34b593548d56be2bbc076739c2e9ee149f6e7239eb817415d0018d967e3073c14ec4f520551c6bc39bd22dfdb0df987cf3332fa4cfa842f9390e1b8c0bfae64b48d89a4e82d8a66ae9bf20d463", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000004d0014006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000002000000"], 0x188}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0x1e}, {}, {0x0, 0x4}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000440)="adb79b2aec18f6728a7919911962f15d82c1eb81855be6309953ee92679b314a460ad5399d26d3747769bddd67b895c0d933d675a72443f79b6b181f880ba373be7f0621107c64bf3f50bd582726df012def33ad0fed3c1f55ddc324af0b9d0b7180372d222f547ba11546429ebd001cf7f8922bfbf7947176458c378ed36930cf557d445fa5c3a04c6b51cc387d68ea49ef04d306fd73c4c3a4f4631099f52a5265b37520e304d3c15e66", 0xab}, {&(0x7f0000000500)="70404517fee4eaf1258c7567191f6545da17192b629d18165b48480b6d681df13ac40330ab2fc11b59acf6544056c5db5838ef6ab745a79698ac4337ad70517c192a395630aa73c14c2dcc8660e12c278f26efff2ddd8b3ba44e62da43b9bf0a98d3cdcf780fd9af88f0b435410dcf2c6b64fadac495b53f6e9dcb009f5fe294fb2344dfd4cd09807cb42775cc8c1e78a278ec770bc7bfd1b7fa3d51e8450b4ed847ddbf271396e62b175bca416a8433de7843e50ba81ea5b985", 0xba}], 0x2, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r1]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r0, r1, r4, r5, r6]}}], 0x78, 0x40000}, 0x40090) 07:25:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5}) [ 604.222852] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.5'. [ 604.254204] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.5'. 07:25:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x50, 0xd, 0x6, 0x3, 0x0, 0x0, {0x3}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40400c2}, 0x400c887) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$UHID_CREATE(r2, &(0x7f0000001400)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000400)=""/4096, 0x1000, 0x7c49, 0x3f, 0x1, 0x7f, 0x3}}, 0x120) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x1}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x401}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) fcntl$getownex(r5, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$cont(0x20, r6, 0x5, 0x5) 07:25:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) arch_prctl$ARCH_GET_CPUID(0x1011) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080), 0x4) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000140)={0x30000, 0x6, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9f0901, 0x1, [], @value64=0xfffffffffffffffc}}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000180)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r5}) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f00000002c0)={r7}) dup2(r6, r1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000030301020000000000000000020000030c00020000000000000000090c0002000000005206bc18020800034000000000080000000000000508000340919292260c000200fffffffc0000007f"], 0x50}}, 0x4044090) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @local}, 0x0, 0x32}, @in6=@dev, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r9, 0x801c581f, &(0x7f00000001c0)={0x10a, 0xff, 0x10001, 0xfff, 0x1}) 07:25:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = accept$netrom(r1, &(0x7f0000000000)={{0x3, @netrom}, [@bcast, @default, @null, @null, @rose, @bcast, @rose]}, &(0x7f00000000c0)=0x48) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$TCFLSH(r3, 0x540b, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5}) dup2(r4, r1) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000080)={0x0, 0x7, 0x4001}) 07:25:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0xa800, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f00000002c0)="1975b710bdf61e81b4c8b057a5", 0xae, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x218, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000080)='user\x00', &(0x7f00000000c0)=@builtin='builtin_trusted\x00') ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$inet6_MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e22, 0x9, @mcast1, 0x7ff}, {0xa, 0x4e21, 0x10000, @mcast2, 0x6}, 0x3, [0x1, 0x80000000, 0x1, 0x80, 0x0, 0x40, 0x1, 0x79]}, 0x5c) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r5}) r7 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f00000002c0)={r8}) dup2(r7, r1) 07:25:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000240)=[{}], 0x1, 0x0) clone(0x82a047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() r2 = getpid() r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f00000001c0)={0x0, 0x73, "624076745fbcc7803345d4618ccab2cb455e03551d75ca432e2c426b3f1ce050b3e96f21725022ef9cb386dee236c8024d410f8c96f2f90ef4a6f7f563f2bd73009a60a7dea803593f91075a67735fade6873e2ca3cba088291a167c2ebcc1671e82114cc18da88be4a9d07684faa5ac32df74"}) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000040)={0x2, 0x4e23}, 0xff22) 07:25:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5}) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r6, 0x4144, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) dup2(r6, r7) r8 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x6, 0x400002) ioctl(r8, 0x3, &(0x7f0000000140)="1a1044dd301d1f56151c730bf3d57d1237fe612abd63ee0a04031132dfad906f056fd07b0b87b40bf1824a19c0b9935d02bd9476280440beb978b1335083dda5ffaf45b6b7964ab39f982d6b1d73701d2fb2aab6cb8936f0de5791895f73220016d502af5ae436d63658aa7c90c422ecfe671ba1c205ccc7beba50e563fe799d15f690a02d14f932b30334") r9 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4005}, 0x20000040) 07:25:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x7f, 0xa8d4, 0x20009, 0x7, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r6}) dup2(r4, r1) 07:25:37 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa9d4, 0x9, 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)={r2}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) sysfs$3(0x3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000002c0)={r4}) dup2(r3, r0) 07:25:37 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x3, 0x20000) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x20, &(0x7f0000000180)=0x1) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r4}) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r7, 0xc058534b, &(0x7f0000000200)={0x100, 0x3, 0xeb5, 0x1, 0x8, 0x8}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000002c0)={r6}) sendfile(r2, r5, &(0x7f0000000080)=0xf228, 0xfff9) dup2(r5, r2) 07:25:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110b}) 07:25:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 07:25:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x80000) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xa0, 0x453, 0x200, 0x70bd25, 0x25dfdbff, "53113cabeaabb04ee1a772f462bb5f7bc3d8a3ff85d73f39d9297ee4d2eed28406db28a331b979a7e8c143ebf1de4658c25604ca9c1914f4c4f8f01870cd31b8b4cbf2080187dd9bd76056a008b96a1432ff70d8142238503b72429afbeed6ca4f25cb7de42d8d24133e7d6cd530b50bd8f69807104a710e705717dcdfa42d38f5ead4a01e91286600008c1cb2d081af", ["", ""]}, 0xa0}}, 0x1) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:38 executing program 5: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x1, 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = accept(r2, &(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000004c0)=0x80) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001800)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="007000ffdbdf25030000000800010000000000080001c67900000008cd000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002500)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000826bd7000fddbdf25020000000800909e063171330a38779aae318449ce02000221000000000200020000000800020002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000851}, 0x4048000) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0c000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c1b0000", @ANYRES16=r4, @ANYBLOB="00022cbd7000fbdbdf250300000008000200020000000800020002000000080001000200000008000100000000000800010001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8050}, 0x0) 07:25:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1_to_bond\x00', 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x1, 0xb, 0x0, 'queue1\x00', 0x1}) sendto$inet(r0, 0x0, 0x0, 0x1, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x420000, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x9) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @local}, 0x108, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x2, 0x3f}) 07:25:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x102) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x77359400}}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f00000000c0)={0x6, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendto$inet(r3, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 07:25:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000000)={0x2, 0x4, 0x4, 0x38002, 0x6, {0x77359400}, {0x2, 0x1, 0x1f, 0x3, 0x20, 0x81, "7f6ab90d"}, 0x0, 0x4, @userptr=0x401, 0x81, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_GETFMTS(r3, 0x8004500b, &(0x7f00000000c0)=0xd29) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f00000003c0)={'macsec0\x00', {0x2, 0x4e22, @empty}}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000280)={0x0, r5, 0x800000000000000, 0x101, 0x92a7, 0xe7f}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={{r6, r7/1000+10000}, {0x0, 0x2710}}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:39 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x6c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xa}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x6c}}, 0x10) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000001340)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000001440)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) sendmsg$netlink(r1, &(0x7f0000001580)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001300)=[{&(0x7f00000000c0)={0x13c, 0x3a, 0x400, 0x70bd28, 0x25dfdbfe, "", [@generic="dd82465184ccaed2b2e946519a427a9b1c5b00297c16e7ee8afa2510f7b01d23f9ca6e41a6dd5e64f86678288efeed89088fa8fc6e93c9a94035009d137c7bf306c743bdaa90669f54f0a6b20dc26f5d04976044630ab19ed728df1b8b0f67a830ffdd80165f9156ee54f64f1d313cee0c3faf311665da00829929d236d958ec0a6f68ff8552056c0c84c155e0951b162bc10e9aa63bda297a77fb55efce36fb27291f6049478f421d6d767be924a594f6467371e40b33c9d26f4df369a860703a13b40be4ffba48155db2c2b66ba5733dfa9a4ea14c23b3be8c3e9b4083918bb14d500fe7733ba729", @typed={0x8, 0x5a, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x3fff, 0x0, 0x0, @ipv4=@empty}, @typed={0x2f, 0x5f, 0x0, 0x0, @binary="3cd6c471b269d541952098730f64980e6496588dbaac985c0c49720ad92f9db222a24ca51766f1c7305e33"}]}, 0x13c}, {&(0x7f0000000200)={0x103c, 0x3e, 0x0, 0x70bd2d, 0x25dfdbfe, "", [@generic="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", @generic="66eaa9630c04e3a54be12d4a4142a9de", @typed={0x8, 0x85, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x14, 0x6d, 0x0, 0x1, [@typed={0x8, 0x50, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x19, 0x0, 0x0, @u32=0x100}]}]}, 0x103c}, {&(0x7f0000001240)={0x10, 0x2b, 0x200, 0x70bd2c, 0x25dfdbfb}, 0x10}, {&(0x7f0000001280)={0x5c, 0x29, 0x20, 0x70bd2a, 0x25dfdbfe, "", [@generic="f2a19bcb3d7e0d56b1efcee4d44c63da9437688982870cfc2f108671127f203b874c9ca802451a3f540ab911758bbaedbebc843f1a7d1fe7608604d981a48ac1b3f08dfd4d1ff0dd7de9"]}, 0x5c}], 0x4, &(0x7f0000001540)=[@cred={{0x1c, 0x1, 0x2, {r3, r7, r8}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x4048000}, 0xc4) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000015c0), &(0x7f0000001600)=0x4) getdents(r9, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}, 0xfffffffffffffcad) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={r3, 0xb, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f00000001c0)={0x7, 0x0, 'client1\x00', 0x4, "63b7c5cc9edd31cf", "6300262c4e63752e7dd42eca96a1944625cacbf4e1b5d7d487f9b64d830e722c", 0x8000, 0x3f}) r5 = syz_open_procfs(r2, &(0x7f0000000000)='net/rfcomm\x00') ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{}, {}, {}, {}]}) 07:25:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e23, 0xfffffffb, @empty, 0x2d4}, {0xa, 0x4e22, 0x0, @remote, 0x1}, 0x4, [0x400, 0xffffffff, 0x1b43d63, 0x10, 0x3ff, 0x7, 0x6, 0x5]}, 0x5c) 07:25:39 executing program 5: ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000280)={0x180, @time={0x100, 0x4}, 0x9, {}, 0x3, 0x2, 0x3}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000001c0)={0x101, 0x3, &(0x7f0000000040)=[0x1, 0x4, 0x100], &(0x7f00000000c0)=[0x9], &(0x7f0000000100)=[0x3, 0x9, 0x42, 0x9474, 0x80000001, 0x7c, 0x3, 0x8, 0xfffffff9, 0x6], &(0x7f0000000140)=[0x80000001, 0x38b], 0x0, 0x2}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2065109}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x9, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}]}, 0x2c}}, 0x40880) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000003c0)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x5, 0x40, 0x51, 0x101}]}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000002c0), &(0x7f0000000340)=0x14) sendto$inet(r3, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) 07:25:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) 07:25:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x2, 0x0, 0x1, 'queue0\x00', 0xfff}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/4096, &(0x7f00000001c0)=0x1000) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRESDEC=r1, @ANYRES16=r2, @ANYBLOB="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"], 0x4}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='netdevsim0\x00', 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000000c0)) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x7, {0x2, 0x8001, 0x1, 0x0, 0x3, 0x401}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) 07:25:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'wg0\x00', {}, 0x1}) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) read$fb(r1, &(0x7f00000001c0)=""/206, 0xce) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000000c0)={0x80, 0x3, 0x1}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x4, 0x4, 0x2, 0x8001, 0x6, "ede9b1a510e10d1e9a5a36cde2c0b659724a1d", 0xfffffff8, 0x3}) 07:25:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) r4 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000240)='./bus\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYRESOCT=r4, @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="040005000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYBLOB, @ANYRES32=0x0], 0xf, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x180080, &(0x7f0000000440)=ANY=[@ANYBLOB="6662cd", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB="2c616c6c6f775f6f746865722c626c6b73697a653d3078303030303030303030303030313230302c626c6b73697a653d307830303030bdab349f30303030316330302c61707072616973655f747970653d696d617369672c66736e616d653d6664696e666f002c00fbe819b620d3142f7500b4b52eb2f824d23bad44305d9f418a656d7b4b3ee0f788ec007f93f0a1c8b692b32896c5d8604079953f5d6e32d0361a2aa0d77e54a5a9bcf6b38364d0338bb4b4e58cdec250c5ba013fca3a0279465b1b910f82f2"]) 07:25:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioprio_set$pid(0x3, r4, 0xffffffffffffffc1) sched_getscheduler(r3) 07:25:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x81000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x20}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') socket(0x10, 0x1, 0x10000) getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000080)=0x9, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="88010000100000020000000000000000fe880000000000000000000000000101ff010000000000000000000000000001000005c40000ffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x188}}, 0x11) ioctl$void(r1, 0x5450) 07:25:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x6, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = socket(0x10, 0x3, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000000c0)={r5, 0x53, "b4cebe4529926467879abc786fe324003a7ea74c43d7206dd6ac9e76d0236cbe26e61644c24e3e3d31739b6c2ec7af44a37b214bcd6d290213a1fa189b225999c696b769ab6bdf85b7a1758a2adae67722b3dd"}, &(0x7f0000000140)=0x5b) getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) 07:25:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000000)={0x1c92, 0x3a6d, 0x2}, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='geneve0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'lo\x00', 0x400}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x40800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='macvlan1\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r2, 0x711, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r2, 0x114, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c000}, 0x840) 07:25:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0xfff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@ng={0x4, 0x12, "6ffa5bd99931695f8bb5c8adcff6"}, 0x10, 0x2) sendto$inet(r0, 0x0, 0xffffffffffffff37, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') setxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'user.', 'security.evm\x00'}, &(0x7f00000002c0)='batadv\x00', 0x7, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x4) [ 609.092550] audit: type=1400 audit(1585898740.578:107): avc: denied { setattr } for pid=19533 comm="syz-executor.5" name="DCCP" dev="sockfs" ino=80376 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 07:25:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x1, 0x1d25b7ea9b86eb51, 0x20, 0x8, "cb32220eb0641ae8975980df3ffe995458736d445fd3f6244c2cffca8e215352c2072c827559d13a6d694b25655e3391f3abdaca709572a3f4c5777fd1ee96", 0x31}, 0x60) getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:40 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x10001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3f, 0x4, 0x0, 0x0, 0x41c1, 0x84644, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3f}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r1, &(0x7f0000000000)=""/46, 0x2e) 07:25:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x7ff}], 0x1c) 07:25:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffefd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_KEEPCAPS(0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000001c0)) r1 = dup(r0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 07:25:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x4) 07:25:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000000)={{0x8}, {0x6, 0x8}, 0x20, 0x7, 0x8}) 07:25:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)={0x8, 0xab75d34ee92498f8, 0xa4c3, 0x8, 0x0, 0x479b, 0xffff}) getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) read$snddsp(r1, &(0x7f00000000c0)=""/123, 0x7b) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'veth0_macvtap\x00', {'veth1_to_team\x00'}, 0x3}) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000140)) connect$caif(r2, &(0x7f00000001c0)=@dbg={0x25, 0x5, 0x9}, 0x18) 07:25:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={0x0, 0x4}, 0x4800, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r2, 0xb9) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x1) pwritev(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="004000aa4a2eb748f23b020000b5a73003e142a5c383844061c2e437c2d0576f23fdecf6219a9b6733efdf6e761d5ca242d4e5c266d764547787e3b5115a390a3351806210f474e8acce70385db1113e087850e8a5ef9642f6bc51ae08811bb81e1ba8f7e21ea25551614de6b940a4d51eab1eff6d05626157907d227f686057738125222f4f801b924abfb4d48924f7ecbd0c72d22bdc12d36e72f1868354087a8630283a07d35fb69643bf335901c938955a11a87908ec9b71a5"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) recvmmsg(r3, &(0x7f00000018c0), 0x4000000000002ed, 0x0, 0x0) close(r3) accept4(r2, 0x0, 0x0, 0x0) close(r3) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x0, 0x1, {0xffffffffffffffff}, {0xee01}, 0x28, 0xae}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newsa={0x200, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x4d2, 0x32}, @in6=@dev={0xfe, 0x80, [], 0x13}, {0x4}, {}, {}, 0x1, 0x0, 0xa}, [@user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x0, 0x2}}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@empty, 0x4e23, 0x4132, 0x4e23, 0xffff, 0x2, 0x0, 0x80, 0xc, 0x0, r5}, {@in6=@loopback, 0x4d4, 0x6c}, @in6=@loopback, {0x80, 0x3f, 0x8, 0x80, 0x1, 0x211, 0xc732, 0x3ff0000000000000}, {0xfff, 0x101, 0xe5, 0x101}, {0x7fffffff, 0x1, 0x7}, 0x70bd25, 0x3503, 0xa, 0x4, 0x3, 0x27}}]}, 0x200}, 0x1, 0x0, 0x0, 0x4}, 0x80) dup3(r1, 0xffffffffffffffff, 0x80000) 07:25:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = accept(r2, &(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000004c0)=0x80) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001800)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="007000ffdbdf25030000000800010000000000080001c67900000008cd000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002500)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000826bd7000fddbdf25020000000800909e063171330a38779aae318449ce02000221000000000200020000000800020002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000851}, 0x4048000) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0c000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c1b0000", @ANYRES16=r4, @ANYBLOB="00022cbd7000fbdbdf250300000008000200020000000800020002000000080001000200000008000100000000000800010001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8050}, 0x0) 07:25:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = accept(r2, &(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000004c0)=0x80) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001800)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="007000ffdbdf25030000000800010000000000080001c67900000008cd000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002500)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000826bd7000fddbdf25020000000800909e063171330a38779aae318449ce02000221000000000200020000000800020002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000851}, 0x4048000) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0c000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c1b0000", @ANYRES16=r4, @ANYBLOB="00022cbd7000fbdbdf250300000008000200020000000800020002000000080001000200000008000100000000000800010001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8050}, 0x0) 07:25:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@ipv4={[0xfffffff0], [], @loopback}, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x21, 0xe, 0x4, 0x400000, 0xffff, {}, {0x0, 0x1, 0x40, 0x40, 0x3, 0x34, "b8a77dfe"}, 0x4, 0x4, @userptr=0x1f, 0xc77, 0x0, r1}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@local, @multicast1, 0x0, 0xa, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @remote]}, 0x38) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 07:25:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0x0, 0x401, 0x4, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990a2c, 0x9, [], @p_u16=&(0x7f0000000080)=0x1000}}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, {0x7, 0x7ff, 0x0, 0x3}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r1, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000000)=0x9, 0x4) 07:25:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0x0, 0x401, 0x4, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990a2c, 0x9, [], @p_u16=&(0x7f0000000080)=0x1000}}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, {0x7, 0x7ff, 0x0, 0x3}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r1, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0x0, 0x401, 0x4, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990a2c, 0x9, [], @p_u16=&(0x7f0000000080)=0x1000}}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, {0x7, 0x7ff, 0x0, 0x3}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r1, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xf000, &(0x7f0000000100), 0x0, 0xffffffffffffffff, 0x4}) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f00000001c0)) r4 = open(&(0x7f0000000300)='./file0\x00', 0x5fc883, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000002c0)={0x3, 0x400000, {r5}, {r7}, 0x7, 0x800}) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x20, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=unix,cachetag=lo\x00,aname=lo\x00,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB="2c63616368657461673d2c726f6f74636f6e74657874752c666f776e65723c89c97b347c2ce3ef89a9a06c466295a370f054b18f2072119ad74173074672d8515455f19260e164a4260d34da1c61be43e66a6241b6f45b8624ea5585d4bae8fbffb067fc7bb12f247c5456ce77f578ca0abd688f6555e57450bf8157985933c2fee60c9eaf", @ANYRESDEC=r8, @ANYBLOB=',appraise_type=imasig,smackfstransmute=@ppp0,measure,obj_role=,smackfsroot=lo\x00,\x00']) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000000)) 07:25:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x1, 0x20, 0xd, 0x0, 0x3, 0x10, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffc1, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x8110, 0x80000001, 0x4800, 0x4, 0x1, 0x6, 0x3}, r0, 0xe, r1, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r2, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0) [ 611.075978] audit: type=1804 audit(1585898742.558:108): pid=19614 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir669426553/syzkaller.yL3Svy/453/file0" dev="sda1" ino=15938 res=1 07:25:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000000)={0x1, 0x10001}) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0xe07, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x45) 07:25:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x1401, 0x2, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r1, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x1000) 07:25:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) 07:25:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xd000, &(0x7f0000000000), 0x1, 0xffffffffffffffff, 0x4}) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000080)={0x80, "8e47184e1c95d4dd445af24e62f2906ee3eb586094eceff777a56b4d4b90f876", 0x1, 0xc9f7, 0x4, 0x80008, 0x10000, 0x4}) getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x48000, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000100)) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000140)=0x1, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x2) getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x24}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0xffffffc1, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xf850, @rand_addr="464e421f72a9cb436f147912094b673a", 0x27c}, {0xa, 0x4e22, 0x4, @mcast2, 0x2}, r2, 0xe0}}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x48000, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000100)) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000140)=0x1, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x2) getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x24}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0xffffffc1, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xf850, @rand_addr="464e421f72a9cb436f147912094b673a", 0x27c}, {0xa, 0x4e22, 0x4, @mcast2, 0x2}, r2, 0xe0}}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1af5eff25331f2c060d7f77959a2f8d4cb0baf48ba8a8d24a25bf5f947d295fb747f57b749cf9c62d9a5ff3ada239f3b62d2e25f348b729db5ccf8a8c771329c6867a9e6d3616c829a9eb1c09f", @ANYRES16=r3, @ANYBLOB="02002bbd7000ffdbdf250200000c0800"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x410}, 0x80) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, r3, 0xc2d, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3422f081}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x35ca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47a1d93a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe499}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x28b9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33a55afa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x15da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1027}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x90}, 0x1, 0x0, 0x0, 0x8040}, 0x1) [ 611.753372] device lo entered promiscuous mode 07:25:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x24}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0xffffffc1, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xf850, @rand_addr="464e421f72a9cb436f147912094b673a", 0x27c}, {0xa, 0x4e22, 0x4, @mcast2, 0x2}, r2, 0xe0}}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) [ 611.807972] Y­4`Ò˜: renamed from lo 07:25:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = socket(0x10, 0x3, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) r6 = socket$inet6(0xa, 0xbc4bdd3adcfab2ce, 0x3) setsockopt$inet6_dccp_buf(r6, 0x21, 0xf, &(0x7f0000005880)="466a297c2d3e2f343bbbb7a7186c56e7a22bd4c709b0c6068df9dc932daa2e03ca3acdb77074954179aff81e86b62d34965235c83d6434726d08e2281e21ad9b97d2eff4c8e9341fde233a81a5fc05d17d3f0a78638b2aaf46f82e12db0577eb70c7722ad421fcac64f1d67fe1332eea7666ec5c05ca9474265f0057ab7d3a7a4b5ff232c1039c74bb66bb03870b7e635c3a64c8d3198728b91c4f262878493e2a3569896b51251bbd22ce928733a6c8135d83faa265230d970a05960323f6e4554a5ac92487880c802dce1ada1f576c0beaf6505714504ec4d6f569", 0xdc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f00000001c0)=0x20) sendmmsg$inet_sctp(r1, &(0x7f00000056c0)=[{&(0x7f0000000080)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001500)=[{&(0x7f00000000c0)="a494785565f035300be28d738c6bc7b9a60a9d1e8909f25704036e7922be4b3922f04b37fa47b4a473cdb3e5360aebce528c830d9ebf1a1928fab8ff1f24970bfaa36cafa2ab1c8a0d89b55bf726fef0dfa1e3b73f251c92c2ac96d0c02c5a31b463a1c9a3a717ea8602dfe20d0d5e33894e7c3068df43bdff69e88b1155c5243003ba37cf20b0ba7be7e930e84086ca1b312cb46c1c8bf5595d32ff911d454c3f14765312ff22e090d0f33d4f1ab95b73f240b335b5b8217ad154beebce5e35f338fd9ae0c59d91e02041f920375128586ca2562d3f190000d9e0a717639dfcd22618706b88250a36f5a42c7b884a0e80cee7ad", 0xf4}, {&(0x7f00000001c0)="b7ef0b3b0f7861f89369efdad8bffdaa9f7cb0b0ac998a87da1a7541d8c4f9c21248b4df28fe286bcb3f6d00d3f47653cea54e2af322b079d9681b88bd30799ef71990b276b1a515d2940ba75f375f55f367dca5390a03a6bc8ecbf7fafff0de8e0d45a7532510e985550bac10bfd28b5263fd7f324d4ee1db6d6d03dfa15ad168de54d2b9299b6da30ceff34d1bd009f6edb97c3f75798ddfb598b8e196f82d64d2b2b299d91ca658110c74676a60c396ea597b3239cc8d94f7e455f90391d59a8b0b3a8ff69a9c0a5f047c97a812b97da1ef9312092fd6a177d9f8d68e1815d923d026d85848", 0xe7}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="823fae1464fad35bd2a8ff9e0f3347b62645bec06f940ceb880f33d463091efa00cf08d42c82022dfc0dfe44e2779f824bf7aa09f70bc394fbe68cf2d3f4dbf2feda849fc8d714ecdd771980994686d6c58dc5faf3a72569421f0c216b406acd624d4ff8d3c25fde2c865ead302afec82c7155802be277da3d82b61c4f32b3e31f921d7df942619d2bdd05bb087d5f9e18f1adda6dcdd0defe21156aef26afacb0b8970da6b0", 0xa6}, {&(0x7f0000001380)="93e79799646e46d0b1933589bb8bc799331a8bc51da8384d5c554bb739bc8c328e2f35706a6c75a33cffa2c118796359e3da99999754b72dcd99c42e925a04d67b4ae077c1b59b5fc2be4b0341d7a477ec794892f60c4a3f878011d654821b7a91dcc262794aa744c59cd2ed7f9ef9eea21f1a51b801b7ce9a04a618d2e0aca98e29f2a364358c9c721502096ecd641acc86b1d36f0bc9952390b15f", 0x9c}, {&(0x7f0000001440)="b3c9be438546ed2340793fd5ffe38a9535fdeb2a1029787c73b5a4293bf72806b533b9206212c3f853ad0cb543324b48aac9c36e3b89858bb8bb1ad2359810813176fa20e936a70c0e0c42c248fd0150f508e471d11edc0f2372954dcaba7539ca4059190edfd666f20459971123f6c803b322fdffeacd13abf56d40dced5ae4204596537adf13143ebdd2ab3c33bf9dea3000d197c6d07807", 0x99}], 0x6, &(0x7f0000001580)=ANY=[@ANYBLOB="180000000000000084000000050000000000000004000000300000000000000084000000010000000004000008000000ff0300000100000040000000da0c000001040000", @ANYRES32=r5, @ANYBLOB="180000000000000084000000000000000b0001003f000400180000000000000084000000050000000000000005000000200000000000f89f0e07867a8f070000fe8000000000000000000000000000331800000000000000840000000000000007001f0003000400"], 0xb0, 0x44010}, {&(0x7f0000001640)=@in={0x2, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002880)=[{&(0x7f0000001680)="5a12de071dbcb5c9dfe3e644ffb02628d50ea04f5fe29d00f0c6134486138c2288634c38f8d6f3958190786bda85a79f13112b24126b8853edbbb840f2d609df073f50b61b39301888fc4f84643420fc00764b165ebf9977202d66267a3ea70d6c7b58e3ccfbcf6b8313e8830a8dce87fd4d65da6f397376bb5383b97bec7da5333aaa0e1cca9542b4b844da5c7530ff1b3e8307f51fcc9b1fc659919a5345897be6865bc5dbfbfba9871ff3a9a1a31a75cd3c8dc5c4d1bf2b297f3efde958d33f9768e81addacd265", 0xc9}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000002780)="437ddb3f5c3306a4688286835ebb13c266d75d998989f7bd17c6a97a627dbad14bb71e0e5088b80c81f5cda737cba268ad7d0a95749b73a152c229522ddc2e1ea22e09523e29f986c21e8e17dcda85cd133417b250a8a3325b243f4fa9548fa18b6174cb403d99d8", 0x68}, {&(0x7f0000002800)="883acca21aea5d3f02e76ff870b39db5154421056c89f9", 0x17}, {&(0x7f0000002840)="75ba2ccd3592c7b5e3f7dd9a12ad06286ace44083e7d23608766917e690416c3996747143da5c649", 0x28}], 0x5, 0x0, 0x0, 0x40008d0}, {&(0x7f0000002900)=@in6={0xa, 0x4e21, 0x3f, @remote, 0x6}, 0x1c, &(0x7f0000003c80)=[{&(0x7f0000002940)="10e9dc849109189381644e9a1fb7a31be6200f6ef2e86f95e25a5a392ca5ebe5a4378d755ca42cef91312fdd9a664f16eef01c3d36a5de8a1189cfbb550ffd05788a044bd2b6435896434bad302db2cc1c44a924e7ea1ec8efc3ae3425a7665653912ae84e0e4b8413c17d512fde55b6a448288ec69c8215cc038bb57627521fa06d0ba02cd2471f0c4d38be446463ee099a3e0d627f9b509e6e673204f0ec", 0x9f}, {&(0x7f0000002a00)="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", 0x1000}, {&(0x7f0000003a00)="5c6cd3c26428f45505d56ee43d950176ea858c19f000969866b07f6480734ab0f5e08215202a9b2e9c5006e47a294a3e6f1f24ed0486b7f77d8c4678b33e03c4160571693d2583e31e3ada8350d2d895f8ea1fe01463228b93f9260c8d9e88ab6a631c6396e578a0c561c18c0639c9c03bdf4f7a05e5f25dd9c916446cd05a7abbd73a4e7a626d8635e6da55adc0762e", 0x90}, {&(0x7f0000003ac0)="9509d37ee18cf3eb70238f5a1724755ae348f30cce2d568db8ebd6514d3c509a601340e23edd133d8c6c4fab604ce2767e121a2ee1b65affbfd2512853e6559ebdfd32ba0da1d9fa4dcd9c6f09d18c66573d5e576ad0b5c593eff3833966c19fb285928381afa4f3caf6cb02530065942f91c8872342441a4f681f49bc65e70f17e00eb4f9e10519c2963e4d3ceb5c35aee58b45a1a463ddb8d0e009c015d105f21915271b9360b6e9258ae3fc38ed", 0xaf}, {&(0x7f0000003b80)="233e9bb83968cda26f34c5c3c5451301c194e7cb84fc77da0e7e31a82be05ce7cda404ad8dc3aa9d1572fedf8ba918c9200ec4a4a2ae62301c11f424f71c29ff7c82ccf7b6fdc22d304c24eafe996876673836", 0x53}, {&(0x7f0000003c00)="5ac755fe593af85d1819c48189c5a7c110c53c7df98b9e9e0dfaf34a48f6ba4ba083bb0a0748c253b51358f27c6d3c124765464e7dbc7446f53f81830099fa3295578edb81505fb2ebafaa8e08ff35273b65e07d417418a3eca8cf3a79fca5d443568f8f0fdd4eafa476af4e", 0x6c}], 0x6, 0x0, 0x0, 0x4870}, {&(0x7f0000003d00)=@in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x41}, 0x8000}, 0x1c, &(0x7f0000003fc0)=[{&(0x7f0000003d40)="3813eec01dc582c7a5f53fd64cf8ff90329787aa3bf51699bd3a693a0cdb8468b63545d05d7e650bb52cf1431de8c668df62a1c943654eaa15aa86288c7a5a811448e421b0b674ff583e2eb10131f562295c68d68dfa4b5671f4febc2c9feaf74359d9717b3c501483ebb44eaf4de7e85ca70135f2729310aab74651da4d7c46e6973d599b05b5cb4583817e18bfc10954f7c3c157ac07b9e67350e056cebd9d8efff4bcbe2d8b1bfbeba54acbc0f7a1b7cffbecdfb49e68cf895ebf19a7dccc6077aec2e459ed", 0xc7}, {&(0x7f0000003e40)="7eafc95327bfdf5fdd464d7684312dedfec5ad26657fb8b8a2b831d2e773c7948c442e7cec98097c2196c3a94cf962432f4b158d5f4d305d414503e09de95a05688958a82f1d2ccd437f88a4e8c40cc045a8f695b4657841af", 0x59}, {&(0x7f0000003ec0)="eef89fd7fc00785a186fc5ece32a5ba320096f92e4c22326a8db39e454badf6a80e20bcb94acb36f77926e2b613845ef522c39c10bd12035f7b8276e6f699821e217db6e6bd9cbaad0932224b5c03f2041fda147955164214cc77406c0cb55013637b25819766deb41a03d03c13cd61dd2ad814246afaf64e3ac08ee5f3a2890e3213353cd17355428f796eb170e813fb750c3bdfb6b8648ba834055ddf5e02afd94221b2ae27b24ae248eb42dc21ad6d65a68e0a1e3f618d1e43425551cc7d0761d2b6083565489a7b5de6aa35162c0dbe7a9efcff224abbe60b0ac68c966fe23489e368685daa59d3c9bdf01b8f4", 0xef}], 0x3, 0x0, 0x0, 0x4008006}, {&(0x7f0000004000)=@in={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000005040)=[{&(0x7f0000004040)="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", 0x1000}], 0x1, &(0x7f0000005840)=ANY=[@ANYBLOB="30000000000000008400000001000000ff0f7e00008000000100008009000000010101000000000004000000", @ANYRES32=r5], 0x30, 0x20000044}, {&(0x7f00000050c0)=@in={0x2, 0x4e20, @rand_addr=0x9}, 0x10, &(0x7f00000055c0)=[{&(0x7f0000005100)="b2d6d999bbd82562b0197bb54696aa03ab3c10f6935d7cb8467b4e690b1a5cc9f36609", 0x23}, {&(0x7f0000005140)="3ee9b96a3e74062ba02938d8c64cdd704f13cf9df5c26c9a32aa050c2392204117e055acfd13995bf5cf023fbfcda640d00d9f1f30203516b8516af69c748e9aa4634ec8eecbf324ebfb1844820f223ec778ab838a53f69631a2a349c595df731c159498f44f1a59ce52bae5e58cf96aa132a93682019bf0aa46f298ca97ce1b61bfad39a6b8", 0x86}, {&(0x7f0000005200)="78a0e2bfa82156", 0x7}, {&(0x7f0000005240)="4b812b646fb2703c73d05ca2f3a4faa025fe7559e804ff339e0b3f57f09616373f31d81f6b571d8e810c6dfd28e4b9ecb3b9", 0x32}, {&(0x7f0000005280)="7d3e15044fbfeea64677a218b81ee0654b78015177e8e669b5649b0c944a34c69e4e82ae", 0x24}, {&(0x7f00000052c0)="4ce9b4b423c8c7b8758a595ff9031ef647c87a3852b70922afedab89b314de3df9a2c912989e983f5efc70229bc189672608359160ea5c19bc6c7c2a81462f78905e2299fa1a7f725b5ba734ed25bca7c9b7d49d8c0d0c5c122f919300583d75d24fa574138c70afc426ea1e418885d14a960c482a2c70515b26e9098acdbf925327f58e0b47d852a621aa529b2ce82da4605f97cfab15fe87365ced8c93529ca329f40aac46c62e7441a022f8e22873d8bc982c06918d5513120144c20d0dabd097e97c5143adfc3973db0be425f0e7299bc348c86792dfa648860f13b0fc0a", 0xe0}, {&(0x7f00000053c0)="2048eecca729e8a002cfd14244abff21009d9bdb5fc4a3350654b4dff91e043d6fbac4cba95e3e422ed82fb0d9a4502fd714b91bedef04a6f36b7b45db5433581cfd570f773d1e8dc66ff1fd33b255277b0df27d5f6812327abebcec07a0b57b570957f11d27df1f52041a01079e", 0x6e}, {&(0x7f0000005440)="15b061151c5f07e345e3b81a2481fd50ebf51927b8dc22f79dd6b7c3b4bc0910b387929b50ed5fc2e48e65f6215d66aa3dec980b83052cf52d1ced01", 0x3c}, {&(0x7f0000005480)="a28b1ee134477523e91268d329fdb1ff7ec7efe12bb6d9a1538a0021ed410678bcf9773aea1a705ae5a50804673a50671bb659882487b5b54a0a57ec81c7e62c8270a05e07cb8c2dc1f0711e5b895c44f9cbc902838aec3b1ed9aa7e186c4a02a7c700588eafa28883c177f2996deb326c82c9004b1135e0a8d6b056d2", 0x7d}, {&(0x7f0000005500)="626e2f1eb3ad5e72e13a1887a070bb886f08ecd986450d9328ffd9786ec00e200bd6533f34f47c3492162ee0a3792af83f332bd3e2aae01484f2a7a356bc055187ec538bb7bb7562cd304dfb4ef153a83204dc69d7a076be01e763da00e39eba5008f518c8146465d50c7c14b1667dcfa1af4bc6f197c00ffa836df58cfe57efc79599055577ff30ad3c5c957e5fcccd78bc0b913c8feeaa100fcf109de0d24e8b8bd44c", 0xa4}], 0xa, &(0x7f0000005680)=[@init={0x18, 0x84, 0x0, {0x1, 0x81, 0x20, 0x9}}], 0x18, 0x240440a4}], 0x6, 0x2040010) getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x24}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0xffffffc1, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x2, {0xa, 0x4e24, 0x9, @loopback, 0xd9f90e8c}, r3}}, 0x38) 07:25:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000080)={0x1, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r2, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:43 executing program 1: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r1, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:43 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, 0x0, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x3}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x40010) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000003c0)={'filter\x00'}, &(0x7f0000000100)=0x78) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff000000000000000000000000ff01000000000000000000010000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000004d0014006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000002000000"], 0x188}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYRES64=r0, @ANYRESOCT=r2, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r3, @ANYBLOB="1481b9c2c684d2df0bed9759bc74e56b858ba7ef6e754705b8e180ff33c3146ba2fed07a100b24f1265d0085403d11834b981f73e88b60ea4d2ece6e4489e064f0325faf0abeeeb82e753acef1c5059fe632562cb150caa5ba5b036a4e7c7a4eff1574f0d39635daf6c7e1a301ce99e22094c7b36ef8c8caa18222c2a4c54bfa8a2cb4a43a150ba43f384f0da3b352f1aba0401c7618254830fb5400", @ANYRES64=r4], @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRESOCT=r5, @ANYPTR64, @ANYRES64=r6, @ANYRESHEX=0x0, @ANYRES32=r7], @ANYRESOCT=r2, @ANYRES16=r0], @ANYRES16=r2, @ANYBLOB="08002abd7000fbdbdf250b00000008003400001000000a000900aaaaaaaaaaaa00000800340001010000"], 0x3}, 0x1, 0x0, 0x0, 0x4004081}, 0x200008c1) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r8, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:44 executing program 1: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r1, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:44 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, 0x0, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x3}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x40010) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000003c0)={'filter\x00'}, &(0x7f0000000100)=0x78) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff000000000000000000000000ff01000000000000000000010000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000004d0014006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000002000000"], 0x188}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYRES64=r0, @ANYRESOCT=r2, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r3, @ANYBLOB="1481b9c2c684d2df0bed9759bc74e56b858ba7ef6e754705b8e180ff33c3146ba2fed07a100b24f1265d0085403d11834b981f73e88b60ea4d2ece6e4489e064f0325faf0abeeeb82e753acef1c5059fe632562cb150caa5ba5b036a4e7c7a4eff1574f0d39635daf6c7e1a301ce99e22094c7b36ef8c8caa18222c2a4c54bfa8a2cb4a43a150ba43f384f0da3b352f1aba0401c7618254830fb5400", @ANYRES64=r4], @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRESOCT=r5, @ANYPTR64, @ANYRES64=r6, @ANYRESHEX=0x0, @ANYRES32=r7], @ANYRESOCT=r2, @ANYRES16=r0], @ANYRES16=r2, @ANYBLOB="08002abd7000fbdbdf250b00000008003400001000000a000900aaaaaaaaaaaa00000800340001010000"], 0x3}, 0x1, 0x0, 0x0, 0x4004081}, 0x200008c1) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r8, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 07:25:44 executing program 1 (fault-call:6 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 612.745329] FAULT_INJECTION: forcing a failure. [ 612.745329] name failslab, interval 1, probability 0, space 0, times 0 [ 612.777046] CPU: 1 PID: 19678 Comm: syz-executor.1 Not tainted 4.14.175-syzkaller #0 [ 612.784989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.794352] Call Trace: [ 612.796958] dump_stack+0x13e/0x194 [ 612.800604] should_fail.cold+0x10a/0x14b [ 612.805038] should_failslab+0xd6/0x130 [ 612.809029] kmem_cache_alloc_trace+0x2db/0x7b0 [ 612.813732] ? _parse_integer+0xe5/0x130 [ 612.817837] tcp_sendmsg_locked+0x25c7/0x2fd0 [ 612.822357] ? find_held_lock+0x2d/0x110 [ 612.826549] ? tcp_sendpage+0x60/0x60 [ 612.830388] ? mark_held_locks+0xa6/0xf0 [ 612.834475] ? __local_bh_enable_ip+0x94/0x190 [ 612.839083] tcp_sendmsg+0x2b/0x40 [ 612.842666] inet_sendmsg+0x116/0x4d0 [ 612.846479] ? inet_recvmsg+0x4c0/0x4c0 [ 612.850461] sock_sendmsg+0xc5/0x100 [ 612.854188] SYSC_sendto+0x1c4/0x2b0 [ 612.857912] ? SYSC_connect+0x250/0x250 [ 612.861898] ? lock_downgrade+0x6e0/0x6e0 [ 612.866070] ? wait_for_completion+0x390/0x390 [ 612.870655] ? vfs_write+0xff/0x4e0 [ 612.874309] ? fput+0xb/0x140 [ 612.877423] ? SyS_write+0x14d/0x210 [ 612.881146] ? SyS_read+0x210/0x210 [ 612.884782] ? SyS_clock_settime+0x1a0/0x1a0 [ 612.889197] ? do_syscall_64+0x4c/0x640 [ 612.893191] ? SyS_sendto+0x21/0x50 [ 612.896822] ? SyS_getpeername+0x30/0x30 [ 612.900925] do_syscall_64+0x1d5/0x640 [ 612.904836] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 612.910026] RIP: 0033:0x45c849 [ 612.913215] RSP: 002b:00007f9a5cecac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 612.920936] RAX: ffffffffffffffda RBX: 00007f9a5cecb6d4 RCX: 000000000045c849 [ 612.928213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 612.935500] RBP: 000000000076bf00 R08: 0000000020000080 R09: 0000000000000010 [ 612.942774] R10: 1000000020000000 R11: 0000000000000246 R12: 0000000000000006 [ 612.950051] R13: 0000000000000a06 R14: 00000000004ccbc6 R15: 0000000000000000 07:25:44 executing program 5 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) [ 613.094642] Bluetooth: Unknown HCI packet type 5e [ 613.096050] FAULT_INJECTION: forcing a failure. [ 613.096050] name failslab, interval 1, probability 0, space 0, times 0 [ 613.099622] Bluetooth: Unknown HCI packet type 43 [ 613.111030] CPU: 1 PID: 19682 Comm: syz-executor.5 Not tainted 4.14.175-syzkaller #0 [ 613.111037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 613.111041] Call Trace: [ 613.111063] dump_stack+0x13e/0x194 [ 613.111080] should_fail.cold+0x10a/0x14b [ 613.111096] should_failslab+0xd6/0x130 [ 613.111109] kmem_cache_alloc_node+0x55/0x7a0 [ 613.111122] ? check_preemption_disabled+0x35/0x240 [ 613.111142] __alloc_skb+0x9a/0x4c0 [ 613.159497] Bluetooth: Unknown HCI packet type 5e [ 613.160624] ? skb_trim+0x160/0x160 [ 613.160708] ? ll_recv+0x302/0x1040 [ 613.167726] Bluetooth: Unknown HCI packet type 50 [ 613.169107] send_hcill_cmd+0x51/0x160 [ 613.169119] ? _raw_spin_lock_irqsave+0x94/0xbf [ 613.169128] ll_recv+0x35f/0x1040 [ 613.169146] hci_uart_tty_receive+0x1ec/0x4c0 [ 613.169156] ? hci_uart_write_work+0x670/0x670 [ 613.169171] tty_ioctl+0xd5b/0x1220 [ 613.179622] Bluetooth: Unknown HCI packet type 5e [ 613.181487] ? tty_vhangup+0x30/0x30 [ 613.181502] ? trace_hardirqs_on+0x10/0x10 [ 613.196999] Bluetooth: Unknown HCI packet type 40 [ 613.198681] ? tty_vhangup+0x30/0x30 [ 613.198695] do_vfs_ioctl+0x75a/0xfe0 [ 613.198788] ? selinux_file_mprotect+0x5c0/0x5c0 [ 613.198801] ? ioctl_preallocate+0x1a0/0x1a0 [ 613.237433] ? security_file_ioctl+0x76/0xb0 [ 613.241858] ? security_file_ioctl+0x83/0xb0 [ 613.246304] SyS_ioctl+0x7f/0xb0 [ 613.249683] ? do_vfs_ioctl+0xfe0/0xfe0 [ 613.253662] do_syscall_64+0x1d5/0x640 [ 613.257569] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 613.262758] RIP: 0033:0x45c849 [ 613.265947] RSP: 002b:00007f1a7dc0cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 613.273663] RAX: ffffffffffffffda RBX: 00007f1a7dc0d6d4 RCX: 000000000045c849 [ 613.280939] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 613.288215] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 613.295492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 613.302768] R13: 0000000000000582 R14: 00000000004c8177 R15: 0000000000000000 [ 613.310086] Bluetooth: cannot allocate memory for HCILL packet [ 613.316056] Bluetooth: cannot acknowledge device sleep 07:25:44 executing program 1 (fault-call:6 fault-nth:1): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 613.455935] FAULT_INJECTION: forcing a failure. [ 613.455935] name failslab, interval 1, probability 0, space 0, times 0 [ 613.480478] CPU: 1 PID: 19688 Comm: syz-executor.1 Not tainted 4.14.175-syzkaller #0 [ 613.488415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 613.497784] Call Trace: [ 613.500387] dump_stack+0x13e/0x194 [ 613.504047] should_fail.cold+0x10a/0x14b [ 613.508215] should_failslab+0xd6/0x130 [ 613.512202] kmem_cache_alloc+0x44/0x770 [ 613.516280] ? save_trace+0x290/0x290 [ 613.520090] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 613.525032] dst_alloc+0xe6/0x190 [ 613.528492] ? __lock_is_held+0xad/0x140 [ 613.532561] rt_dst_alloc+0x6b/0x430 [ 613.536310] ip_route_output_key_hash_rcu+0x739/0x2710 [ 613.541603] ip_route_output_key_hash+0x18c/0x290 [ 613.546459] ? ip_route_output_key_hash_rcu+0x2710/0x2710 [ 613.552018] tcp_v4_connect+0x739/0x1a70 [ 613.556099] ? tcp_v4_parse_md5_keys+0x1b0/0x1b0 [ 613.560869] __inet_stream_connect+0x6ad/0xb90 [ 613.565460] ? inet_bind+0x960/0x960 [ 613.569282] ? rcu_read_lock_sched_held+0x10a/0x130 [ 613.574307] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 613.579165] tcp_sendmsg_locked+0x1f8c/0x2fd0 [ 613.583686] ? find_held_lock+0x2d/0x110 [ 613.587758] ? tcp_sendpage+0x60/0x60 [ 613.591564] ? mark_held_locks+0xa6/0xf0 [ 613.595641] ? __local_bh_enable_ip+0x94/0x190 [ 613.600235] tcp_sendmsg+0x2b/0x40 [ 613.603781] inet_sendmsg+0x116/0x4d0 [ 613.607645] ? inet_recvmsg+0x4c0/0x4c0 [ 613.611626] sock_sendmsg+0xc5/0x100 [ 613.615347] SYSC_sendto+0x1c4/0x2b0 [ 613.619067] ? SYSC_connect+0x250/0x250 [ 613.623046] ? lock_downgrade+0x6e0/0x6e0 [ 613.627214] ? wait_for_completion+0x390/0x390 [ 613.631803] ? vfs_write+0xff/0x4e0 [ 613.635434] ? fput+0xb/0x140 [ 613.638543] ? SyS_write+0x14d/0x210 [ 613.642263] ? SyS_read+0x210/0x210 [ 613.645894] ? SyS_clock_settime+0x1a0/0x1a0 [ 613.650419] ? do_syscall_64+0x4c/0x640 [ 613.654397] ? SyS_sendto+0x21/0x50 [ 613.658027] ? SyS_getpeername+0x30/0x30 [ 613.662092] do_syscall_64+0x1d5/0x640 [ 613.665993] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 613.671195] RIP: 0033:0x45c849 [ 613.674386] RSP: 002b:00007f9a5cecac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 613.682105] RAX: ffffffffffffffda RBX: 00007f9a5cecb6d4 RCX: 000000000045c849 [ 613.689402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 613.696681] RBP: 000000000076bf00 R08: 0000000020000080 R09: 0000000000000010 [ 613.703955] R10: 1000000020000000 R11: 0000000000000246 R12: 0000000000000006 [ 613.711463] R13: 0000000000000a06 R14: 00000000004ccbc6 R15: 0000000000000001 07:25:45 executing program 1 (fault-call:6 fault-nth:2): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 613.826042] FAULT_INJECTION: forcing a failure. [ 613.826042] name failslab, interval 1, probability 0, space 0, times 0 [ 613.845314] CPU: 1 PID: 19690 Comm: syz-executor.1 Not tainted 4.14.175-syzkaller #0 [ 613.853254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 613.862620] Call Trace: [ 613.865225] dump_stack+0x13e/0x194 [ 613.868875] should_fail.cold+0x10a/0x14b [ 613.873038] ? save_trace+0x290/0x290 [ 613.876857] should_failslab+0xd6/0x130 [ 613.880847] kmem_cache_alloc+0x44/0x770 [ 613.884920] ? __lock_is_held+0xad/0x140 [ 613.888996] ? save_trace+0x290/0x290 [ 613.892825] dst_alloc+0xe6/0x190 [ 613.896292] ? __lock_is_held+0xad/0x140 [ 613.900366] rt_dst_alloc+0x6b/0x430 [ 613.904107] ip_route_output_key_hash_rcu+0x739/0x2710 [ 613.909409] ip_route_output_key_hash+0x18c/0x290 [ 613.914270] ? ip_route_output_key_hash_rcu+0x2710/0x2710 [ 613.919818] ? __call_rcu.constprop.0+0x2cb/0x7e0 [ 613.924682] ip_route_output_flow+0x22/0xb0 [ 613.929107] tcp_v4_connect+0x7d1/0x1a70 [ 613.933191] ? tcp_v4_parse_md5_keys+0x1b0/0x1b0 [ 613.937956] __inet_stream_connect+0x6ad/0xb90 [ 613.942563] ? inet_bind+0x960/0x960 [ 613.946283] ? rcu_read_lock_sched_held+0x10a/0x130 [ 613.951303] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 613.956158] tcp_sendmsg_locked+0x1f8c/0x2fd0 [ 613.960673] ? find_held_lock+0x2d/0x110 [ 613.964752] ? tcp_sendpage+0x60/0x60 [ 613.968562] ? mark_held_locks+0xa6/0xf0 [ 613.972630] ? __local_bh_enable_ip+0x94/0x190 [ 613.977226] tcp_sendmsg+0x2b/0x40 [ 613.980777] inet_sendmsg+0x116/0x4d0 [ 613.984583] ? inet_recvmsg+0x4c0/0x4c0 [ 613.988561] sock_sendmsg+0xc5/0x100 [ 613.992282] SYSC_sendto+0x1c4/0x2b0 [ 613.996002] ? SYSC_connect+0x250/0x250 [ 613.999990] ? lock_downgrade+0x6e0/0x6e0 [ 614.004171] ? wait_for_completion+0x390/0x390 [ 614.008759] ? vfs_write+0xff/0x4e0 [ 614.012389] ? fput+0xb/0x140 [ 614.015499] ? SyS_write+0x14d/0x210 [ 614.019215] ? SyS_read+0x210/0x210 [ 614.022853] ? SyS_clock_settime+0x1a0/0x1a0 [ 614.027269] ? do_syscall_64+0x4c/0x640 [ 614.031420] ? SyS_sendto+0x21/0x50 [ 614.035055] ? SyS_getpeername+0x30/0x30 [ 614.039135] do_syscall_64+0x1d5/0x640 [ 614.043048] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 614.048243] RIP: 0033:0x45c849 [ 614.051430] RSP: 002b:00007f9a5cecac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 614.059227] RAX: ffffffffffffffda RBX: 00007f9a5cecb6d4 RCX: 000000000045c849 [ 614.066499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 07:25:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000180)={0xf34, 0x0, 0x30000, 0x6f}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f00000001c0)={r5, 0xb41}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) r7 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x3000, &(0x7f0000000000), 0x0, r7, 0x4}) ioctl$DRM_IOCTL_VERSION(r7, 0xc0406400, &(0x7f0000000140)={0x1, 0x7fff, 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x65, &(0x7f0000000000)=""/101, 0x5e, &(0x7f0000000080)=""/94}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, 0x0) dup2(r6, r1) [ 614.073778] RBP: 000000000076bf00 R08: 0000000020000080 R09: 0000000000000010 [ 614.081271] R10: 1000000020000000 R11: 0000000000000246 R12: 0000000000000006 [ 614.088545] R13: 0000000000000a06 R14: 00000000004ccbc6 R15: 0000000000000002 07:25:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x202) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) dup2(r3, r1) 07:25:45 executing program 1 (fault-call:6 fault-nth:3): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 614.284583] FAULT_INJECTION: forcing a failure. [ 614.284583] name failslab, interval 1, probability 0, space 0, times 0 [ 614.307122] CPU: 0 PID: 19698 Comm: syz-executor.1 Not tainted 4.14.175-syzkaller #0 [ 614.315036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 614.324403] Call Trace: [ 614.327006] dump_stack+0x13e/0x194 [ 614.330658] should_fail.cold+0x10a/0x14b [ 614.334819] should_failslab+0xd6/0x130 [ 614.338806] kmem_cache_alloc_node+0x288/0x7a0 [ 614.343408] __alloc_skb+0x9a/0x4c0 [ 614.347041] ? skb_trim+0x160/0x160 [ 614.350675] sk_stream_alloc_skb+0xaf/0x780 [ 614.355005] tcp_connect+0x127f/0x3ca0 [ 614.358907] ? tcp_fastopen_defer_connect+0xf0/0x360 [ 614.364015] ? __tcp_transmit_skb+0x2dd0/0x2dd0 [ 614.369642] ? siphash_1u64+0x13/0x260 [ 614.373539] ? prandom_u32_state+0xe/0x170 [ 614.377780] tcp_v4_connect+0x1296/0x1a70 [ 614.381952] ? tcp_v4_parse_md5_keys+0x1b0/0x1b0 [ 614.386731] __inet_stream_connect+0x6ad/0xb90 [ 614.391321] ? inet_bind+0x960/0x960 [ 614.395041] ? rcu_read_lock_sched_held+0x10a/0x130 [ 614.400061] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 614.404915] tcp_sendmsg_locked+0x1f8c/0x2fd0 [ 614.409435] ? find_held_lock+0x2d/0x110 [ 614.413508] ? tcp_sendpage+0x60/0x60 [ 614.417318] ? mark_held_locks+0xa6/0xf0 [ 614.421393] ? __local_bh_enable_ip+0x94/0x190 [ 614.425985] tcp_sendmsg+0x2b/0x40 [ 614.429532] inet_sendmsg+0x116/0x4d0 [ 614.433334] ? inet_recvmsg+0x4c0/0x4c0 [ 614.437309] sock_sendmsg+0xc5/0x100 [ 614.441028] SYSC_sendto+0x1c4/0x2b0 [ 614.444742] ? SYSC_connect+0x250/0x250 [ 614.448720] ? lock_downgrade+0x6e0/0x6e0 [ 614.452881] ? wait_for_completion+0x390/0x390 [ 614.457467] ? vfs_write+0xff/0x4e0 [ 614.461186] ? fput+0xb/0x140 [ 614.464292] ? SyS_write+0x14d/0x210 [ 614.468007] ? SyS_read+0x210/0x210 [ 614.471659] ? SyS_clock_settime+0x1a0/0x1a0 [ 614.476085] ? do_syscall_64+0x4c/0x640 [ 614.480061] ? SyS_sendto+0x21/0x50 [ 614.483697] ? SyS_getpeername+0x30/0x30 [ 614.487768] do_syscall_64+0x1d5/0x640 [ 614.491665] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 614.496859] RIP: 0033:0x45c849 [ 614.500048] RSP: 002b:00007f9a5cecac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 614.507876] RAX: ffffffffffffffda RBX: 00007f9a5cecb6d4 RCX: 000000000045c849 [ 614.515175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 614.522465] RBP: 000000000076bf00 R08: 0000000020000080 R09: 0000000000000010 [ 614.529877] R10: 1000000020000000 R11: 0000000000000246 R12: 0000000000000006 [ 614.537171] R13: 0000000000000a06 R14: 00000000004ccbc6 R15: 0000000000000003 07:25:46 executing program 1 (fault-call:6 fault-nth:4): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 615.108476] Bluetooth: hci0 command 0x1003 tx timeout [ 615.113870] Bluetooth: hci0 sending frame failed (-49) [ 615.534174] FAULT_INJECTION: forcing a failure. [ 615.534174] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 615.546548] CPU: 0 PID: 19700 Comm: syz-executor.1 Not tainted 4.14.175-syzkaller #0 [ 615.554462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.563834] Call Trace: [ 615.566432] dump_stack+0x13e/0x194 [ 615.570070] should_fail.cold+0x10a/0x14b [ 615.574223] __alloc_pages_nodemask+0x1bf/0x700 [ 615.578896] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 615.583831] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 615.588852] ? find_held_lock+0x2d/0x110 [ 615.592927] alloc_pages_current+0xe7/0x1e0 [ 615.597262] __get_free_pages+0xb/0x40 [ 615.601224] __tlb_remove_page_size+0x296/0x470 [ 615.605989] unmap_page_range+0xafa/0x1930 [ 615.610246] ? vm_normal_page_pmd+0x340/0x340 [ 615.614744] ? uprobe_munmap+0x18/0x200 [ 615.618719] unmap_single_vma+0x147/0x2b0 [ 615.622877] unmap_vmas+0x9d/0x160 [ 615.626417] exit_mmap+0x26d/0x4b0 [ 615.629968] ? debug_check_no_obj_freed+0x28e/0x6e4 [ 615.634984] ? SyS_munmap+0x30/0x30 [ 615.638609] ? check_preemption_disabled+0x35/0x240 [ 615.643637] ? rcu_read_lock_sched_held+0x10a/0x130 [ 615.648761] ? kmem_cache_free+0x23a/0x2b0 [ 615.653003] ? __khugepaged_exit+0x2b8/0x3b0 [ 615.657606] mmput+0x103/0x420 [ 615.660807] do_exit+0x933/0x2b00 [ 615.664268] ? mm_update_next_owner+0x5b0/0x5b0 [ 615.669006] ? get_signal+0x31c/0x1ca0 [ 615.672927] ? lock_downgrade+0x6e0/0x6e0 [ 615.677078] do_group_exit+0x100/0x310 [ 615.680975] get_signal+0x385/0x1ca0 [ 615.684714] ? check_preemption_disabled+0x35/0x240 [ 615.689748] do_signal+0x7c/0x1690 [ 615.693287] ? fput+0xaa/0x140 [ 615.696480] ? SYSC_sendto+0x1e4/0x2b0 [ 615.700367] ? setup_sigcontext+0x820/0x820 [ 615.704695] ? lock_downgrade+0x6e0/0x6e0 [ 615.708858] ? wait_for_completion+0x390/0x390 [ 615.713440] ? vfs_write+0xff/0x4e0 [ 615.717064] ? fput+0xb/0x140 [ 615.720168] ? exit_to_usermode_loop+0x41/0x220 [ 615.724841] exit_to_usermode_loop+0x159/0x220 [ 615.729454] ? SyS_sendto+0x21/0x50 [ 615.733092] do_syscall_64+0x4a3/0x640 [ 615.736984] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 615.742172] RIP: 0033:0x45c849 [ 615.745354] RSP: 002b:00007f9a5cecac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 615.753057] RAX: fffffffffffffe00 RBX: 00007f9a5cecb6d4 RCX: 000000000045c849 [ 615.760350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 615.767617] RBP: 000000000076bf00 R08: 0000000020000080 R09: 0000000000000010 [ 615.774885] R10: 1000000020000000 R11: 0000000000000246 R12: 0000000000000006 [ 615.782259] R13: 0000000000000a06 R14: 00000000004ccbc6 R15: 0000000000000004 07:25:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f00000000c0)) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f00000000c0)={0x1, 0x3fbb, 0x1, 0x1, 0x0, 0x7fffffff, 0x75, 0x4, 0x1}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f00000003c0)) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x6) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 617.188273] Bluetooth: hci0 command 0x1001 tx timeout [ 617.193727] Bluetooth: hci0 sending frame failed (-49) 07:25:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0xce20}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x20, 0x4) 07:25:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) read$usbfs(r1, &(0x7f0000000000)=""/77, 0x4d) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) [ 619.268097] Bluetooth: hci0 command 0x1009 tx timeout 07:25:52 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xc329}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={[], [], @multicast2}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x48045) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000140)={0x1, &(0x7f0000000000), 0x1, r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000000c0)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r6}) r7 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f00000002c0)={r8}) dup2(r7, r1) 07:25:54 executing program 5 (fault-call:3 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) 07:25:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) r4 = open(&(0x7f0000000080)='./file0\x00', 0x187502, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f00000000c0)={0x10, 0x0, 0x5}, 0x10) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000002c0)={r6}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r9 = dup2(r8, r7) r10 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KDSKBENT(r10, 0x4b47, &(0x7f0000000380)={0xc6, 0x80, 0x6}) setsockopt$inet_buf(r9, 0x0, 0x20, &(0x7f0000000140)="7d7395a0b3e6e2cfe5104d60dfd0206f2cc7b0890ee5c7824fd502d28944ee8a562b13ad", 0x24) [ 623.224127] FAULT_INJECTION: forcing a failure. [ 623.224127] name failslab, interval 1, probability 0, space 0, times 0 [ 623.235392] CPU: 0 PID: 19728 Comm: syz-executor.5 Not tainted 4.14.175-syzkaller #0 [ 623.243284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.252648] Call Trace: [ 623.255246] dump_stack+0x13e/0x194 [ 623.258867] should_fail.cold+0x10a/0x14b [ 623.263006] should_failslab+0xd6/0x130 [ 623.266969] kmem_cache_alloc_node_trace+0x59/0x7b0 [ 623.271974] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 623.277409] ? __alloc_skb+0x9a/0x4c0 [ 623.281197] __kmalloc_node_track_caller+0x38/0x70 [ 623.286111] __kmalloc_reserve.isra.0+0x35/0xd0 [ 623.290792] __alloc_skb+0xca/0x4c0 [ 623.294404] ? skb_trim+0x160/0x160 [ 623.298013] ? ll_recv+0x302/0x1040 [ 623.301624] send_hcill_cmd+0x51/0x160 [ 623.305496] ? _raw_spin_lock_irqsave+0x94/0xbf [ 623.310148] ll_recv+0x35f/0x1040 [ 623.313591] hci_uart_tty_receive+0x1ec/0x4c0 [ 623.318079] ? hci_uart_write_work+0x670/0x670 [ 623.322647] tty_ioctl+0xd5b/0x1220 [ 623.326260] ? tty_vhangup+0x30/0x30 [ 623.329963] ? trace_hardirqs_on+0x10/0x10 [ 623.334201] ? tty_vhangup+0x30/0x30 [ 623.337915] do_vfs_ioctl+0x75a/0xfe0 [ 623.341701] ? selinux_file_mprotect+0x5c0/0x5c0 [ 623.346447] ? ioctl_preallocate+0x1a0/0x1a0 [ 623.350849] ? security_file_ioctl+0x76/0xb0 [ 623.355239] ? security_file_ioctl+0x83/0xb0 [ 623.359736] SyS_ioctl+0x7f/0xb0 [ 623.363095] ? do_vfs_ioctl+0xfe0/0xfe0 [ 623.367072] do_syscall_64+0x1d5/0x640 [ 623.370956] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 623.376133] RIP: 0033:0x45c849 [ 623.379309] RSP: 002b:00007f1a7dc0cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.387002] RAX: ffffffffffffffda RBX: 00007f1a7dc0d6d4 RCX: 000000000045c849 [ 623.394264] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 623.401527] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 623.408809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 623.416190] R13: 0000000000000582 R14: 00000000004c8177 R15: 0000000000000001 [ 623.423504] Bluetooth: cannot allocate memory for HCILL packet [ 623.429476] Bluetooth: cannot acknowledge device sleep [ 623.454559] Bluetooth: Unknown HCI packet type 5e [ 623.460165] Bluetooth: Unknown HCI packet type 43 07:25:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x8, 0x400000) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000005c0)={0x0, 0x3}, 0x8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x188}}, 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) syz_mount_image$cifs(&(0x7f0000000480)='cifs\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x4, 0x0, &(0x7f0000000500), 0x2010001, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00') r6 = accept4$phonet_pipe(r5, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) r7 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={&(0x7f0000000140)=[0x7, 0x4, 0x3, 0x8], 0x4, 0x4, 0x4, 0xfffffffc, 0xab, 0xaf2f, 0x3, {0x0, 0x5000, 0xf801, 0x3, 0x6, 0x81, 0x0, 0x401, 0xff, 0x458, 0xfff, 0x5, 0xffffffff, 0x187e84dd, "1a89466207164b9e29aef9aba01dd02c612d1f62cab1201d7065a93048c52123"}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xd8, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x44014}, 0x1) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1_vlan\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 623.496543] Bluetooth: Unknown HCI packet type 5e [ 623.516705] Bluetooth: Unknown HCI packet type 50 [ 623.527870] Bluetooth: Unknown HCI packet type 5e [ 623.532746] Bluetooth: Unknown HCI packet type 40 07:25:55 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000001640)={0x6, &(0x7f0000000140)=""/180, &(0x7f0000001580)=[{0x9, 0xa8, 0x0, &(0x7f0000000300)=""/168}, {0x2, 0x8a, 0x1, &(0x7f00000003c0)=""/138}, {0x6, 0x4, 0x40, &(0x7f00000000c0)=""/4}, {0x4, 0xe8, 0x5, &(0x7f0000000480)=""/232}, {0x3, 0x1000, 0x0, &(0x7f0000000580)=""/4096}, {0x400, 0x63, 0x2, &(0x7f0000000200)=""/99}]}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0x1, 0xffffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r4}) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000002c0)={r6}) dup2(r5, r2) [ 623.598315] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. 07:25:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg0\x00'}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r4}) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000002c0)={r6}) dup2(r5, r1) 07:25:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) dup(r6) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0xb, 0xa8d7, 0x3fb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r7}) dup2(r4, r1) 07:25:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = socket(0x10, 0x3, 0x0) close(r4) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e22, 0x5, @local, 0x5ae}}, 0x7, 0x2, 0x1fffe0, 0x7fff, 0x4}, &(0x7f0000000080)=0x98) r8 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f00000002c0)={r9}) dup2(r8, r1) 07:25:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1000, 0x220000) r1 = syz_open_dev$dri(0x0, 0x0, 0x50802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = socket(0x10, 0x3, 0x0) close(r3) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000140)={r6, 0x1, 0x8f, "2f8b2cf7701511435a4b1977188e18a986e8080ea2d75b98364735978afb7202f4c1185f9a03f582a14ed4733bd764970a21ddee49f65877ad343f911a502369e53c7fac4e86b2b77e3e01d92e54a1b240ef8fca4a94f160b53d83f27b6c392123004b85b1564403eb28c7cc9f9590761b055a5f05e50abe31fdd17a25adbd42cc87aeb6ec504c9b643f1d85231d0d"}, 0x97) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r7}) r8 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f00000002c0)={r9}) dup2(r8, r1) 07:25:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f00000000c0)=0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000380)={'raw\x00', 0x2, [{}, {}]}, 0x48) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000001c0)) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f0000000140)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000180)=0x28) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r6}) dup2(r4, r1) 07:25:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x420002) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, 0x80000000, 0x1, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4340}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r4}) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000002c0)={r6}) dup2(r5, r1) 07:25:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:25:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000040)={r2}) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r7 = semget$private(0x0, 0x20000000102, 0x0) semop(r7, &(0x7f0000000380)=[{0x4, 0xffff}], 0x1) semop(r7, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$GETZCNT(r7, 0x0, 0xf, &(0x7f0000000140)=""/178) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000002c0)={r6}) dup2(r5, r1) [ 625.267523] Bluetooth: hci0 command 0x1003 tx timeout [ 625.272988] Bluetooth: hci0 sending frame failed (-49) [ 627.355314] Bluetooth: hci0 command 0x1001 tx timeout [ 627.360686] Bluetooth: hci0 sending frame failed (-49) [ 629.437224] Bluetooth: hci0 command 0x1009 tx timeout 07:26:04 executing program 5 (fault-call:3 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) 07:26:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f00000000c0)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:26:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x4a0440) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x1ff, 0x3e000, 0x80000001, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000000)={0x0, 0x1, 0x1}) dup2(r4, r1) 07:26:04 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x1f1b80, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x1000, &(0x7f0000000000), 0x1, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={0x0}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000100)={0x0}) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/71, 0x47}, {&(0x7f0000000480)}], 0x2}, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0xe}) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20000, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000002c0)={0x5000, &(0x7f0000000240), 0x0, r6, 0x6}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={r2, r4, 0x6}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f00000001c0)={0x2, {0x3, 0x1, 0x40f7, 0x20}}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f0000000200)) ioctl$KVM_RUN(r8, 0xae80, 0x0) 07:26:04 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00000400aaaaaa0fda57e34f6950e945436333ad2b88aa3005f323a23b59aaaa000004000000dc5b2d8af8f9f0530ee8589a5484bcdbc4e08ed2eb29f00e91bd10c313126631523b114bb93c40e7e99789c44c9a98d3310a1ce451cc54"]) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x4, 0x851, 0x3f, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x7, 0x8, 0x7, 0x8, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x80000008, 0xa8d5, 0x9, 0x7, r3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4}) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r5, r1) 07:26:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x10001, 0x6, 0x80000000}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f00000000c0)={0x7, 0x81, 0x4, 0x6, 0x8}) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{0x20, '/dev/dri/card#\x00'}, {0x20, '/dev/dri/card#\x00'}], 0xa, "a25173e73419fd35a33bda83e39b028d0b82a9fd2409b0a63db63dee39f0ae40d1d9673589e75701936e5d2df629306f78cf2fdebe342f99489eb902b0be8d0bd29d55e3cccb387518c686cba496ad5d5647d342cfc2aea5510e13060d13e62f261ded685723a3ae3572d6db3057e6e37e78159820eb2ac8bd588da875d00be705aafe5db738b731ef0da0752b7b6582aae5bd51d04a645850873d8eb85860c9d886ea73234695961477b7356de569b190994d30a73cd119af87e6edae248fed7f2223e0a7b80af8448ac5b0abeed8fd2b4a086667eb369a68ce8778b8c117516175351a6a45db08ee4813de7b92041f116eb54c"}, 0x11f) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)) dup2(r4, r1) 07:26:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x920c3, 0x0) 07:26:04 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0xfffffffffffffffc, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r2, r0) [ 633.429100] Bluetooth: Unknown HCI packet type 5e [ 633.434158] Bluetooth: Unknown HCI packet type 43 [ 633.461046] Bluetooth: Unknown HCI packet type 5e [ 633.474331] Bluetooth: Unknown HCI packet type 50 [ 633.500205] Bluetooth: Unknown HCI packet type 5e 07:26:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000140)={r5, @in={{0x2, 0x4e22, @broadcast}}, [0x4, 0x7f, 0x1ff, 0x100, 0x2, 0x1f, 0x56b, 0x7, 0x80000001, 0x7fff, 0x7, 0x9, 0x5, 0x80000000, 0xee]}, &(0x7f0000000240)=0x100) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r8 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000340)={0x8001, {{0x2, 0x4e20, @multicast1}}}, 0x88) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f00000002c0)={r7}) dup2(r6, r1) [ 633.562977] Bluetooth: Unknown HCI packet type 40 07:26:05 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x4}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x6}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0x1}, 0x8) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r6, r0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCGIFDSTADDR(r7, 0x8917, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e22, @broadcast}}) 07:26:05 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x1, 0x4, 0x2, {0xa, 0x4e20, 0x5, @rand_addr="05a6250c5ca1e18a42e136d65668cd3c", 0x5}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="65f0ac7add53d5390e4d2ab860d79da95a28bd18362a19cfc16a91fe19e45f0702abed15631c3645841241191ecb0ce5f3541c53982817", 0x37}, {&(0x7f0000000140)="225ed9d1d57ab302b6cea285469fdeea727e07945d6d8bcf9986139ec2cfaabd195ce68a07eaaa85fc8be17a98416031916b058afa068f3c577043f4cf97c4ee06c6d006fa1816c9791759065333664ba26f0532aa12478b282a5d02d6ea6febbe17", 0x62}, {&(0x7f0000000300)="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", 0x1000}], 0x3, &(0x7f0000001300)=[{0x48, 0x11, 0xd1, "60474f54b6a7aa8e526e253c261c99f86e79c8f1f78bfaead3cd416013e68bcc02e07c554df4d77b15a084706d8f536e5c7b7447025a"}, {0x58, 0x112, 0x81, "02445039238f4d4389fbeecf98a927653e82cfe39d1c83d702cd9c7138f3fa9fa5af0189af471ee2b2b18b89f0fa919b761ff2ad9fe57413402a3d91651e11e27d58a926a405"}, {0x50, 0x88, 0x1000, "decb33329cc2eef7018c560109949126035e6902e23c6546de7104d79271116bd9e961d357b2034871b05c3214c80da70cf8e46047150a5b9cb90768f1f5d79b"}], 0xf0}, 0x88010) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r4, r2) 07:26:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 635.512367] Bluetooth: hci0 command 0x1003 tx timeout [ 635.517730] Bluetooth: hci0 sending frame failed (-49) [ 637.586557] Bluetooth: hci0 command 0x1001 tx timeout [ 637.592300] Bluetooth: hci0 sending frame failed (-49) [ 639.666422] Bluetooth: hci0 command 0x1009 tx timeout 07:26:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000008}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xfc, 0x2, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_NAT={0x5c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x5}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}]}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24004801}, 0x4048000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:26:15 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x80000008, 0xa8d4, 0x0, 0x0, 0x0}) r2 = semget(0x3, 0x3, 0x14) semctl$SEM_STAT(r2, 0x0, 0x12, &(0x7f0000000000)=""/222) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r3 = syz_open_dev$dri(0x0, 0x8, 0x0) dup2(r3, r0) 07:26:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f00000003c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:26:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) pipe(&(0x7f00000000c0)) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000180)={0x3000, &(0x7f0000000140), 0x0, 0xffffffffffffffff, 0x4}) ioctl$TIOCEXCL(r3, 0x540c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20a081, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000040)={0xe40, 0x1, 0x8000, 0x5, 0x6, 0x7, 0x100}) r5 = dup2(r4, 0xffffffffffffffff) ioctl$DRM_IOCTL_CONTROL(r5, 0x40086414, &(0x7f0000000080)={0x2, 0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000001c0)) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, 0x0) dup2(r6, r1) 07:26:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5}) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x3, 0x10000, 0x7, 0x3f, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f00000000c0)={r7}) dup2(r4, r1) 07:26:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="02000061", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000002680)={r5, 0x1, 0x7f, 0x80, 0x5bb, 0x587}, &(0x7f00000026c0)=0x14) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="8d000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r6}, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r7 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KDADDIO(r7, 0x400455c8, 0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) 07:26:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x6fa, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r6, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x3}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc002}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r6, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24040800}, 0xd060) r7 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f00000002c0)={r8}) dup2(r7, r1) 07:26:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x82000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) dup2(r3, r1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) fchmod(r4, 0x200) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) 07:26:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0x9e0000, 0x7ff, 0x3, r0, 0x0, &(0x7f00000000c0)={0x990a2d, 0x4, [], @p_u32=&(0x7f0000000080)=0x200}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:26:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) capget(&(0x7f0000000040)={0x19980330, r1}, &(0x7f0000000100)={0x3, 0x8, 0x796254b, 0x8, 0x7ff}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) 07:26:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) dup2(r4, r1) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) pread64(r5, &(0x7f0000000000)=""/1, 0x1, 0x5) 07:26:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7ffffe, 0x8010, r2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 643.880262] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use) [ 643.919544] Bluetooth: received HCILL_GO_TO_SLEEP_ACK (in state 0) 07:26:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) ioctl$TUNSETOWNER(r4, 0x400454cc, r6) r7 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r7, 0xc02064a5, &(0x7f0000000180)={0x1ff, 0x9, &(0x7f0000000080)=[0x8000, 0x63c2, 0x7f, 0x1, 0x185, 0x7, 0x4, 0x59, 0x3], &(0x7f00000000c0)=[0x100, 0x5f6, 0x6, 0x5, 0x40], &(0x7f0000000140)=[0xffff, 0x6, 0x101, 0x305b, 0x8]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f00000002c0)={r8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044040}, 0x20040080) dup2(r7, r1) 07:26:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = socket$inet(0x2, 0xa, 0xffff) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@int=0xfe9, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, 0x0) dup2(r4, r1) 07:26:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) userfaultfd(0x80c00) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockname$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f00000000c0)=0x1) 07:26:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x13, r2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:26:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0x5, 0x7fffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0xd000, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x6}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f00000000c0)={0x80000000, 0x2, 0x1, 0x4, &(0x7f0000000080)=[{0x80, 0x6, 0xffff, 0x1}, {0x101, 0x1000, 0x6, 0x7}, {0x9, 0x4, 0x9, 0x1}, {0x7, 0x4, 0x7, 0x4}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000002c0)={r7}) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xd, 0x4000000000000800, 0x1}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r8, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r8, &(0x7f0000000040), &(0x7f00000001c0)=""/4096}, 0x18) dup2(r5, r1) 07:26:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) dup2(r1, r3) 07:26:15 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000240)='./bus\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="040005000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYBLOB, @ANYRES32=0x0], 0xf, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000240)='./bus\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="04000500000d00000800010036f92b83bb884080c6ba0985b1cf212f8455e2e09fa7786e00db07e045029d5a791bed83267b3d1318079ba4e22a07299106ed738c66c41c84f1f286b85fd641faf1bd5f45c9832803ef5d3c4ec186eee4a0efa5f0e5e321da0970bab2cccb2e71197d279c05d7dd2b82ad84b360b7251f0f866c933e17995a18ccfd32e99904bc9bd4434a6142667446b78288fcf3d3f9d52b2c86ab2d8a3d23e234c65fbe3056e0cacff0469d279dec689e0d82643aa6de7777e9", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r5, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYBLOB, @ANYRES32=0x0], 0xf, 0x0) getgroups(0x9, &(0x7f0000000000)=[0xee01, 0x0, 0x0, 0x0, 0x0, 0xee00, 0x0, r2, r5]) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000240)='./bus\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[], 0x0, 0x0) setresgid(0x0, r6, r8) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r9 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r9, 0xc01064b3, &(0x7f00000002c0)={r10}) r11 = syz_open_dev$dri(0x0, 0x0, 0x80) dup2(r11, r9) 07:26:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5}) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f0000000080)) dup2(r4, r1) 07:26:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) sendmsg$tipc(r2, &(0x7f0000001200)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x4}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="42553f636cafd04f5fcba30e55e37bebcdab3a69cfd85ad50d834ed75ddb82cdf18573f91774b2ebed3fdc6d9f0957a5147015b5ecc36e66d15dffd7802173712c6004c58cb7a46a5a8b8b3caeb3905479d36b48fb34e323fcbe8ec3708b7aabbba035fd79803477d536e044cdbe1326a045e66246c6878dff09f6436d86858d45f3842ae3faff6b91dbc5595955e990db13788b3d461c1ad98e9762a22a7e6e30a2ba44efb1067eaa931f70a9f8b95933c006ab3b150ae6ef4299d3eaa27fe8bd7075b9b8f8d262", 0xc8}], 0x1, &(0x7f0000000200)="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", 0x1000, 0x4004014}, 0x4c016) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 645.996172] Bluetooth: hci0 command 0x1003 tx timeout [ 646.002757] Bluetooth: hci0 sending frame failed (-49) [ 648.065951] Bluetooth: hci0 command 0x1001 tx timeout [ 648.071271] Bluetooth: hci0 sending frame failed (-49) [ 650.145812] Bluetooth: hci0 command 0x1009 tx timeout [ 652.546685] NOHZ: local_softirq_pending 08 07:26:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KDADDIO(r2, 0x400455c8, 0x100000000091) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000000100)=""/155, &(0x7f00000001c0)=0x9b) 07:26:26 executing program 3: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) accept4$phonet_pipe(r3, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x40000) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r4, r1) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x15, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x4048000) 07:26:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x800008, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5}) dup2(r4, r1) 07:26:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f00000001c0)="1975b710bdf61e81b4c8b057a5", 0xd, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x218, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$update(0x2, r2, &(0x7f0000000000)="d1d9da43153c799e99f31c3e385ea176343091045d34b18eb735dd49ce87a135131cfb1a36bdfc92e32e29f80da4494d54a3ad9e53991e3ba19776f346ac0cb5a0684c431e4afdf25c1b1d3724c86a326984a117ec028a301e4305c3d58bb241909ac40b7511b1e22e5aa2412ea7bbc8bc087ade6def3bdafdd3dd149058", 0x7e) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:26:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x141880, 0x0) read$usbmon(r4, &(0x7f0000000340)=""/209, 0xd1) ioctl$TIOCSBRK(r3, 0x5427) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0xfffffffb, 0x0, 0x4, 0xe000, 0x5, {r5, r6/1000+30000}, {0x1, 0x8, 0x5, 0x8, 0xc1, 0x80, "dcaf10fb"}, 0x0, 0x4, @fd=r3, 0x20, 0x0, 0xffffffffffffffff}) write$P9_RXATTRCREATE(r7, &(0x7f00000001c0)={0x7, 0x21, 0x1}, 0x7) 07:26:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0xee, 0x7, 0x1, 0x0}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x1, 0xca) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000240)={0xd000, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x4004830, 0x80000001, 0x7, 0x7, r3}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x6c0682, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x6000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$RTC_RD_TIME(r6, 0x80247009, &(0x7f0000000000)) r7 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) dup2(r7, r1) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @initdev}, &(0x7f00000001c0)=0x8) 07:26:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) write$6lowpan_enable(r4, &(0x7f0000000080)='0', 0x1) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000002c0)={r6}) dup2(r5, r1) 07:26:26 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x103040) dup2(r2, r0) 07:26:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0xe141, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) shutdown(r1, 0x0) 07:26:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f0000000080)={'ip6gretap0\x00', 0x1c3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5}) dup2(r4, r1) 07:26:26 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x4, 0x4c6b80) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffe}, {0x20}, {}, @connect={{0x0, 0x10}}}, {0x0, 0x0, 0x0, 0x9, @time={0x3}, {}, {0xfe, 0x1}, @raw32={[0x15e0653c, 0x400, 0x4]}}], 0x38) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendto$packet(r3, &(0x7f0000000140)="6cd5a55316ffa440ef90a90f145e875515218ce1c9e89ad4a0e22e08cddfb9177b415ed37442062989380f9289976e3ad1cdf993305bf27e6388a2ef2a067bb37b6d60d72d16d8938567c0ab2c10d30c4faaa99782bdb2b2dcf7513b856ca42085089c15ffd04c9607d67a7975df87250d5201048e19048a75fd692c71b8e500446545", 0x83, 0x50, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) r5 = dup2(r4, r0) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) fcntl$setpipe(r7, 0x407, 0x9a8) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x7}, 0x55) ioctl$sock_proto_private(r5, 0x89eb, &(0x7f0000000000)="496622272b47b1463e156a516410d9") [ 654.709959] Bluetooth: Unknown HCI packet type 5e [ 654.721532] Bluetooth: Unknown HCI packet type 43 [ 654.742436] Bluetooth: Unknown HCI packet type 5e [ 654.768786] Bluetooth: Unknown HCI packet type 50 07:26:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}, 0x10) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r4}) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000002c0)={r6}) dup2(r5, r1) [ 654.793190] Bluetooth: Unknown HCI packet type 5e [ 654.808337] Bluetooth: Unknown HCI packet type 40 07:26:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r4 = dup3(r1, r3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x3, 0x3, 0x3, 0x13f3354a, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r5}) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r8 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000080)=0x22, 0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f00000002c0)={r7}) dup2(r6, r1) 07:26:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x2600) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5}) dup2(r4, r1) 07:26:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5}) r6 = dup2(r4, r1) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000140)={0x0, @hci, @in={0x2, 0x4e23, @loopback}, @nl=@kern={0x10, 0x0, 0x0, 0x8}, 0x9, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)='veth1_to_bridge\x00', 0x4, 0x200000}) 07:26:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x214000) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000040)={r3}) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000003c0)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x1) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000140)={0x80000001, "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"}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f00000002c0)={r7}) dup2(r6, r1) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x121000, 0x0) fsetxattr$trusted_overlay_redirect(r8, &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0\x00', 0x8, 0x0) 07:26:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2c596d0cd71d7423", "41f101bbfac708c3c5a57a7e323837cc", "472ca33a", "1d958f5e077c9f4b"}, 0x28) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\x84\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x26}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000000}, 0x800) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:26:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x10d002, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000140)="cb1f2e7d92fd0ced5448a402da4e575202f681e0e6e3387d7ec6264076613a9cee291bb2fcb973b7334fd216a2289969180833f4a7063c047eb37adcd4512b37a619fe", 0x43, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r6, 0xc00464be, &(0x7f00000001c0)={r7}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5}) dup2(r4, r1) 07:26:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000140)={0x6, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x80, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000080)=[0x10000, 0x5, 0xfffffba5, 0x9, 0x5], 0x5, 0x800, r5, r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r7 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f00000002c0)={r8}) dup2(r7, r1) r9 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_GET_CAP(r9, 0xc010640c, &(0x7f0000000340)={0x2}) 07:26:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000240)='./bus\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYRESOCT=r6, @ANYRESDEC=r5, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRES32=0x0, @ANYRES64, @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRESOCT=0x0, @ANYRES32=0x0], 0xf, 0x0) fchown(0xffffffffffffffff, r4, r6) r7 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)={0x2, 0x4000}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) [ 656.785076] Bluetooth: hci0 command 0x1003 tx timeout [ 656.790414] Bluetooth: hci0 sending frame failed (-49) [ 658.864893] Bluetooth: hci0 command 0x1001 tx timeout [ 658.870248] Bluetooth: hci0 sending frame failed (-49) [ 660.944853] Bluetooth: hci0 command 0x1009 tx timeout 07:26:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb4, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROBES={0x5, 0x15, 0x1}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x14}, 0x10040081) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:26:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5}) r6 = socket(0x10, 0x3, 0x0) close(r6) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x1, 0x10001, 0x4, 0x6, 0x1ff, 0x7, 0x3, {r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}}, 0x6, 0x5, 0xfffffff9, 0x0, 0x40}}, &(0x7f0000000080)=0xb0) dup2(r4, r1) 07:26:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:26:36 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x8, 0x0, 0x10001, 0x8000}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000040)={0x1, r2}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r3, r0) 07:26:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000080)={0x75, &(0x7f0000000000)=""/117}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, 0x0) dup2(0xffffffffffffffff, r1) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x20a100, 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000200)={0x5000, &(0x7f0000000000), 0x4, r4, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x3, 0x7, 0x20, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r7}) 07:26:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0xfffffffffffffef5, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000280)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x710, 0x1, 0x5, 0x5, 0x0, 0x0, {0xc}, [{{0x254, 0x1, {{0x2, 0x10001}, 0x3, 0x5, 0x1, 0x3, 0x23, 'syz0\x00', "2eeeeed6f23b4e56e3fe7c9e70ef83ef32f26ad13efacb05fb9a626e4eb459f5", "f781e4c37e356da36edae77a42e94d32931794ad3079b25a27f3d24cacdba521", [{0x6, 0x0, {0x0, 0x6}}, {0x3, 0x9, {0x3, 0x2}}, {0x100, 0x3f, {0x1, 0x8af5}}, {0x4, 0x7f, {0x0, 0x7fff}}, {0x100, 0x401, {0x3, 0xc0}}, {0x800, 0x1ff, {0x1, 0x7ff}}, {0xf5b8, 0x2, {0x3, 0x9}}, {0x5, 0x1716, {0x2, 0x9311}}, {0x1, 0x6, {0x1, 0x5}}, {0x8, 0x97, {0x1, 0x7}}, {0x8000, 0x401, {0x1, 0x9}}, {0xd3, 0x101, {0x1, 0x800000}}, {0x2, 0xff, {0x3, 0x3}}, {0xffff, 0x4, {0x1, 0xfc2}}, {0xcedf, 0xffff, {0x0, 0x4}}, {0x2, 0x8000, {0x3, 0xb8}}, {0x9fdf, 0xffe1, {0x3, 0x101}}, {0x2, 0x3, {0x1, 0x4}}, {0x7, 0x6, {0x3, 0x3}}, {0x0, 0x7f, {0x0, 0x3}}, {0xff5b, 0xffab, {0x3, 0xffffff81}}, {0x1, 0x7000, {0x0, 0x5}}, {0xfffe, 0x0, {0x2, 0x9}}, {0x9, 0x3, {0x1, 0xde}}, {0x7, 0x7, {0x3, 0x7}}, {0x200, 0x0, {0x0, 0x3}}, {0xfffb, 0x4, {0x0, 0x6}}, {0xfffa, 0x0, {0x3, 0x104400}}, {0x19d9, 0xe9b, {0x0, 0x6}}, {0x400, 0x2, {0x1, 0x5}}, {0x1, 0x5, {0x2, 0xe1df}}, {0x4, 0x1, {0x2, 0xc4bd}}, {0x5, 0x20, {0x0, 0xfffffffd}}, {0x0, 0x3f, {0x0, 0x3}}, {0x2, 0x31, {0x1, 0x6f3c}}, {0x200, 0x8000, {0x1, 0x3ff}}, {0x2, 0x8, {0x3, 0x6}}, {0x1, 0x1, {0x1, 0x10000}}, {0x4, 0x3f, {0xda6c5b816da6bb31, 0xffff}}, {0x1ff, 0x401, {0x1, 0x1000}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x40, 0xff, 0xfff, 0x5, 0x27, 'syz1\x00', "88c68182a480d948cdc4d7d78cef671a403ea810e051d0c274c2d7df4d27d8d6", "4498eff2da07f736747398516c2458c4fc597073f4d5f006c4b63362c8d82d63", [{0x8001, 0x9, {0x5, 0x7}}, {0xbe, 0x80, {0x1, 0x1}}, {0x7, 0xffc0, {0x1072f0d3ba02d1cc, 0x58ee}}, {0xbdf6, 0xe2e4, {0x2, 0x979c}}, {0x8, 0xfff8, {0x1, 0x6}}, {0x81, 0xfffd, {0x1}}, {0x81f, 0x6, {0x1, 0x3}}, {0x3, 0x6, {0x1, 0x6}}, {0x9, 0x1, {0x3, 0x9}}, {0x4, 0x7, {0x0, 0x4}}, {0x5de1, 0x7f, {0x1, 0x4a8e983f}}, {0x6, 0x7fff, {0x1, 0x1}}, {0x4, 0xfffa, {0x63cf75206d490dd0}}, {0x0, 0x2, {0x2}}, {0x7, 0x1, {0x3, 0x1}}, {0x1ff, 0x46b8, {0x3, 0x7fffffff}}, {0x800, 0x7, {0x3, 0xffff}}, {0x0, 0xffc1, {0x2, 0x2}}, {0x401, 0x4, {0x1, 0x7}}, {0x8, 0xfff, {0x3, 0xffffffff}}, {0x3f, 0x1475, {0x1, 0xfff}}, {0x8, 0x6, {0x3, 0x3}}, {0xdf8e, 0x3, {0x1, 0x1ff}}, {0x9, 0x2, {0x2, 0x1000}}, {0x1000, 0x4, {0x3, 0xc01}}, {0x4, 0x2, {0x2, 0x6}}, {0xcb8f, 0x5e3, {0x3, 0x8572}}, {0x20, 0x9b, {0x0, 0x2}}, {0x5580, 0xa2, {0x2, 0x80000001}}, {0x1fe0, 0x1ff, {0x0, 0x4}}, {0x1000, 0x81, {0x2}}, {0xfffe, 0x7f, {0x0, 0x7}}, {0x756, 0xffff, {0x0, 0x2}}, {0x1, 0x80, {0x3, 0x7fffffff}}, {0x1, 0x2, {0x3, 0x9}}, {0x4, 0x2, {0x3, 0x323b}}, {0x7f, 0x400}, {0xff, 0x1, {0x1, 0x4}}, {0x75b, 0x8000, {0x1, 0x25}}, {0x9, 0x7, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0xab}, 0x8, 0x4, 0x2, 0x2, 0x1c, 'syz1\x00', "37db786ee44af6d60ac34b73476fa1ea66db5e1302df62c005e37b11831f7473", "83c71482cab991640187bea78beeba7b237184e4a74c4db19150c8f6a1bece51", [{0x6, 0x8, {0x1, 0xfff}}, {0x4, 0x1, {0x1}}, {0xb70, 0x81, {0x3}}, {0x8, 0x1ff, {0x1, 0x3}}, {0x80, 0xc000, {0x3, 0xef}}, {0xffff, 0x0, {0x2, 0xff}}, {0x7f, 0x8, {0x0, 0x7}}, {0x800, 0x3, {0x0, 0xff}}, {0xff, 0x1, {0x3, 0x3f}}, {0x2, 0x8, {0x0, 0x3}}, {0x0, 0x7b76, {0x2, 0x7}}, {0x3f, 0x4000, {0x0, 0x5}}, {0x1, 0xfff, {0x2, 0x200}}, {0x40, 0x6, {0x3, 0x4}}, {0x7, 0xffff, {0x3, 0x8}}, {0x200, 0x6aab, {0x1, 0xc}}, {0x7f, 0x100, {0x1, 0x1}}, {0x8, 0x0, {0x3, 0x5}}, {0x8, 0x7f, {0x3, 0x8}}, {0x7f, 0x400}, {0xffff, 0x0, {0x0, 0x1d}}, {0x8, 0x4, {0x1, 0x7}}, {0x400, 0x6, {0x3, 0x1}}, {0x80, 0x8, {0x0, 0x1}}, {0x6, 0xffff, {0x0, 0x3}}, {0x4, 0x20, {0x0, 0x8}}, {0x8, 0x8000, {0x2, 0xffffffff}}, {0xbd3, 0x7, {0x2, 0x6}}, {0x7, 0x1, {0x2, 0x10001}}, {0x754d, 0x3f, {0x3, 0x5}}, {0x4, 0x1, {0x2, 0xffff}}, {0x1, 0x3, {0x0, 0x78304f3b}}, {0x3ff, 0x2, {0x1, 0x675}}, {0x2, 0x81, {0x2, 0x7fffffff}}, {0x3, 0x8, {0x3}}, {0x8001, 0xfff, {0x2, 0x2}}, {0x3f8, 0xfffe, {0x2, 0x9}}, {0x1, 0x0, {0x0, 0x4}}, {0x5, 0x5, {0x0, 0xf41c}}, {0x800, 0xff81, {0x1, 0x8}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) r5 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_int(r5, 0x1, 0x13, &(0x7f0000000340)=0x4, 0x4) 07:26:36 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x180) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r2, r0) 07:26:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) setpgid(r3, r4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, 0x0) dup2(r5, r1) 07:26:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x7ffff7, 0x40000000011, r4, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:26:37 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x240) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f00000001c0)={0x1, 0x6, &(0x7f00000000c0)=[0x0, 0x40, 0x80, 0x3, 0x1, 0x3], &(0x7f0000000140)=[0xffc1, 0x0, 0x4, 0x0, 0x7fff, 0x0, 0x585a, 0x7, 0xfe00], &(0x7f0000000180)=[0x0, 0x9, 0xc7, 0xb9]}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000040)={0x0, 0xc, 0x6, &(0x7f0000000000)=0x3}) r5 = dup2(r2, r0) bind$rxrpc(r5, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x9, @remote, 0x5}}, 0x24) [ 665.555728] Bluetooth: Unknown HCI packet type 5e [ 665.560697] Bluetooth: Unknown HCI packet type 43 [ 665.594568] Bluetooth: Unknown HCI packet type 5e 07:26:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x80000001}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) dup2(r3, r1) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r6, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x3}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x11) [ 665.637582] Bluetooth: Unknown HCI packet type 50 07:26:37 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCFLSH(r1, 0x5418, 0x722000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r4}) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$VIDIOC_S_EDID(r5, 0xc0285629, &(0x7f0000000080)={0x0, 0x6, 0x3, [], &(0x7f0000000040)=0xff}) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r6, r0) [ 665.670029] Bluetooth: Unknown HCI packet type 5e [ 665.686178] Bluetooth: Unknown HCI packet type 40 07:26:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendto$ax25(r1, &(0x7f0000000140)="b2195f998f20c519b651c6f1337ada3286d61d18d596ece98409f0c09945856858e1d9882ee22a681ff9002e6815cc3f3fb2c47b9b8fb3e38d4beec8b24c7d8a33ce1daa32c803eec4f1f78a1b39419267308cc95436fe6942050f8ea62c1c5c2d84d23f5ff5ed8e902ccb884bb53854d1213d26254e1476a3c54d4981b6f8eb94b41589a8553de611ac64cccfad8004f4c179c691d5a54602fa49442be6ad5606c2669d1a1013f8ea623c8bfa6f2312293a5a0d0f5b2adf3b12a1", 0xbb, 0x8000, &(0x7f0000000200)={{0x3, @null, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x4101, 0x90) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8811}, 0x84) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video1\x00', 0x2, 0x0) dup2(r2, 0xffffffffffffffff) 07:26:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000040)=0x1) dup2(r3, r1) 07:26:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) dup2(r3, r1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/320], 0x188}}, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc) 07:26:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r3, 0x8818564c, &(0x7f0000000340)) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x44002) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:26:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r3, r1) lookup_dcookie(0xdd6a, &(0x7f0000000300)=""/4096, 0x1000) [ 666.321032] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 666.373685] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 667.584229] Bluetooth: hci0 command 0x1003 tx timeout [ 667.589634] Bluetooth: hci0 sending frame failed (-49) [ 669.664079] Bluetooth: hci0 command 0x1001 tx timeout [ 669.669501] Bluetooth: hci0 sending frame failed (-49) [ 671.744576] Bluetooth: hci0 command 0x1009 tx timeout [ 673.665651] NOHZ: local_softirq_pending 08 07:26:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) dup2(r3, r1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x980000, 0x4, 0x80000000, r0, 0x0, &(0x7f0000000080)={0x990a7b, 0x9, [], @ptr=0x3}}) r6 = socket(0x10, 0x3, 0x0) close(r6) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000140)=r9, 0x4) 07:26:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x4}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)=""/120, &(0x7f00000000c0)=0x78) r2 = dup(r1) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) syz_mount_image$f2fs(&(0x7f0000000140)='f2fs\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x1, &(0x7f0000000240)=[{&(0x7f0000000200)}], 0x10000, &(0x7f0000000780)=ANY=[@ANYBLOB='noheap,jqfmt=vfsv1,fastboot,acl,inline_xattr_size=0x0000000000008000,alloc_mode=default,fowner<', @ANYRESDEC=r4, @ANYBLOB="2c65cad5643d3666eb7e9eda0466174f4c20e4af7e506d6f79d553dbcf406ceaf2682cab6f4f541b083320e99a94bf3d14504af65f8b5788ffe178", @ANYRESDEC=r6, @ANYBLOB, @ANYRES32]) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB, @ANYBLOB="dbb2d656c94e78ce4c0677c10c9639e4ffa27f018d11eef12afe79c94e4cc27de41ae5c0b4cf7c79726a744a807e4058f536e82184a3ed0ab6c89d6782e0e983e46140de72d9e6a545b6583f5446001044e38e12e84f55b005e05fb8a1ff039958a5cc770b62cdfa3a9a9c50854094fe034754fb1c951b1dbb4a1fa4465384c2546ea347d8c84ff5fa7579c2cbbb303eaf6b94fb075ac1a3552384d09f9b08fff857b83b32e2a9e211a508c60920536ac071477d37a0a9abab76f22e941d51219a4e509744faa248d019c27fe18f06ae938cf58a2f0ac7111b06d59cdc10b2d5274176578cb85fe83f5896a48ed78e6feb43904f6d8cb33842d38bc9e3", @ANYRES16=r2]) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:26:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) write$input_event(r4, &(0x7f0000000080)={{0x0, 0x2710}, 0x5, 0x1ff, 0x20}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) connect$phonet_pipe(r5, &(0x7f0000000100)={0x23, 0xdc, 0x1, 0xcb}, 0x10) 07:26:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$poke(0xffffffffffffffff, r4, &(0x7f00000000c0), 0x7) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000080)={@null, @null}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r5}) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f00000002c0)={r7}) dup2(r6, r1) write$char_usb(0xffffffffffffffff, &(0x7f0000000180)="2157d24a5df74ce730ceca7969dc814055d0f246e80df0732f47fbeffa6f9d7ddbd3e91f08fc4eb6c6501be7eb934f93b62c048fb547c02fd9008b4e2e6a9ccdc9412bbe834fca0cd80cfdadde8d38984595794c268973ed178822cf0c7bcd86a1097a20de2573c950c8bd7b66c54dc60e63dc51e0686aa564233dfbe862176f8fd4c6450f9d641df07af6df0b7c0d1082e581c64c76bb0c28a8493ff362a37950ec03fd30085d9b870495f03e88fc09857bf8c3f1b505101e45f0fafc924a3ee4f9916fb0", 0xc5) r8 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_SG_ALLOC(r8, 0xc0106438, &(0x7f0000000140)={0xffffffff00000001}) 07:26:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000001800)=ANY=[@ANYBLOB="8500000022000000350000000000000085000000080000009500000000000000baf43a7714998b71b36355c674aa4de21dff0b0da436337b8999bf7cb0f0fdc5aa70d894f8cd84f0b718c711c8042b7459b596746e00"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64deb09e3732d498}, 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=0x1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000440)={0xfffffffe, 0x0, 0xfffffffb, 0x7}, &(0x7f0000000480)=0x1000020, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xe, 0xb, &(0x7f0000001780)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="00000000ff0300009500000000002cfe5f09636ac21fedc09a7aa91020024e4ee9293ff67c07bf4d2d743082dcfeab0fc88ab50d2d6ff7f91b0643353fcfbc2e2b13f61e31ada71df7"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x8, [], 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x2, 0x6, 0x8}, 0x10, r4, r5}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003b00)={0xffffffffffffffff, 0x10, &(0x7f0000003ac0)={&(0x7f0000003a40)=""/90, 0x5a, r4}}, 0x10) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80b8, 0x0, 0x0, 0x0, 0x5}, [@map={0x18, 0x4}, @call={0x85, 0x0, 0x0, 0x9}, @map={0x18, 0x2}, @alu={0x4, 0x0, 0xa, 0x5, 0xa, 0x100, 0xffffffffffffffff}, @generic={0x1, 0x1, 0x6, 0x2, 0xff}, @call={0x85, 0x0, 0x0, 0x21}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x45, &(0x7f0000000140)=""/69, 0x41000, 0x9, [], 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xb, 0x4, 0x80}, 0x10, r4, r6}, 0x78) fcntl$addseals(r7, 0x409, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r8 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, 0x0) dup2(r8, r1) 07:26:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x2a4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) r4 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x65b, 0x40000) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r4, 0x1}, {r5, 0x60}, {0xffffffffffffffff, 0x80}], 0x3, &(0x7f00000000c0)={r6, r7+30000000}, &(0x7f0000000140)={[0x9]}, 0x8) dup2(r3, r1) 07:26:47 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x440001, 0xf9) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000140)=0x68) dup2(r3, r1) 07:26:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x7, 0x2, {}, {0xee00}, 0xffe000000, 0x3f}) r2 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000240)='./bus\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="040005000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYBLOB, @ANYRES32=0x0], 0xf, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) r7 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/current\x00', 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000240)='./bus\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYRESOCT=r7, @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="040005000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r9, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYBLOB, @ANYRES32=0x0], 0xf, 0x0) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)={{0x2, r1, r4, r6, r9, 0x20}, 0xff, 0x640, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) 07:26:47 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r4 = socket(0xf, 0x5, 0x10000) close(r4) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="00f30000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000180)={r7, 0xfffb, 0x5}, 0x8) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x0, 0x7}) dup2(r2, r0) 07:26:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x188}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)="e26548bfb49919f39264362f1bae0b47f169dbd26b20350ebf454c977c982a03e792b53338bf2f71614a35807869a91cd45c3c0a2e95a7b79c5f7f9b3c250d53edddb9597d769f48d1e90e4d3ed88beb939f9b1cfc890f453f2f809bb6c9da8258a343f807c8d8caea95a02b73f1623b11", 0x71, r1}, 0x68) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000080)=0x5) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 675.854613] Bluetooth: Unknown HCI packet type 5e [ 675.859540] Bluetooth: Unknown HCI packet type 43 [ 675.881051] Bluetooth: Unknown HCI packet type 5e [ 675.927472] Bluetooth: Unknown HCI packet type 50 [ 675.932413] Bluetooth: Unknown HCI packet type 5e [ 675.975028] Bluetooth: Unknown HCI packet type 40 07:26:47 executing program 0: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2202, 0x22) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000500)="c31e5ae3b34912dbd1cb96b1b1c5502760eeafcbf6ee15d5862037af509e80c76babeae9f2d1a76a5e6e98958dba55d22ec364c555070ff9191103e7c4f09c9158b3b2d6d545ef7bc5eb9a91fe985ad4a0c5d8d8986e1ba923cdfcefbad91778830b71b5426d428c2a1847223c7f0c4c5ccd6f365b308798b26b9683f139535249d16342e6d155084f7141310614886760eb24a6e2935f6eda7eb453ac4c352d942ef71e8271541f315a79754f16b4aa3740bee53ec9e4acdfb404e5faf9ae99c80540c0ef817c66f1aa5ea3369681df179094685d5bc94b710758036ebef7d43a3a287164994b") ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, &(0x7f0000000400)={0x0, &(0x7f00000003c0)=[&(0x7f0000000440)="1d84bbd6239b40863cd555ce5e7bc28e1dcf6533832f1c40eec8ed07248fa599ec8e1e20c4a27a975475361215df81fb372387460dcd37e22e1e0cbc302740893f5fcd65bad716c287547bfccc8c08f1062220ff8ea4d10b742495171b26bf921ce47006c13fd406a4c7d714b76036a94976c8a6ee7cd7a1ad7f2ed48b5edc7efb84f21e3eca91e1d5cda85e7f45c6c4bafd89877e4c09126414c979947a9435a4e4c27e7528dc9467d48d317c17a59930e7d2f75012ac", &(0x7f0000000140)="753fe0cea1f8e40a28d180b2b5ddaf20f29ae7d307e030294bde856b53b9b3c943d1c83cfab6c7213c1d968814853b5dcc7347f31c843c34c450d0e0d197fd31e5ff53f6a6fbc9e4fe346bd547217c0e0143176d13d0ba217c10504a2b114584cd8b82225afb182e569981211c2a1e202d1f2001c0c124b70ef6eb2a6c6810c13d13675d96b8dcc6fc878fd36b02c2478fdf6d9a5430540aa18c1927f140e4b5d3857aadaf19ea231269a7b47c169e", &(0x7f0000000200)="d1c35412ff591efd9436df5f0d19557265950543093e3d1435c388d23f49978a9f1262c23d531301f7b6ff84d22b530022631e4b3a28cf37fd968ac22a6fa698c328e2f1f2471466e4b6d0dfe9acbc10e65c9df51f896c40892122cbdeb7c23767af22f70825e49e8bd783ec1836cd768071fc780a", &(0x7f0000000280)="dacc9a5b5a6e1e40556be931040057ee3cfd7009f09414e64ed5f573c78c2597c577e0e3435ef1d315db926debf13c4ae5663d1fdf94d31575", &(0x7f00000002c0)="d4291be275d235c562e66ca05eda1b04ee31c57f089f92b7e5caaa3ee2b0b46b958bd621a1e9bd3fac35f186f55207474e8c0c1a0b50cde7edbea4dc78c25172b40fe1c5275aae2e153a8332003d3ccce850579599c3f46bdf8bc3b904775c41a11d79e3a00ecd34d4442b6a52e7903d6790854ae26ca5b7f04c05c8b2e09ba2210ab8cdd90d7886d94d271f8d2a55256d5a285edbcfa2fee7c087c2bf83bbfed6634ed5a5b9bc75a7c1c173711c06e66ce8305abd60c3d04a0d8b4d95432e1e7bfb4423691cb858bac0944cbb4636b77594274786e3defe7023e7b3baeaa08e15c67ecd161892d8de7ec590fdf46e255b998475aa"], 0x9}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') r4 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7, 0x10080) sendmsg$AUDIT_USER(r4, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, 0x3ed, 0x800, 0x70bd2b, 0x25dfdbfb, "ebfde9bb2ce333efdee363b66a14cad9ea444defe05fab75ab9189f64f14da86cc578f79aeddc0a971943ae09869723e9f431626fb39bb425ef0c029351cef8e9acdcf478617a3cdf470f4", ["", "", "", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x800) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r5, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:26:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000080)={{0x3f, 0x8}, 'port0\x00', 0x20, 0x1064, 0x60000000, 0x10000, 0x8, 0x704, 0x8, 0x0, 0x7, 0xd2}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x7fffff, 0x40000000011, r2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:26:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x37ffffb, 0x810, r2, 0xffffd000) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:26:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x2}, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0xb) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) write$6lowpan_enable(r3, &(0x7f0000000040)='1', 0x1) 07:26:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6bc3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:26:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x401) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:26:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1000, 0xc4100) socket$pppoe(0x18, 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="880000000008fc0400000000000000005800000705000300110000000900010073797a30000000000c0004800800014000000002050003003a000000340004800800094000000001080004400000000308000940000000080800044000000007080006400000800108000840000000ed06000240060000000600024088f80000000003002f000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000814}, 0x20000000) 07:26:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x4000010, r2, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)={0xffffffff7fffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_vlan\x00', 0x3}, 0x18) 07:26:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6bc3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 677.903470] Bluetooth: hci0 command 0x1003 tx timeout [ 677.908800] Bluetooth: hci0 sending frame failed (-49) [ 679.983376] Bluetooth: hci0 command 0x1001 tx timeout [ 679.988717] Bluetooth: hci0 sending frame failed (-49) [ 682.063176] Bluetooth: hci0 command 0x1009 tx timeout 07:26:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) r4 = open(&(0x7f0000000080)='./file0\x00', 0x280, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) dup2(r3, r1) 07:26:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$poke(0xffffffffffffffff, r4, &(0x7f00000000c0), 0x7) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000080)={@null, @null}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r5}) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f00000002c0)={r7}) dup2(r6, r1) write$char_usb(0xffffffffffffffff, &(0x7f0000000180)="2157d24a5df74ce730ceca7969dc814055d0f246e80df0732f47fbeffa6f9d7ddbd3e91f08fc4eb6c6501be7eb934f93b62c048fb547c02fd9008b4e2e6a9ccdc9412bbe834fca0cd80cfdadde8d38984595794c268973ed178822cf0c7bcd86a1097a20de2573c950c8bd7b66c54dc60e63dc51e0686aa564233dfbe862176f8fd4c6450f9d641df07af6df0b7c0d1082e581c64c76bb0c28a8493ff362a37950ec03fd30085d9b870495f03e88fc09857bf8c3f1b505101e45f0fafc924a3ee4f9916fb0", 0xc5) r8 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_SG_ALLOC(r8, 0xc0106438, &(0x7f0000000140)={0xffffffff00000001}) 07:26:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000000)={0xa, 0x21, &(0x7f00000001c0)="a9595fa9c19e74ed5cae56ddb0518434911e1da61e245a45c482e496f8a434a007866d8dae3d1ebdbb55a1819268720e159cfe0f4525432ae6c6464ccc3e2908584b057e1b3a6d51891a017bf7a0d9d31c5b905ad202ffef998525a141a57e824b2cbd76c48423200b4ba35e41622974c1ad47f1e414596f7154afc29946e35769f341344676f18d1bd42808f71d4679fbceaa03884fbe7f1aa61f6860e15a9b91c683d7159575b50c9bd76a7b2e805f15a003d6d963e040c91430a4d4a25b66f210b1a87207c528e766e1b70e03c6d53484426c8fc8065ed9085102df41766c", {0x1, 0x4, 0x32314247, 0x7, 0x8, 0xffffffff, 0x3, 0x4}}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:26:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5}) r6 = socket(0x10, 0x3, 0x0) close(r6) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x1, 0x10001, 0x4, 0x6, 0x1ff, 0x7, 0x3, {r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}}, 0x6, 0x5, 0xfffffff9, 0x0, 0x40}}, &(0x7f0000000080)=0xb0) dup2(r4, r1) 07:26:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000040)=0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x10004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r3 = socket(0x10, 0x3, 0x0) close(r3) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={r6, 0xa0, &(0x7f0000000380)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x40}, @in6={0xa, 0x4e23, 0x6a0, @local, 0x1}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e23, 0xffff8001, @remote, 0x6}, @in6={0xa, 0x4e24, 0x4, @empty, 0x2}]}, &(0x7f0000000140)=0x10) dup2(r1, r2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) 07:26:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) dup2(r3, r1) 07:26:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000ffffffff000000000000000000000000ff01000000000000000000000000000100"/51, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000004d0014006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000002000000"], 0x188}}, 0x0) fgetxattr(r4, &(0x7f0000000000)=@random={'system.', '/dev/dri/card#\x00'}, &(0x7f0000000040)=""/24, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) dup2(r3, r1) 07:26:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5}) r6 = socket(0x10, 0x3, 0x0) close(r6) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x1, 0x10001, 0x4, 0x6, 0x1ff, 0x7, 0x3, {r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}}, 0x6, 0x5, 0xfffffff9, 0x0, 0x40}}, &(0x7f0000000080)=0xb0) dup2(r4, r1) [ 686.799089] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65535 sclass=netlink_xfrm_socket pig=20350 comm=syz-executor.2 07:26:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r1, 0x711, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) 07:26:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) dup2(r3, r1) 07:26:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x77e5895a1e7025da) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) dup2(r3, r1) [ 686.916589] Bluetooth: Unknown HCI packet type 5e [ 686.922257] Bluetooth: Unknown HCI packet type 43 [ 686.943091] Bluetooth: Unknown HCI packet type 5e [ 686.959296] Bluetooth: Unknown HCI packet type 50 07:26:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) dup2(r3, r1) 07:26:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x58080, 0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000040)={0x3, r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) dup2(r3, r1) [ 686.984001] Bluetooth: Unknown HCI packet type 5e [ 686.995477] Bluetooth: Unknown HCI packet type 40 07:26:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0x5, 0x7fffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0xd000, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x6}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f00000000c0)={0x80000000, 0x2, 0x1, 0x4, &(0x7f0000000080)=[{0x80, 0x6, 0xffff, 0x1}, {0x101, 0x1000, 0x6, 0x7}, {0x9, 0x4, 0x9, 0x1}, {0x7, 0x4, 0x7, 0x4}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000002c0)={r7}) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xd, 0x4000000000000800, 0x1}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r8, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r8, &(0x7f0000000040), &(0x7f00000001c0)=""/4096}, 0x18) dup2(r5, r1) 07:26:58 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x158, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 07:26:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = semget(0x3, 0x2, 0x10) semctl$GETNCNT(r3, 0x3, 0xe, &(0x7f0000000000)=""/29) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, 0x0) dup2(r4, r1) 07:26:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r3 = open(&(0x7f00000007c0)='./file0\x00', 0x10a00, 0x20) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, &(0x7f0000000080)='/\x8fuI\x05\x8a\xbeE\xd7\xf3z\xdeIc\x1a\xf2\xd9m\x8bi\xe2\xeb>\x85\xa0\xbf\x96\xea<\xd9Bxsa\xa1\xb1\xfd\xbf\x01\xac\xafg\xfc4%\xab\tP\v\xc2\xfd\xedw\xf0j\xcfx\xe5\x9c@\x83\xb8>TM\xd6\xab\xbeH\x90\xb0X\xa2\xa6\x15+m\xd3\xed4\xb2N\xa0O\xc8u\xfdl\x88\x9aH \xf9\x8e,\x86G\xc7v\xc2sd\xbfb\x82\x92,m\xcfF\xc2\xce\xf5(\xaf\x00\x00\x00\x00') 07:26:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000000)={0x400, 0x4, 0x7, 0x9, 0x6, 0x2d9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, 0x0) dup2(r4, r1) [ 687.640018] ecryptfs_parse_options: eCryptfs: unrecognized option [/uIŠ¾E×ózÞIcòÙm‹iâë>… ¿–ê<ÙBxsa¡±ý¿¬¯gü4%« P ÂýíwðjÏxåœ@ƒ¸>TMÖ«¾H°X¢¦+mÓí4²N OÈuýlˆšH ùŽ] [ 687.669928] ecryptfs_parse_options: eCryptfs: unrecognized option [†GÇvÂsd¿b‚’] [ 687.706532] ecryptfs_parse_options: eCryptfs: unrecognized option [mÏFÂÎõ(¯] [ 687.722519] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 687.756610] Error parsing options; rc = [-22] 07:26:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0xeeb3, 0x81, 0x1, 0x3, 0xffffffff}, 0x14) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, r4) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="519c8713c68a875596843a0564c04bccdbc479e26e599e116ee6bf00231bde5ad5cdd361958bce7142627c1ca3678ad59186ffeb9ca89e954fc661f7d6ab393716385bb6f9ff48b3258086a7ab32fb03f34a757f826d", 0x56, r4) 07:26:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000380)=[{0x4, 0xffff}], 0x1) semop(r4, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$GETVAL(r4, 0x3, 0xc, &(0x7f0000000000)=""/228) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x60, 0xa8d4, 0x9}) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x20002, 0x0) ioctl$KDENABIO(r6, 0x4b36) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) dup2(r3, r1) [ 688.952837] Bluetooth: hci0 command 0x1003 tx timeout [ 688.964708] Bluetooth: hci0 sending frame failed (-49) [ 691.022611] Bluetooth: hci0 command 0x1001 tx timeout [ 691.028001] Bluetooth: hci0 sending frame failed (-49) [ 693.112491] Bluetooth: hci0 command 0x1009 tx timeout [ 694.143918] NOHZ: local_softirq_pending 08 07:27:08 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000100)=[{&(0x7f00000001c0)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d731c7bfcfcf58586c05abed99f3581a7a6a34835c7dbaeaba58c7b5ee3c124d386dfd3c86867e9695dbb790818e6c65d4837d7ecbe1c53678166c9958107639e6e45d0b9c4f65854b8d9939d06dd35f9a64f930ba3b1afa357d7d342162cd04e8022822474774ced79cf85eeb04f30c98ce3a21b1237783376267295b1e440c05dae", 0xca, 0x10000}, {&(0x7f00000000c0)="0b714928fd98df370f25d1b1f26f5056ce41a752fc34949dd4bb497021f23784738d75b94cd96c89622924a5a67e", 0x2e}], 0x880800, 0x0) 07:27:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x101, 0x800, 0x3f, 0x8, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x6, 0xa8d4, 0x9, 0x6, r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, 0x0) r5 = dup2(r4, r1) bind$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @any, 0x7}, 0xa) connect$rose(r5, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) 07:27:08 executing program 1: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) write$P9_RLCREATE(r3, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x1, 0x1, 0x2}, 0xfffffc00}}, 0x18) ioctl$void(r1, 0x5450) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x188}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x7}]}}}]}, 0x48}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000d40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000780)={0x568, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xfe}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x7f, 0x36, 0xf7, 0x3}, {0x5, 0x8e, 0x42, 0x7ff}, {0x401, 0x7c, 0x76, 0x100}]}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x3, 0x93, 0x8, 0x1000}, {0x0, 0x40, 0x2, 0xfffffffc}, {0x20, 0x6, 0x1, 0x6d}, {0xfff, 0xbe, 0xfd, 0x935}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xa4}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x81, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xe877}}}]}}]}, 0x568}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000140)={0x38, 0x2, 0xc, 0x0, 0x5, 0xffffffffffffffff, 0x9, 0xfffffffffffffffc}, 0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f00000000c0)=r5) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:27:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f00000002c0)="1975b710bdf61e81b4c8b057a5", 0xae, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000180)={r2, 0x78, 0x2d}, &(0x7f0000000540)=ANY=[@ANYBLOB="656e633d6fc5200000000000244e7339b32524d331808f48abfb00000000000000000000000000000000000100000000000000000000000000000000000000a0752edf25ec7f182f359cc8eca8e036c9fa121ef4e67359d4487f10c8850d82a37a4eec34770f59aabfb41526b040b900"/122], &(0x7f00000001c0)="1251f6b4a3b4ac0d758ee7fccd9e73cfc39106d963491284336816e9c3ba43bf4458098c5716aef85f4b62ce8aed21c633d0a484b14815bd35ae88f52032e172ec465f969f3a5f05491c4e6aae897ee31281d52e194e84798084ba2e5700478012b2eeea58ddfcf96b93478ed6ea30bf9aeeb6d0a73649a0", &(0x7f00000000c0)=""/45) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000004c0)={0x1, 0xc98, 0x5, 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000500)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000002c0)={r4}) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x5, 0x5, 0x1, 0x9, 0x0}) accept$inet6(r6, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x1c) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r8}) r9 = syz_open_dev$dri(0x0, 0x0, 0x400280) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r9, 0xc01064b3, &(0x7f0000000480)={r10}) dup2(r9, r3) 07:27:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x620800, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x9, 0xfdffffff, 0x2, 0xba2c}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000340)={"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"}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000080)=0x10000000002) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockopt$ax25_int(r5, 0x101, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r6, r1) 07:27:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x440, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000200)=0x80000000) getpeername$netrom(r2, &(0x7f0000000100)={{0x3, @netrom}, [@default, @netrom, @default, @netrom, @null, @netrom, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:27:08 executing program 0: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) close(0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) unlink(&(0x7f00000000c0)='./file0\x00') r0 = getpgid(0x0) kcmp(0x0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) unshare(0x600) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xff, 0x0, 0x1, 0x6115}) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000080)=0x101, 0x4) 07:27:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x81, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x4000, &(0x7f0000000240)={'trans=unix,', {[{@dfltuid={'dfltuid', 0x3d, r2}}, {@cache_mmap='cache=mmap'}, {@access_any='access=any'}], [{@euid_gt={'euid>', r4}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@seclabel='seclabel'}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}}) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) read$eventfd(r5, &(0x7f0000000040), 0x8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) 07:27:09 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f00000000c0)=0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x24}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0xffffffc1, @mcast2}, r2}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x24}, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0xffffffc1, @mcast2}, r4}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r5, 0xa}}, 0x10) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f00000002c0)={r7}) r8 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r8, r6) 07:27:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendto$l2tp6(r3, &(0x7f0000000300)="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", 0x1000, 0x20000000, &(0x7f0000000000)={0xa, 0x0, 0xfffffff9, @empty, 0x8001, 0x2}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, 0x0) dup2(r4, r1) 07:27:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'wg1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000200)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x50, 0x3c, 0x0, @local, @mcast2, {[@routing={0x0, 0x0, 0xff}], {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xffff, 0x8]}}}}}, 0x82) 07:27:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r0, 0x0, 0x1b, &(0x7f0000000100)=""/85, &(0x7f0000000080)=0x55) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendto$inet(r3, 0x0, 0x0, 0x1000000020000000, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) [ 697.561089] Bluetooth: Unknown HCI packet type 5e [ 697.566182] Bluetooth: Unknown HCI packet type 43 [ 697.595049] Bluetooth: Unknown HCI packet type 5e [ 697.600232] Bluetooth: Unknown HCI packet type 50 07:27:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x2, 0x501200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, 0x0) dup2(r4, r1) [ 697.627681] Bluetooth: Unknown HCI packet type 5e [ 697.651310] Bluetooth: Unknown HCI packet type 40 07:27:09 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) syz_open_dev$dri(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000004d00140004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000002000000"], 0x188}}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = dup2(r3, r0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000000)=0xffff, 0x4) 07:27:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = open(&(0x7f0000000000)='./file1\x00', 0x111000, 0xca) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000002c0)=0x0) perf_event_open(0x0, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/82, 0x52}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xc}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) r8 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, r8) request_key(0x0, 0x0, &(0x7f0000000480)='\xf3F|$\x00\xac\xfaC\xe8{\x89\x80F\xc7G\xb7\xc0#z\xa1{\x91[\xd48+_\x1b\xb9\xd3t\x18\xd0\xe6\xfc\xb1+\r\x95\xd3HyV\b\xf5\xa2\xaa\xf2\xefz\x98\xff\xbb2\x1e\x81\x8c\xd3\xab*^\x93\xba\xe8\xe3[W\x82W', r8) keyctl$read(0xb, 0x0, &(0x7f0000000100)=""/50, 0x32) 07:27:09 executing program 4: socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x41) io_setup(0x11fb, &(0x7f00000004c0)=0x0) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x0, 0x2, 0x0, 0x2}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r8, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080fffffffe) 07:27:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110700000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xfffffffffffffe80) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100039042bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002800128008000100736974001c000280080001007f2cf85e55b19909915658691dfb73a995b507cf6886359f39ad29d8329a0411cff81e61e6357f5792c98424ab8807f404f42dea8a5b772bc6850c46fc2f257cc8f80e4dc4dd13fad6385eabad609df38036157842e0dd2e29", @ANYRES32=r7, @ANYBLOB="0800000106000e000700000000000000"], 0x5}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x1, 0x100, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x6000040}, 0x44880) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:27:09 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000080)) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) syz_open_dev$dri(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) open(&(0x7f0000000000)='./file0\x00', 0x41, 0x161) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x1cc, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x8b, 0x2, {{'ecb(cipher_null)\x00'}, 0x218, "3d182b98f7e80ff9e9b604a28ecaa7791cd74598f08c809c9976b9f29a646d5619c3bb955e0100b93f8cc8c9a2d7e0225f2eeb1ec115c20fa327ced3b8eae0dbf593f0"}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x1cc}}, 0x0) 07:27:09 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) setreuid(0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0/f.le./file0\x00', &(0x7f0000000380)='fuse\x00', 0x170000, &(0x7f0000000500)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xb555}}, {@blksize={'blksize', 0x3d, 0x1c00}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner'}}, {@subj_role={'subj_role', 0x3d, 'overlay\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'wlan0\x8b'}}, {@dont_hash='dont_hash'}, {@uid_lt={'uid<'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'overlay\x00'}}, {@uid_gt={'uid>'}}, {@hash='hash'}]}}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000100000000000000040005000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0800042785f0f0a2fe2ef32c7497aeb6c23264996cc84218081cde6402ab2f55105acf135ccbb0340aa75e131400754fcd97c8a8ea79fa69552f2671b37293dd598d24f14aeb9376e3d021458ed8f86ae95632742152428f9259a3a911d6a5c7eeaa2e6b2520a61906d5ff8ff66c9550c1a8c9eeade00b42ac1debdcfe54e3b84b0569f3603d5d10a72bf05e693a6f52caa1833d9b6d65befa0980526e782d4118549b79a2ceca67f5c7550a717ef32212e7", @ANYRES32=0x0, @ANYBLOB="10000000000000002000040000000000"], 0x4c, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000000", @ANYRES32, @ANYRESHEX=r0], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="28000000ce93010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x5}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2dadb200c417e8841b5bf6253db45be705477e3692771bce4309cbfda44517170eb4bedb22d693b31c76a8", @ANYBLOB="022000000022fce38db7c1bc", @ANYRES32, @ANYBLOB], 0x4}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbf9, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044804}, 0x4008841) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') [ 697.867096] audit: type=1804 audit(1585898829.365:109): pid=20479 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir583634963/syzkaller.b0AxXB/252/bus" dev="sda1" ino=15825 res=1 [ 697.977698] overlayfs: filesystem on './file0' not supported as upperdir [ 699.581961] Bluetooth: hci0 command 0x1003 tx timeout [ 699.587553] Bluetooth: hci0 sending frame failed (-49) [ 701.661831] Bluetooth: hci0 command 0x1001 tx timeout [ 701.668446] Bluetooth: hci0 sending frame failed (-49) [ 703.741669] Bluetooth: hci0 command 0x1009 tx timeout 07:27:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e24, @rand_addr=0x4}, {0x2, 0x4e21, @multicast2}, {0x2, 0x0, @multicast1}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000000000, 0x8}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xe40, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000140)) ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f0000000100)) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) write$P9_RRENAME(r1, &(0x7f0000000240)={0x7, 0x15, 0x2}, 0x7) recvfrom$phonet(r4, &(0x7f0000000180)=""/66, 0x42, 0x0, &(0x7f0000000200)={0x23, 0x3b, 0x1, 0x5}, 0x10) 07:27:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1402, 0x300, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:27:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="b54cf9654b73f21d7c7d6549b16927d2c5305482d5a65a3eea29c42fffab1e06d4825e13e37b17c7fb268916a82318e8e8e801aed930cdda4a028d19decf46334337472370917e27c2225c654096bb4b13d4a5211523d23fe95299d91ebfd19031b93e3401133f28d47c23da182321fe8db3966ec3793216b13e2940b462ceb908e9806beebef999413a8ce8abbf6fffe8b393e2eab8b76c24b272346ab104836f6ae0d4bd1b1634461f9d5a47a9eb51aa92b2d2eeed4c9e487e56d12b7a8a063353291eb511", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="a54bc945ca09ab2c16cef72326e6a923ca", 0x11}], 0x1}}], 0x2, 0x4000000) 07:27:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10001, 0xbe}) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000000040)={r5, 0x5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff0000000000000000af27d1cbff01000000000000000000000004000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000004d0014006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000002000000"], 0x188}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c56dcd5b5e3d06020000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000004d0014006d6435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800e9ffffff0000020000000183beaaccf70fde5b9c90d03352a7b263cffd3e30e32dffe7f48a04e0acec2145a944141655d75d988549696e40b531e52919a3a4b4c8025cb5b8553638c2ef521a276da2e746fb251a30eefd658a788327f57a39c088"], 0x188}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r7, r0) 07:27:19 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x1, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0xfffffffa, 0x400, 0x369, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r2}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000002c0)={r4}) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r5, r3) 07:27:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000100)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r5, 0x4) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0xf000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) creat(&(0x7f0000000140)='.\x00', 0x80) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) ioctl$KDADDIO(r6, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) 07:27:19 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x5c1c00, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000040)={0x9}, 0x4) dup2(r2, r0) 07:27:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) syz_open_procfs(0x0, 0x0) r1 = creat(0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x40000) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="ffff0000", @ANYBLOB="100029bd7000ffdbdf2521010100060098"], 0x2}, 0x1, 0x0, 0x0, 0x20040080}, 0x4040044) close(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) acct(0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xb0ace1131912d42a) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write(r2, &(0x7f00000001c0)='s', 0xffcf) 07:27:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) dup2(r3, r1) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$TIOCSBRK(r4, 0x5427) 07:27:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:27:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) 07:27:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10001, 0xbe}) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000000040)={r5, 0x5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff0000000000000000af27d1cbff01000000000000000000000004000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000004d0014006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000002000000"], 0x188}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x188}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r7, r0) 07:27:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r4 = accept4$rose(r3, 0x0, &(0x7f0000000040), 0x40000) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x63) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:27:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) dup2(r3, r1) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x4}) 07:27:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x2}, 0x10) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f00000000c0)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) 07:27:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_elf64(r0, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0xb10) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback={0x0, 0x300}}, {@in=@multicast1=0xe0000008, 0x2, 0x3c}, @in=@rand_addr=0x80000001, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) 07:27:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x6000, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x1000, 0x80) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0xfffffffd, 0x6fa, 0x4, 0xfffffff7, 0xf, "85575e2db7b066b61ebb98dbb3451367751ca7"}) 07:27:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000100)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r5, &(0x7f00000001c0)={0x38, 0x5, 0x38, 0x5, 0x3ff, 0x3ff, 0xfffffffffffffff8, 0x3ff, 0x4, 0x8}, 0x0) r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f00000002c0)="1975b710bdf61e81b4c8b057a5", 0xae, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x218, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$get_keyring_id(0x0, r6, 0x1ff) sched_setaffinity(r4, 0x8, &(0x7f0000000000)=0x7) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000140)=0xd6, 0x4) [ 707.968701] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2052 sclass=netlink_xfrm_socket pig=20542 comm=syz-executor.4 07:27:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=""/29, 0x1d) dup2(r3, r1) [ 708.021529] mip6: mip6_destopt_init_state: spi is not 0: 33554432 [ 708.063285] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2052 sclass=netlink_xfrm_socket pig=20542 comm=syz-executor.4 [ 708.063906] mip6: mip6_destopt_init_state: spi is not 0: 33554432 07:27:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) syz_open_procfs(0x0, 0x0) r1 = creat(0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x40000) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="ffff0000", @ANYBLOB="100029bd7000ffdbdf2521010100060098"], 0x2}, 0x1, 0x0, 0x0, 0x20040080}, 0x4040044) close(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) acct(0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xb0ace1131912d42a) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write(r2, &(0x7f00000001c0)='s', 0xffcf) 07:27:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) select(0x40, &(0x7f0000000040)={0x3, 0x410000000000000, 0x400, 0x3, 0x4, 0x8, 0x9, 0x80}, &(0x7f0000000100)={0x10000, 0x9, 0x4, 0x80, 0x0, 0x10000, 0x2, 0x1c0}, &(0x7f0000000140)={0x10, 0xfffffffffffffffa, 0x1, 0x9ed4, 0x200, 0x20, 0xdb5, 0x7f}, &(0x7f0000000180)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) 07:27:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ptrace(0x10, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x8000, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 07:27:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000040)={0x54, 0x7f, 0x24, {0x86, 0x4}, {0x404, 0x3}, @const={0xfff2, {0x9, 0x9, 0x20, 0x1}}}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) r5 = dup2(r3, r1) ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, &(0x7f0000000000)={0x9, 0x2, 0x658a, 0x0, 0xffff, 0x6, 0x5}) 07:27:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x5, 0x2b8900) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x381005, 0xa0) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f00000000c0)={0x14, 0x8, 0x9, 0x8, 0x80000001, 0x401, 0x1000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x8, 0x80, 0x9}) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, 0x0) dup2(r4, r1) lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:initctl_t:s0\x00', 0x1f, 0x0) [ 708.504220] Bluetooth: Unknown HCI packet type 5e [ 708.509660] Bluetooth: Unknown HCI packet type 43 [ 708.539798] Bluetooth: Unknown HCI packet type 5e [ 708.666942] Bluetooth: Unknown HCI packet type 50 [ 708.908075] Bluetooth: Unknown HCI packet type 5e 07:27:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) gettid() r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) dup2(r3, r1) [ 708.954839] Bluetooth: Unknown HCI packet type 40 07:27:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0xa}, 0x8001, 0x0, 0x10, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340), 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$perf(&(0x7f00000e1000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r1, 0x6) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)='i\ra', 0x3}, {0x0}], 0x2) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0xd, 0x16, 0x8, 0x400, 0x1, 0xf2}) read(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000829dc7e36dc3d7e26a59cec28b5c4f5bcfabd66c7eb5af882e57c6f67439883471b1ac9b142fb158157630c0cacc222d4e16a74eda43c745289dd9aa891931ca010a8becec8a0f8ccef14cf88290e35c377403f6379a39f3ceb0409cc696d11ffa867cfc155ac55b7f512616fa2544fd1cb75ab74ed7ede77e67fae3e859425692385c0bf9571e0b36ce6d89f14b0ac04d27965920c2531de58ab0212ea560bf6dc4a13082060e", @ANYRES16=0x0, @ANYBLOB="000025bd7000ffdbdf25010000000000000017410000020c007e73797a30000000e35ccfe6258cfcecd65ac28702d17c4bbe6ff717e28a07c55e3d541f69fd9f6eeab15fd2a8bacdbe7650271edac89875d40a3747"], 0x28}, 0x1, 0x0, 0x0, 0x40008c0}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0xc004510e, &(0x7f0000a07fff)) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x79) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 07:27:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x8000, 0x40) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'macvlan1\x00', {}, 0x3}) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) truncate(&(0x7f0000000000)='./file0\x00', 0x6) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) r1 = socket(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) close(r1) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={r4, 0x4, 0x8}, 0x8) 07:27:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x8000, 0x40) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'macvlan1\x00', {}, 0x3}) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) truncate(&(0x7f0000000000)='./file0\x00', 0x6) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) r1 = socket(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) close(r1) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={r4, 0x4, 0x8}, 0x8) 07:27:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8001]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r5 = fcntl$getown(r4, 0x9) syz_open_procfs(r5, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x48, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfff9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:27:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140)={0x2, 0x18f0, 0xebaf, 0x3ff}, 0x8) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtclass={0xf8, 0x28, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff2, 0xe}, {0x7, 0x1}, {0xffff}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @TCA_RATE={0x6, 0x5, {0xe6, 0xff}}, @tclass_kind_options=@c_tbf={0x8, 0x1, 'tbf\x00'}, @tclass_kind_options=@c_ingress={0xc, 0x1, 'ingress\x00'}, @tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x1}}}, @tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x78, 0x2, [@TCA_ATM_HDR={0x1c, 0x3, "48e57da4a2a9da568a33a0c115de1c6abf5becb60c42f4a1"}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r6}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_HDR={0x4}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xe}}, @TCA_ATM_HDR={0x31, 0x3, "5737b4615c62a2e772ed4f32af92ad72b7dffd5f198661bc1d443865c87d72bf0e7c2c739fe3e2aa1171282c8c"}]}}, @tclass_kind_options=@c_netem={0xa, 0x1, 'netem\x00'}, @TCA_RATE={0x6, 0x5, {0x11, 0xc}}, @TCA_RATE={0x6, 0x5, {0x1, 0xc9}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f00000004c0)=0x11, 0x4) [ 710.019539] kvm [20603]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x4000004c data 0x6 [ 710.203473] kvm [20603]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x4000004c data 0x6 07:27:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f00000000c0)) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:27:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8001]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r5 = fcntl$getown(r4, 0x9) syz_open_procfs(r5, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x48, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfff9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 710.425951] kvm [20622]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x4000004c data 0x6 [ 710.541716] Bluetooth: hci0 command 0x1003 tx timeout [ 710.551492] Bluetooth: hci0 sending frame failed (-49) [ 712.621094] Bluetooth: hci0 command 0x1001 tx timeout [ 712.626420] Bluetooth: hci0 sending frame failed (-49) [ 714.703063] Bluetooth: hci0 command 0x1009 tx timeout 07:27:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x20000, 0x0) ioctl$SIOCRSACCEPT(r2, 0x89e3) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000140)={r1, 0x80, 0xae, r5}) 07:27:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x40b00) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xfff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:27:30 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, "f7654ac5cabd25731be4b99c84ce0900000000000000e0df281081a3354f245ae44def6cbaf010638fc0accc82d18caa57e447f8b6e88535055ae64350fb72eadacb18e8e4dfca915817fd06a6103adf283eb84a5d866b789f4febaded90b65ff9cc2065"}, 0x65) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000140)="616944a489ce741980be3eb32a141cb90000718f25586778ee85e131dd65ca00"/45) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000)={0x7, 0x7e}, 0x2) 07:27:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0xa}, 0x8001, 0x0, 0x10, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340), 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$perf(&(0x7f00000e1000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r1, 0x6) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)='i\ra', 0x3}, {0x0}], 0x2) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0xd, 0x16, 0x8, 0x400, 0x1, 0xf2}) read(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000829dc7e36dc3d7e26a59cec28b5c4f5bcfabd66c7eb5af882e57c6f67439883471b1ac9b142fb158157630c0cacc222d4e16a74eda43c745289dd9aa891931ca010a8becec8a0f8ccef14cf88290e35c377403f6379a39f3ceb0409cc696d11ffa867cfc155ac55b7f512616fa2544fd1cb75ab74ed7ede77e67fae3e859425692385c0bf9571e0b36ce6d89f14b0ac04d27965920c2531de58ab0212ea560bf6dc4a13082060e", @ANYRES16=0x0, @ANYBLOB="000025bd7000ffdbdf25010000000000000017410000020c007e73797a30000000e35ccfe6258cfcecd65ac28702d17c4bbe6ff717e28a07c55e3d541f69fd9f6eeab15fd2a8bacdbe7650271edac89875d40a3747"], 0x28}, 0x1, 0x0, 0x0, 0x40008c0}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0xc004510e, &(0x7f0000a07fff)) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x79) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 07:27:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x9, 0x40900) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000540)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4481001}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r4, 0x0, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x100, 0x0, 0x25dfdbff}, 0x14}}, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="7d0000001500192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f640094750a0e2900050028925aa8000000000000008000f0fffeffff09000000fff5dd0000000a000100070c0900fcff0000", 0x1e7}], 0x1) 07:27:30 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x68507ed1, 0xffffffff, 0x8, 0x4, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x200008, 0xffff, 0xb, 0x1, r3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r4}) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r5, r0) syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x40000) 07:27:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000b80)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000580300000000000000000000f00100009800000098000000c0020000c0020000c0020000c0020000c002000004000000000000000000000000000000ac1414bb0000000000000000626f6e645f736c6176655f3100000000766574686952746f5f62726964676500000000000000000100000000000000000000000000000000000000000000000000000000000000007000980000000000001f0000000000000000000000000000280052454a454354000000eaffffffffffffff0000000000000000000000000000910e291b6bd4ae14000000000000000000000000000000000000000000000000000000000000000000e40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300158010000000000000000000000000000000000000000c000737472696e67000000000000000000000000000000000000000000000001000007006b6d70000000000000000000000000006243baa189314a37cddf35c5f784922403af7dcd992b0bd0f16586e7645b9ea41a3a6a8a6c25700379613822d5636e7435fdef8d539b06c2f652ef39e9167d6a835199e4781bb9546702897566c8591d6db1c5cbaa66724340e2fbfa8d44c5f262f06ded5130c39e598fe08914b4f6df4d777ae7268c29ef693f612891c6956d550000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000044d7485a725be6f30000000000000000000000000000000000006000484d41524b6d672396b1559ab10000000000000000000000000000000000ac1e000100000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000046cb000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff000000001f13b29601fdca4f7b30f5e8f19d61ca4666ade0100bef32837080652e0cd9bebe284b4e015dbf3a7fdae417c9e51ee73b3441d82fddcf9efab046471a1d573fca40ed788c684d0f956f2485157182b5f307b4938651dc872184939b4cc00fcebf14a2ef28009cb41a849fed25a0a16d81143dc28a883aa17d141d6310f31be6e89470221f7bc772bf78bb5fb0afec1670fcb1908944b9e00205eb278aef463a06f89b1c0080000000000000a37986a01e5ea27d6a110492ec8274f60165ee991a9394085e851beb8755b2ac00000000000000e601690568897422bac5b5ed1ed096345d91f9457231f5edf5adac5afd619ded2e2555eefc80c29c95409d612b857bd390ae3adf5a8c9d50f94f6d057998b67334545bec39b15e65533e4c23be6329952e9e17b3bd974ef4e8d6017b5ada45bd6c5c999f1fa023fc525f1cd9aecfa547a4582ec407c0fa71ed0ba8470fbb70bf5bff932d6fdb1747e4a30989e96830acbbd5367158"], 0x3b8) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f00000000c0)={0x2, 0x4e27, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, 0x0, 0x0) fcntl$dupfd(r4, 0x406, r5) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) sendto$inet(r6, &(0x7f0000000300)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf462e74ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba052156b00fc74e5fb0641db292020aeb5170bec48647d579c2785fd654e7c5ed71220a85f9dd80a87264e007e86b1866ae254c6ac79ab63ad5565b09e5022f54c5b2a0c62614bcb430b572575ec7de43ad2fef8139eed588cf6e36396199e2f5f1006341aa3d7f2ce8dc3117228ab532c627406f8f49cad0c0b741bde9ffd4c7433b394547b1d69cd0d5438e9bd6dec25d4b6012", 0x13d, 0xe, 0x0, 0x0) [ 719.197365] Bluetooth: Unknown HCI packet type 5e [ 719.202616] Bluetooth: Unknown HCI packet type 43 [ 719.230496] Bluetooth: Unknown HCI packet type 5e [ 719.269603] Bluetooth: Unknown HCI packet type 50 07:27:30 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = dup2(r2, r0) ioctl$TIOCNOTTY(r3, 0x5422) 07:27:30 executing program 4: getpid() socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xe600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="fbff20", @ANYRES32=0x0], 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x400, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r3, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x72d0f6c4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x2}}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x4c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 719.294938] Bluetooth: Unknown HCI packet type 5e [ 719.343737] Bluetooth: Unknown HCI packet type 40 07:27:30 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) getpid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) 07:27:31 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f00000002c0)="1975b710bdf61e81b4c8b057a5", 0xae, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x218, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$reject(0x13, r3, 0x1, 0x2, r5) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000000)=0x6) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000001c0)=0x505, 0x2) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) r7 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000080)=0x6) dup2(r6, r0) [ 719.612858] IPVS: ftp: loaded support on port[0] = 21 07:27:31 executing program 1: ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000100)={0x21, 0x3}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.FinderInfo\x00', &(0x7f00000000c0)='%md5sumvmnet0\x00', 0xe, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 720.270812] IPVS: ftp: loaded support on port[0] = 21 [ 721.260631] Bluetooth: hci0 command 0x1003 tx timeout [ 721.266202] Bluetooth: hci0 sending frame failed (-49) [ 723.340396] Bluetooth: hci0 command 0x1001 tx timeout [ 723.345702] Bluetooth: hci0 sending frame failed (-49) [ 725.420198] Bluetooth: hci0 command 0x1009 tx timeout 07:27:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) 07:27:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendto$inet(r3, &(0x7f00000001c0)="79672b842372cc241f15f8300d86d6135d32b51c1ac431c02e34733df6c5b26b378da4da4c122104d113855e951bb003f96e9d98989c6f76b7bfec2827cc2ccc22a2632c3271468300a19867c7b008904d5cdc0b334efc16fe2c1f07996f278f1cde8d32b944a12eb1273af83e67a0c1710a1cd10d086831eb2993c63db88cf3be49293d6e0f9160706e824e846137f3d3756dd969b6360814b60920fb39a77b322e0ef9c2b94339e09a9b5c75b93c8a7a3a85225233464d83ccce7ee209f59f09882afd9ec632ab07480ba7", 0xcc, 0x4000005, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:27:40 executing program 4: r0 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000240)='./bus\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="040005000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYBLOB, @ANYRES32=0x0], 0xf, 0x0) r5 = getgid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000900)={0x698, 0x0, 0x3, [{{0x0, 0x2, 0x2, 0x370938cb, 0x3, 0x90, {0x4, 0x1a, 0x3f, 0x8, 0x4, 0x2, 0x8, 0xffffffff, 0x6, 0x4, 0x3, 0x0, 0x0, 0x4, 0x3}}, {0x2, 0x8, 0x1, 0x200, '/'}}, {{0x5, 0x0, 0x81, 0x9, 0x5, 0x0, {0x5, 0x6a58, 0x0, 0x401, 0x9, 0x81, 0x7ff, 0x1f, 0x9, 0x9, 0x8001, 0x0, 0x0, 0x2d10, 0x400}}, {0x6, 0x2, 0x9, 0xff, '?eth0user'}}, {{0x4, 0x0, 0xffff, 0xf1, 0x1, 0x0, {0x3, 0x4, 0x1, 0x7f, 0x6, 0xffffffffffffff32, 0x4e1, 0xffff, 0xf135, 0x0, 0xc981, 0x0, 0x0, 0x5, 0x7}}, {0x5, 0x18bc, 0x1b, 0x400, '-(posix_acl_accessem0self$.'}}, {{0x2, 0x2, 0x2472, 0x1, 0x817, 0xf44d, {0x0, 0x4, 0x4, 0x8, 0x2, 0x8, 0x2, 0x5, 0xffff, 0x3, 0xfaa, 0x0, 0x0, 0x0, 0x8000}}, {0x0, 0x20, 0x8, 0x8, '\'.cpuset'}}, {{0x4, 0x1, 0x4, 0x4, 0x3f, 0x1000, {0x2, 0x9, 0x8001, 0x2, 0xd47, 0x5, 0x80, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x8001}}, {0x7, 0x2, 0x19, 0x0, 'GPLmd5sumposix_acl_access'}}, {{0x1, 0x0, 0x429, 0x2, 0x0, 0x8000, {0x4, 0x0, 0x6, 0x8, 0x200, 0x101, 0x31a4000, 0x2000000, 0x1, 0x801, 0x8885, 0x0, 0xffffffffffffffff, 0xa0e2, 0xfffffffc}}, {0x1, 0x10001, 0x9, 0x3, '/dev/kvm\x00'}}, {{0x1, 0x1, 0x8001, 0x1, 0xa5f6, 0x6, {0x2, 0x1000, 0x6, 0x6, 0x101, 0xaa, 0x7, 0x7, 0xf2, 0xfffffff2, 0x6, 0x0, 0x0, 0x7, 0x1}}, {0x4, 0xceb, 0x8, 0x7ff, '%&wlan0,'}}, {{0x2, 0x1, 0x8a6, 0x6, 0x5, 0x4, {0x6, 0x3b, 0x9, 0x80000000, 0xac, 0x10001, 0x3, 0x2, 0x8, 0x100, 0x80000000, 0x0, 0x0, 0xe78a, 0x7}}, {0x4, 0x2, 0x9, 0xdfbe, '/dev/kvm\x00'}}, {{0x6, 0x0, 0x1f, 0xa0d, 0x6, 0x70, {0x0, 0x0, 0x3, 0x100, 0x9, 0x5, 0x10001, 0x52c, 0x9, 0x4, 0x10000, r1, r4, 0x9, 0x60}}, {0x6, 0x5, 0x9, 0x9, '/dev/kvm\x00'}}, {{0x5, 0x1, 0x7ff, 0x9339, 0x7fff, 0x7, {0x6, 0x1, 0x8, 0x3, 0x1000, 0x8, 0x24f, 0x100, 0x3f, 0x3ff, 0xf6f7, 0xffffffffffffffff, r5, 0x4}}, {0x6, 0x9, 0x0, 0x9}}]}, 0x698) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x10, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000080)="0f0147d1d1861900000f23c80f21f8350000e0000f23f8b9190b0000b8ba690000ba000000000f308fe938028d2f000000f30f2cc0b805000000f9e0a264df0f01c166ba4300ecc744240000000000c7442402bc0c0000c7442406000000000f011c24c4c11972d000", 0x69}], 0x1, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000040)={0x60, 0x0, 0x4}, 0x60) 07:27:40 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x2, 0x0) dup2(r2, r0) 07:27:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0xa}, 0x8001, 0x0, 0x10, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340), 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$perf(&(0x7f00000e1000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r1, 0x6) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)='i\ra', 0x3}, {0x0}], 0x2) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0xd, 0x16, 0x8, 0x400, 0x1, 0xf2}) read(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000829dc7e36dc3d7e26a59cec28b5c4f5bcfabd66c7eb5af882e57c6f67439883471b1ac9b142fb158157630c0cacc222d4e16a74eda43c745289dd9aa891931ca010a8becec8a0f8ccef14cf88290e35c377403f6379a39f3ceb0409cc696d11ffa867cfc155ac55b7f512616fa2544fd1cb75ab74ed7ede77e67fae3e859425692385c0bf9571e0b36ce6d89f14b0ac04d27965920c2531de58ab0212ea560bf6dc4a13082060e", @ANYRES16=0x0, @ANYBLOB="000025bd7000ffdbdf25010000000000000017410000020c007e73797a30000000e35ccfe6258cfcecd65ac28702d17c4bbe6ff717e28a07c55e3d541f69fd9f6eeab15fd2a8bacdbe7650271edac89875d40a3747"], 0x28}, 0x1, 0x0, 0x0, 0x40008c0}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0xc004510e, &(0x7f0000a07fff)) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x79) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 07:27:40 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) getpid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) 07:27:40 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d6, 0x40009, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r2, r0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) bind$phonet(r3, &(0x7f0000000000)={0x23, 0x4, 0x7a, 0xfd}, 0x10) 07:27:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) recvfrom$x25(r2, &(0x7f0000000100)=""/126, 0x7e, 0x40000000, &(0x7f0000000180)={0x9, @remote={[], 0x1}}, 0x12) [ 729.550392] IPVS: ftp: loaded support on port[0] = 21 07:27:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket(0x10, 0x3, 0x0) close(r3) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="02200000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f00000001c0)=0x20) r7 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$PPPIOCSDEBUG(r7, 0x40047440, &(0x7f0000000040)=0x2) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e21, 0xfffffff8, @local, 0x9}}, 0x6, 0x400, 0x59, 0x7fff, 0x20, 0x3, 0x8}, &(0x7f0000000000)=0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:27:41 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0xfffffffffffffffc, 0x12880) dup2(r2, r0) 07:27:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) read$fb(r1, &(0x7f0000000100)=""/190, 0xbe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) 07:27:41 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = open(&(0x7f0000001640)='./file0\x00', 0x2000, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000001600)='syz1\x00') pwritev(r0, &(0x7f0000001540)=[{&(0x7f00000000c0)="14fb19e7c24cf988e925416df2", 0xd}, {&(0x7f0000000140)="51cbeef2a72286fc28295b1799650e890160b757eebd64c9", 0x18}, {&(0x7f0000000180)="40ab6b6e4faf1a3916c65ace051feb0e44d48389225ec12f73ce46fd04d51bfab38e467d5d2ad7917a672f85425bf5a831ccac13bb554f21e18c6f0ca4f9594b23b630bf2721bf41f3b15622a45b3adba818cff0c4dbe2e3f31dc35a79eb1cf1e3334cfaf0e1a2f4e405e944f547b91b9a20d76cef95db7c5967e8138c78a4e0bb36ed85387a45c479d047a2fe00c13ce31e2f5dffa0b06aac34ec7f8d1723ee490accbdb95b8940", 0xa8}, {&(0x7f0000000240)="0657273fa191f9edc548bb21eca78761ef697b82dd7f6c445596753809c90b28", 0x20}, {&(0x7f0000000340)="be252f48d0ba41d2df460a7f9af0ac971405c4d5bd141401e29f8f630a34a428acfc3a26deb4842793c60e3b6629a970eaba32", 0x33}, {&(0x7f0000000380)="c0a04a6faa516bb793a96b8242acfc8763ba55fd8a30378d5d136d440070a795d0851fe2c5203e98987c15cc21d3008cc64d6f47c6ee98768a19bcd79b96ea8333b8825faf988b54980bbba90082aa140f793ef65fa298a60ba622c53c4aedd0c0bf9cf7f6dc70a8a9b064883d109c64fd817db1b6d131b95c27eae9b72626d19f63a0c9c5cb10cdec3236955eb0f0516818d25cfed9c8982c4ed5caf929711bacfcac898cf9d1274e7af57fe5fa2e7e0ee258136146d0b3e8151eb4555d1957f1638209c15c4d16df32e72f449aa1b121f1b4827a354d02b4ba97f2c2facf9d735a4b4575b998ce571b1b7d22ab639223607018fb", 0xf5}, {&(0x7f0000000480)="cf1d8351528180846174c8f04a000e133557ccd85e9d4cc2dc18e3e22f3d67114c2c936f5db3a27f43f30e489565399412b5a74de26007b4a9cc9e06a4121ac681bebe82be7e6718dd913c62efe975949eb374d47100a57484936fda4e6dfc552e61b4fc546bf1f9c329b354bcba719dc5f6b4669ac0d4102e82ee10c53dd9747ec4ab1717848e", 0x87}, {&(0x7f0000000540)="12f719e557741552d01cb56339e127ee84815534d8b4c7457e594b8f701772275ac60e55fc6cf366297de3c91936f68ee0a0a650534b126b6bd8b232f41e5fb0d73c184a8bc6fba231b9d52cc908edcce0dc71aa70da8e8312a2663220da2b67b52e52c1d74c0275f67a11f258cf3d23c5f87a623826e67a0a6587ef691dedada08dec1ca977af0ebe154b3f47c93f83617078acf0778fb7354b45a3f2e3381421aded57aafb440b51c3b82e6ee451233918c82f55e52c26ba6c239f741cb68c6b2d6aaf46beef2dbaf8a99d32ec4070584a9e56131e05896da6c31cf66614cf03192cb92590ff9ae4f6a950f354b419273d85f448ceb1333bb5d74155a4954e64b33104d672f19491cceb17105448fd1cd9e6b15be18dd2296cb39fe76d99aa4e3419e18870c082ee7edcf5a38091b01db969a6fb0713162c66c8d099daf59385d67c17f9fdfc76f4a9e94f96f1a0dc628d0e4a04e7eee68be8dffbfe686b8d96a5a781775c0dc4187153568488f2fec4b4081a5a039ad840efa3830d04cbeaad51f14c8987a0dbfaef5fb56d78ff46c002d4bcd0928ccdc313726497382cc28c22ccc6c2cfa977e77ae5e75414d4ec969ce23b5a5eb5dcfe14be87cbe13e9d69aed261feac0147a3dd178731987c27a467d08a3715db737f0c7a2a2194610861a24bac6a4876d161cc4310ded27ef7b2325793cb71bc920941aa4bd03647c262bca3be885a8459811d15dff6ff70335508c54bca5730af17504b5330eee684600cc35b46fa9502a69b6c58136c0008849ca11636b7d2757f43eacdef67a94405d974da43c0fec87dc6279ce0c85ce4a44b14568b77c2a78e0c2d774a24c7b3d47b7265be1939be02404b19dc2557f00fecd980363ea28b1e6400c36ef7af4cc4d20904874e6ac45523b9bdb90493ab8a54a245989cf30bb3ac2253d4cd28d783d94c6083cb35bd8698403b6d84050c9efecc3da05052bb194dad06c1807b8a1be95dba885dd4ab560f06165608050495e3100a88e4270bad2acc81a41f461db590847a01e6249a88cb4cc1f36117c278d94e3c24f900ab1ca66f36f316e7a0a5a08a018f107c0e55c16f192f225981db2aecf8a4b4803fc5a4bc8afbac8cdc61bfb80c0ab985eaa8c1ee7d40705e3ecffe62d67a4b8303a96ab763be283c0322b056c6a73552b66b2894de21a380d0828acebca9f5f4397d55087d417616c198d54feac97c0b54737a233ecc9222e48dba2cce474beb632bb5e0338675cfa62429cd62f1f7c1910afa5aa44300a8cd062e78040c9b64962b1df35298af981982076b9b439413e8b49dfcb94575aa8a649124514871b2c0a666933ea4d8119bb1467f449aae156b2c6da4328eb47e403e2304b8bd2335149bfa93141b22f2b25687309a9228bf21fb0ce03af9a466071f894d540d8db3e7adfa30e3fa2024a3e5459f100bce70e826028ec44ac7037e3c87dbe46044ec7a2313483bfa6ebfc330ad8ceaa4a6fc241cdd2bee2278d430443249ef21e62c05f722eb0f12a178bfe01baacc1ff01de5cfec7a96363d20ee367a44213864c85bf8167464156966e28d254956162d4e75569334fe7cb2aa6bca5d211a42f92c23a4becd532cb21682f0511572c8dc4e92fe970ef49f877e5443c63f041ac36c40d4f5c8490bed44aea77a09bcc50a63e25d52bad41af5933d64965ef613063ba2f4e21446de0c287e05d7f7e26a8130b401f27f6f63fcc920878bc7b6833d3934cf2d3113293e00431247288b0628e78b3754b84d19aecd7d06f8ccc837863473ce1d60b407227be9e16ce9d020424b3a80ed369d67ff2cc2a2b2833f615e898a35d3084f44c6511f679a41644135ef428a292a9f43ff7255a741b814ceccb1a94ee95ed00e689689c1c8ad4ad54580b5d143e4df712964f1992f57cfc6209c3a8c3f236dac1dddc58ec07cd331b5721e1c682fa3866fea420d791dee0b976c1319131d30ab088e0b2a826a2bd4c8e3d5e4923c0dc48bf0e68152278fbe4cdff7fcb6fbcd1ddb8aa1049a8ce7396c79d86968d3eaed8bbec7397537b2b2b944e13766cffb4a30b62b13b48127731f5aaf1c1821e1d900f0b63832a53f2e56e55b6ae22506e533a3ed4a55eeb8ae44ce432f29d17513d20b07718b4c34276bbe12a92ba650fdb2c850857193105d4a6ee910cbd6a529b2acdf7b05bd3142d203f2a0132bdb76799bde0922f61dee77cab6f8da059703c30690436b52ff8776498a3d1e3e45c136b1c8dcd7db4b3d8eeeacb62f235774746fb6130f1dbad8892d2eaf0127df0095cd4937383f629d3708c23c1a036d35b09c194c6aa4dc171e2f953265a32a1246321aef9963c29407bb89f045023fa97f39d33e74718b1100cddbf7d0a24eaf3d4bd1012c1f4780dc31afe4774c310a3dcac01b49bcc54b02c872efddcde853546e4cec82cc4ee0002e9b746c654baef49c808934cec320a042ff6eea6c4d93ef83e1074ea56e1b7ce9e4f378d6c58d6487e6b48a59097b1b85a339f773dd635880b3827b48113f8a4d1c6463ffc14590ef2de6e368a71699ed63cb2512b4b25230b2b772e728b3728704e420838fd83f9a226ad0d8795b27ab99e429ee2fd5040619d76bf759276e0281dff56c57f38fb4b7c1a8a013d17101bdca16e42b7aef5d5122fce03efd24c3ad1ce69e8ede2d586ffbba78a1c127c23e96456a483487d004b48ecfe6110760babf5c04e72a859bd95ba7ae328f45b10a724f1510a83f09fb9cebbf47d191b59e1fdcaf1478132ee40058fbe5671d16beee07e5f94ee8025881981cee7abe20e5da1f8154583e967bc60971d7e54d1447ae919c10543d00c702f360a28b04752692abf830d984d504332fde64bbfb74e69aee46f3a018068c8041719376f5f3ef0c0ce16169221fba28b92dfaca836c8482345f4af2fcbc02e1670bdbc67048097bed06ebb5a30969e55cb2167f99cef1e70a2769c27b2de477588887be296bdbc3b69e0202e10c78a524a01ec4e681abac86466909bbdf392955b8fe5d405b1288a1bc0edd26cfd856e02e2211001764c148c115087a0b6191f2d866198bdeba189cdc6d0b3a171370068d565d5b929ed9fea1c61edc4e77b137f2ebc07df2673995a78a8518f51c0abaa698d0ffc065a046bbafa9455d651d40bb981c6fe053d8f2751aa9eb024fc32574340caa54534a7d49939a8a59851529cc05dfa1d6058db0d145908d103e3b747f71a359e06df634faa86d2555d73052765f40edaa585de61f51316ad922d53d06bd953e67e3ccd9f535b5d76e0b3cf4070efbf81ee0f0e7800d3f8e7c4636b02b2c7c086fb7f4e73a9ada398410b78acbce92687dc16abecfb5cd4a61e26ed16104a244cda4d23793015a83948ef3ed35e0a91102e60fac478cf9f9e8c61d91fcce974ba327389a566e610ed9864b3d09e2959805fc8444d79955a29c7532696c338dc525c2e307ccb1721254ef7f675fb5c55fdc719345569555d2930f20514ac45dc23abd7d1ec1217ae3691819eaf8a3bd94acdc4c3fd59adc02b4592095e27cc0dfad7798423ba9a179efb6de920b863c6c6514af4f6473183663b52dc35c5b4b90ab4954a3c17a849988ad2afbbb500359f8ff49a64972bc9c0a562f2c38de7c57ab996042df6e3934c35abaf22b807cb62341024d2e4d744c533415aecced5c0f40cd728df8d44a40557f3a9653b630f12f0162ec17141eb03db84096ef86c9064e18afb1b170ced3d6e223df64d7fa9633d9b1b498fd23793dbc4821e8ff631596841a6ef63a88b6fbca2e286dc33fe0551e143e850b126a78bee3fd54887b638aec06acad9a15838614cebbf02b5cf9a0e9788109ce937e8af9131f86249b460a88f7daae6051350cbd64d94fa805b9d5c35e392c9f484abbc0f9470d09a4d4f86e240e54dd14e864454cf8fbfb089e99c61375b046e4b88d5fbd6ce969e2ce0b3e125015824f66ad14ed20af1dd93ef8e5dffb2d46937ab59367d0938c4fc3bf98450556f3b719012796eac4554d5daa838cd55c89593c8387802f27372ad0096ebf4ce1c8d8ced2685ee2b3ab8e3215ce7e44d288625b7f91f3b908f710105f25365c94853973876e0bb6f53073745fabffcf02e3dba7f5ac1f299dfa16617900b3a6ea4ed491857ab15030e3f882f6876b9a7c36c805fc327b5954e9cbaf9749064fd86045967b2f49aecbe6f1f924f5abd6617be57665f5e530bf926f299d73200c836351270c7ee648ff30369e2d19343f66a85939fb294e61a8e7f3a8e00d5db4a88dad21d007fe022aa2a2aad07db2fca8aa80b15e96aeb82b89c12d607ccddf27225838a70cc71c21aec8be409e8468e56b55e376ce6638e50de013fb7603a01ca82afc93cf7d60745120fca00bd71b9f32f56b7322bc78678534fbd443c6c77efe0349f262198cb563a48fe5b8bd24c0f9ff3b83ff2cba3dff3c3a7c69713fbe5722eb08a98caf0a0c510810a9cc7fcf502144cab79a449471871f0ebfeedf3d3c179e02af9e4baa19b039a37c4ee1f45e9a28c69b287d3d8cf338506815646fc6761e8436c9ce1085dbfbb0f9361e63f711824fbbc6393595ed3f12d4a65c472f4ebc5988d54a07b929a3034e27b909a7dd8ee454a0cf486346cc2247882b79ef5e54042952bb24e7c748c7f54ce3c0baf725e0b405528ba6052d97d7296097bd2d07c52c529fe388826116d9fed7adbaa0e331bb2b4e41bdf5d347377932c837a061a1daa8b6e0eac7b5d75ab0303f65f2e5bd8c178a691825186ac4192cf9b41b59b0bf1ab8746f23cdc1e7b8760d63b690a9afce02f59832afcef709d3a71060ad507120dcd8163d34205b659f8651d2d87e7079203b5ad010a056ae2272866a236b60a15f99e2ce31a29a944b6997799b2583dec682d4eabaa763c82faacc2c6c90247ddc29ccbf0906ceace7ecd122f5af78f0d2c620963a21e756cba39d6a99f15b72bb69a90a4ceb11a3a94022d7446879b272441d1ba2a3b6f51207de38630996a4d0b340e63c548ee2046142f55b877f83a7a4f0975e92cd442544055173552a63d1387ca0292242ae8adb7c3493fcab5c113252b220d537e6823bffe2ad6118032b7e775b22ed7c77e0da22719c8bef3c509dd492a7c3350f58bded87c3edbb8f412c0cc3f6951dc1c1d679657af05f774542359c844a8fc6df99669b5e9c71ccefb1be56734e5260ef3efcf3d67bb7a905e9b82a38ab24fb8247b04e65a7fcd0ee715b56701c77714e5568f1dd4528d909e4cddda374696213496ce16cfd3f0f942a2764cf7365878829a908b06cbcdfbbdb65073b72780d6b3f0ebd2a9e3c27fade1728a6e3ed67251cc4e234508c9f072df0c8180cdaf0e1e657c0daf407c45c8cf557bf1ef197ea71a206fffe3113e25ca67936a569f251cbd7607a92504e932c80eb4758c8eca81c5588a12f1b63986726bcb2fdc99ff5ba2a388d1bd1f664cb5bf6b56ffcf0ef29188ec60201e84c8fc5437e6a75a7f0cf397775c6ddab6038651d5a9d0f18d013b5126777f20d1be732395acdbe7d587f04802ba642ff5acec597b35e496674993a49cd19c8bf0daca6919eabc7852926df5e95b1236e8af0b06e02935b543be739960bf2be873a069673c13535a36a0270c2a29d5fe04e78089b9f8a2cdf707700fd8a1ccb42052c5dd633c77d382e98895659218d98b8d2189a2896d81794bc12e73b9a185c6354ae28c9fc910fdaac86e74d95f2eb38eafc226bb3a1255a7860f3e65dd3cd473076b0ff22e62141b69d0f97247c", 0x1000}], 0x8, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000015c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001c00)=[{&(0x7f0000001780)=""/193, 0xc1}, {&(0x7f0000001880)=""/89, 0x59}, {&(0x7f0000001900)=""/155, 0x9b}, {&(0x7f00000019c0)=""/53, 0x35}, {&(0x7f0000001a00)=""/209, 0xd1}, {&(0x7f0000001b00)=""/210, 0xd2}], 0x6, 0x7fffffff) r4 = dup2(r3, r0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000001680)=""/110) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) rmdir(&(0x7f00000002c0)='./file0\x00') setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000001700)={0x3, 0x2, 0x7, 0x4, 0x8, 0x5, 0x4, 0x8, 0x4, 0x3f, 0x2, 0x1f, 0x77, 0xff}, 0xe) write$vhci(r5, &(0x7f0000000000)=@HCI_EVENT_PKT={0x4, "4fd508bd4552ec4ffc0cd9214d9c3bcfecdd5bf7b023b15029fc892129fc93e2bef774b3cb1f6a2b1bc7e7d4b5c6b4efc86bad671b356ccc5a3e4a706b42da472663339ccb86ccb81978662faf1834676f83691de78dd50f4b6e355b14bb7d9a795ba5554759a5adefa05d83f2d2ac0bae5beea46a5d17e6584297bf9315a59498e903da71f582bb8f"}, 0x8a) 07:27:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x81, 0x400, 0x2, 0x3ff}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:27:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x42, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='hsr0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:27:42 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) getpid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) 07:27:42 executing program 2: open(&(0x7f0000000040)='./file0\x00', 0x50440, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000180)='./file0\x00', 0x0, 0x2099050, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x20a4422, &(0x7f0000000200)={[{@init_itable='init_itable'}]}) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 07:27:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) connect$l2tp6(r1, 0xfffffffffffffffe, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockopt$inet_dccp_int(r3, 0x21, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000140)) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r6 = dup(r3) connect$nfc_raw(r6, &(0x7f00000001c0)={0x27, 0x1, 0x0, 0x3}, 0x10) ioctl$KVM_SET_NR_MMU_PAGES(r5, 0xae44, 0x3f) 07:27:42 executing program 4: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x4e21, 0x0, 0x4e21, 0x7ff, 0xa, 0x10, 0x0, 0x5e, r3, 0xffffffffffffffff}, {0xdc42, 0x6, 0x0, 0x3, 0x13, 0x4, 0xffffffff, 0xffffffffffffffff}, {0x81, 0xfffffffffffffffc, 0x7, 0x100000001}, 0x1, 0x6e6bbd, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x23}, 0x4d2, 0x3c}, 0x2, @in6=@loopback, 0x34ff, 0x0, 0x1, 0x86, 0x283, 0x0, 0x40}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) clock_nanosleep(0x0, 0x0, &(0x7f0000000140), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r6 = gettid() tkill(r6, 0x1000000000013) 07:27:42 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x8003, 0x40, 0x5, 0x49}, {0x6, 0x80, 0x1, 0x40}, {0xb0a, 0x9, 0x10, 0x8}, {0x7, 0x63, 0x0, 0x7f}, {0x5, 0x2, 0x9, 0x9}, {0x9, 0x3f, 0x20, 0x20}]}) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, 0x0, 0x0) 07:27:42 executing program 4: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'rr\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f00000002c0)="1975b710bdf61e81b4c8b057a5", 0xae, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x218, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f00000002c0)="1975b710bdf61e81b4c8b057a5", 0xae, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x218, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = request_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='vfat\x00', 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r4, r6}, &(0x7f00000003c0)=""/233, 0xe9, &(0x7f0000000240)={&(0x7f0000000200)={'sha224-avx2\x00'}, &(0x7f00000002c0)="088a28489aba72fdd59c18f9234a7415c2fa38e8c64e32fedfe0e5c014f42bba0bceda7fd3a44b803768c1a01a5e6623877c062221886b06b92385a3c55151bcaae609169fd5519ef441400da0d22d528ff8449a4348f9cd7bc33f52022775eca70188d17254147be2ccdd75afce59bd4e747648aba84d53b7c915424b62cbb388dd115d3987a3385cec2b8e16ff287b7b40a2e690f73c201c713dc10ca9882fb7c8bc62d9188287b71c5c3503e2ba77f9552e0284800910a86b935e46d03c", 0xbf}) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) pipe(0x0) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r7) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0xce024b8b) write$P9_RLERROR(r8, &(0x7f0000000040)={0xc, 0x7, 0x0, {0x3, 'rr\x00'}}, 0xc) 07:27:42 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410001, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000100), 0x4) 07:27:43 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x10000, &(0x7f0000000000), 0x0, r2, 0x4}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r4}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x8, &(0x7f00000000c0)='syz_tun\x00', r4}, 0x30) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) socket(0xa4227daed283f0ad, 0x80000, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x5) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) close(r6) [ 731.739739] Bluetooth: hci0 command 0x1003 tx timeout [ 731.745270] Bluetooth: hci0 sending frame failed (-49) [ 732.169852] audit: type=1804 audit(1585898863.657:110): pid=20869 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir583634963/syzkaller.b0AxXB/265/file0" dev="sda1" ino=16121 res=1 [ 733.820957] Bluetooth: hci0 command 0x1001 tx timeout [ 733.829722] Bluetooth: hci0 sending frame failed (-49) [ 735.899531] Bluetooth: hci0 command 0x1009 tx timeout 07:27:51 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) getpid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) 07:27:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) socket$pptp(0x18, 0x1, 0x2) 07:27:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000012c0)={r3, 0x44, "3b68ed5352a8f9956dd4f78f48956330e98a21a104689f0c4ca3dc9a8790b4c35f3c3ceb4ad09a6a1a00aad18f4b10a6de1919625122883acda619d4dadcf82178a072e9"}, &(0x7f0000001340)=0x4c) r5 = socket(0x10, 0x3, 0x0) close(r5) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f00000001c0)=0x20) sendmmsg$inet_sctp(r2, &(0x7f0000001800)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000001980)="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", 0x11f}, {&(0x7f00000003c0)="dacf66d83924f8f3543fcab16b13cc19ab2133b06f74df85337c47a9adb749d58e6be8b932b38906683ec30f82442714767e368f8b0e75831d1e13609b516b71b35328fa7455886fb7d2cd9c542e85885f3d31e3530e251b6ff14e37097862aa8f7046066ad752bb6521ded6eb2ade89543fb9b2aeba4f4ec1f3484100ddee4cd80d8a89eb4fcaf1418f906377008fe65a911b60de9d9a085469f04fb6221164fa5723078f8d6fa6798e604799765da47923ea83e4fbe93e991da9155919467671181bc625c51a0f6f4ccd6900b692cd35b5308bdf025fdfca3a1c94ca03e2ebcc2b", 0xe2}, {&(0x7f00000000c0)="66b9f1096c1ebba58ee1f1c1915af57df7f655c7cabff42af613e058008c521f7bced550e6701e52fca224b30123c6962e7e0afe73a60038638e2b69eb9d41184b604c33ddc0edb920091c8137d7eb5e1f", 0x51}, {&(0x7f00000002c0)="cfdd4444415d1a03284ef4a6e2d7bcbf0667c0e1fe915195e56642ceb66f6e6192310e545d8581b60255b492c8ea774159824d94d1a5dcf01eec0070dc89ff43ca6052bd26061d5f9d31a184b8ba4f643bf031833a602b0bb7365752d4aeea8fb65d2b6f27602fb65dfd547b8630924bd6b66db33fe51cc8299b85023e2a21b2a50afc7757ae612ebd02d3a4aab9c01492c4fea10ac790", 0x97}], 0x4, &(0x7f00000004c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @authinfo={0x18, 0x84, 0x6, {0xfe01}}, @authinfo={0x18, 0x84, 0x6, {0xffe0}}], 0x48, 0x4000}, {&(0x7f0000000140)=@in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000540)="fc73fb4c0cd770aace1c05ff62d3e60beb8a71c509f392882314603acb1a977b6fa310295bfce64a7b4e329d310082ed2a4e32ecacde7c94ea8a46055e7a10896389b5fba22b8b7201d20427704c3b6dadba86e16c20fcbea066c7a9c3ae2b439d22217731a2eab2c428724d1ef389033005dea63348d9d81eb3fae3f23e07d9e297e43a7c9c962dbdaffa3bd86e789b8b83eeab147e34b2aaacda4366bc5d53b25af4b0bf6de7405162a0a19f83990dc0e516e9748c0f30055d55fa8f43917cf52756e102a1e76fb08ef3f87ab35cd4c5dc8f57a09d4554249d", 0xda}, {&(0x7f0000000640)="9182402601c7d3f8085748c91eb000660cbc4023dc8d2a5a24dd69d923732403d1f0ba4f6f361632bcb820e7d4442bd6b243f43415ba72bd24f237cf9336146fafa1500ca11d3ffabf231d672673400406362b467385fcf686ce889ce20724a79d1e3e93b83023ae3e397211e2819bcd283905b35a9c95", 0x77}, {&(0x7f00000006c0)="dd927ca1d97857bc59c0aa5caa946d44c254cfe4d1a837b373f6444c3b20542c7c01b14de01d402cca0f89bf81fbb376bd510efb286b1fc4363ea62b7bc21c4c1d23f5fe3ea4eb8bd39f86b7fadfd5387d8a154041f9e57680601b48a4f9ee6ba80fe07666c2c29cd31a4d17e2f905e7a2928bf3da93780fa0e2e6553e59a3e3391c2e74409fd389f46849435db5a38e57ff3cba6357d49ca6f84c47b92deeaeb04d62f6895506abc34f4e424b3cc22af362c1aaf383bf", 0xb7}, {&(0x7f0000000780)="a61e9845efbe8cc4928d0540697642953edd4b2c885d40ca07c938074c5ea288f93f947be2aaa5335f38150cf574efa70c", 0x31}, {&(0x7f00000007c0)="58d0658c1a6c4ab51a5317170571c9f14b4112ceff1f1636ac023679aea6a86dc44d86f9977c04ad5e63a7e43270669e26f568d6b509afeb3fb3c4cf8c2b0c49c667bb7afdadbabf04e9ddc5ef3ebbdaa4ff094f7d4304a58b4b7fd5d21e9829c917ec5ed7c7f703354d83f3036b81613db785dc4709dff6d03d8c8ec9871118517487c446686b0a6bfc36ec8039bf3bb36b97c39bc6d9934633857b1e57ab10d7cd9038eea421b1d5512e1146ab5039970a7e4980", 0xb5}, {&(0x7f0000000880)="1680a008", 0x4}, {&(0x7f00000008c0)="647196580e63f0eec5e44a830f0a4c363602b3c5c0c012ded86825d01588872039", 0x21}], 0x7, &(0x7f0000000980)=[@prinfo={0x18, 0x84, 0x5, {0xda44de8ac9c11d52, 0x8}}, @authinfo={0x18, 0x84, 0x6, {0x401}}], 0x30, 0x8800}, {&(0x7f00000009c0)=@in6={0xa, 0x4e21, 0x4, @rand_addr="ff3f6f1ba6d4a2874d1ba385aa6c29e6", 0x6}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000a00)="2064cd5ffb1c1a30acebb34eaf6f4801716a26c2445d8e4af60eb6216af93755892193184f039e81225557de427c96f512ecf913", 0x34}, {&(0x7f0000000a40)="d019112ddf91ffd97168723be1a6a968ffb13f4fbf8f0d2d50ae00eea5000c54c119b1164bfcb98d3f17672e587d3f964d05e967bee2b987fb7c612a5a78a2d569c6429baf9251a9711d9550fb62a12fbfa59e00870eceb92686ec4a1f0e8adf65c9e0abf28228b0e81a64e4260d6a725c7bd3e7cbcbed159afd26c9af1154a8a61650387b4c5fec43fcc8c00cb653d764fbe8be5b2a943b5be0f9d5bd0e827a2970ea6eb8383dd30647578da37eeec31226aadbe5f32afa8ddf2ab036f52dc2d7941618f7930648a5e56092443631bb74186b5f3fbc3775297f4dec2aa0c624e468b33812f037688895ec4d", 0xec}, {&(0x7f0000000b40)="bcc66002032a1112050aa83f7a647edb1e0accd86faaf55a8107be04383b25e5110ce74fbd30150bae801ad53688689f41e5035e9eb26674409db74c26e40ed7c15e7104f1ca0fcb46b94c612e9514f73d4408c5ee509ca7a8c5b656052a64c71f186e6ccde72e6723c809475e67e7c078f6b7a9d44e0a02", 0x78}, {&(0x7f0000000bc0)="e72901a5ead2e944c0b1e97e10f237fa33b658aed2b0dac8853fe401b86e4e5938d93447d5f06f7fa9966b01c77d44ee0c9f8d9dee427b85adbd108a3cdae6ac1991df3b5703b6dc7401ee5841e2d128abc824fb8d52b401ec8f2668023446c3162c64fcb5eed4b56c7e3ec7a98ed0c51e8df2b351e9467dd0089c7bdb5d0ca668bfc8ab7eef5524323ec598948735c032bf78452b5c1c6582cb3ac1dd473d361fd13b0e07da5d", 0xa7}, {&(0x7f0000000c80)="444c7ca79daa44aea4640cf83c02afc95f66613fcfe4e73532a583cfedd1b6ad4d21af76b108dd0f6b419c21b76c27265bc34721cfdbe0797d99b2795f995fa331cd329cbbb2af691d3b509838299b4c5fe608d98c3a4428041150bf2a360668645b38528025968d2a0efaaceb9a5b0bada20c50099f288c33984420b6c4", 0x7e}, {&(0x7f0000000d00)="9e88b3eab0849351d71c3eb7b11b5829bcaa389bd93f07012eccaee81a8634ccdf", 0x21}, {&(0x7f0000000d40)="d2f6399f691bbccd9788668317092afc360cd2d68e6ee9cd88e9b75b137e9d316d8cc63eb9a45c0425ede8cb9db4ed8a98852b43468bb6e52e3c2b3331b7373d057b25cd4b26a75f4092ea77026b9bce8d4ed63e67093d83c64167bf64bc6a2667", 0x61}], 0x7, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="18000000000000008400000005000000100000000400000020000000000000008400000002000000010100020900000002000000", @ANYRES32=0x0, @ANYBLOB="3000000000000000840000000100000000000300020000000080000004000000939c00000100000000000200", @ANYRES32=0x0, @ANYBLOB="180000000000000084000000000000003f00ff0105002000180000000000000084000000050000003000000005000000300000000000000084000000010000007600040001000000ff7f000003000000bf0f00000100000003000000", @ANYRES32=0x0, @ANYBLOB="20000000000000008400000008000000fe80000000000000000000000000001320000000000000008400000002000000fbff0a00ff7f000008000000", @ANYRES32=0x0], 0x110, 0x20008000}, {&(0x7f0000001000)=@in6={0xa, 0x4e24, 0xd857, @ipv4={[], [], @rand_addr=0xa7}, 0x8}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000001040)="c07c4fbed29746e455178b45fed18245a7de7b9dd6ff539b73ffa962f287b5", 0x1f}, {&(0x7f0000001080)="f0b537cd765c2582a7e9820bff060d3c196c5fe4e11f09145bd4f4493a18ef0d1417550711b6417e923977bfd4d519537b", 0x31}, {&(0x7f00000010c0)="8e32207420f93c51864415bd1f352cb1caa52f12eaeb4403036a12f63d76edcb533481f342275fa69cccb266cf7db7ca8f7dbf89e2714d564e2618deddab493ae28a8c803f3356e048cf02ecae35340e8dca5fe3c90d0e20d04da698948490afa6360ced11a0381568cf521162", 0x6d}, {&(0x7f0000001140)="91d71aff5a7e7a412bbf976b4ddf384f3714e7c61e34ecd166e310f4e0d35e20464e16f9bf583a4e2a175cf99d054e868e68d9cf8f06827d43aef600b43ad9ffdb1d7fd16187a50f4187f35b4543d52f8937b5706d4ac84bb0ae815f11d11f4bad705f9be74dfc58e335a0a3eafbc72a13c4fd0ceed0359e97f90e66e5727b901040f6", 0x83}, {&(0x7f0000001200)="5016ff447bcdbabb5f571c135aaa2bd1a72c3017c5f6f186329862c4d5fbf15dfc621ea3e68a26c98b6ad8230b369b9d414bcd5dbcfb7a", 0x37}], 0x5, &(0x7f0000001ac0)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x2f}}, @sndinfo={0x20, 0x84, 0x2, {0xfffa, 0x608, 0x73, 0x4, r4}}, @authinfo={0x18, 0x84, 0x6, {0x200}}, @sndinfo={0x20, 0x84, 0x2, {0x418, 0x18, 0x5, 0x8, r8}}], 0x90, 0x300080d4}, {&(0x7f0000001440)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001480)="2aec07a928c3f3816b24ce98d63f26c7d37e982ca752e5fce66de581a8a6c318354868c8068ca10ab8b848d87427d4fa5cffcc4920ca97baeb4c593e5068270728991fe18e4e93c17ed10c7a1d87ff0bdbddd1ee1f6ad63ca59e25c19c6cea86a2f8bdc7d1488c4c8885d085336f57c2467bfca864613645d77647e12017bf56097c6bdf637103872faac890f5b1a9ba03f08f3a428a4501c751a025142231a4cda2b489dbb3e36a41cc8661f59ec259342579c9f5aad6f37db3e24d5e00c9323656c5468307f0", 0xc7}, {&(0x7f0000001580)="d397c934715e8aaf0ec2e3b1b337dc2a49cb6fb7989cf99985a64a94062d1a112ebc4541e4049a5d5746c708ef6027e2f82b7abcd33951bf017c722e67dacda5525bbef6cf3a546cfb8aa0e6f92a104134118709e2080e14645b3a0b44692c6c9208caafd8774d", 0x67}, {&(0x7f0000001600)="e632008aae00d1d60edc56e8a2bea706688f2402ac9cff8418f62906382fe56c91011eaae90191d2f28b272ec0fce256b60f8273a23239764e352cae568dcaf4df8b4de95ad4455768c407e620701a8f48467df8009717fb44552936c24df965e087e823250669d9d937353251a7e6e72cde28330564b4328099eb0a98957a374cf9fd229e82ceea2b62feac", 0x8c}], 0x3, 0x0, 0x0, 0x1}, {&(0x7f0000001700)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001740), 0x0, &(0x7f0000001780)=[@init={0x18, 0x84, 0x0, {0x7, 0x7ff, 0x9, 0x2}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x66b}}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @init={0x18, 0x84, 0x0, {0x3, 0x8, 0x7f, 0x2}}], 0x60}], 0x6, 0x40480c0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:27:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x5, 0x20002) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x19c, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x39}}]}, 0x19c}}, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000000000e25f0000000000000100000000000000", @ANYRES32=r2, @ANYBLOB="000000000500"/28]) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x24000, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000180)=0x78) 07:27:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = socket$netlink(0x10, 0x3, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8943, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) 07:27:51 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x80) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0x4, 0x7fff, 0x80000000, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x9, 0x0, 0x9, 0x80, r1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r3, r0) [ 740.355714] Bluetooth: Unknown HCI packet type 5e [ 740.360973] Bluetooth: Unknown HCI packet type 43 07:27:51 executing program 1: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) syz_genetlink_get_family_id$smc(&(0x7f0000000000)='SMC_PNETID\x00') r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x10) [ 740.396637] Bluetooth: Unknown HCI packet type 5e [ 740.406520] IPVS: ftp: loaded support on port[0] = 21 [ 740.423284] Bluetooth: Unknown HCI packet type 50 07:27:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0xe, 0xf, 0x183, &(0x7f0000000280)="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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000001680)={0x1, 0x0, &(0x7f0000000140)=""/101, &(0x7f0000000680)=""/4096, &(0x7f00000001c0)=""/22, 0x1000}) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 740.458338] Bluetooth: Unknown HCI packet type 5e [ 740.494931] Bluetooth: Unknown HCI packet type 40 07:27:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x61, 0x0, 0x5, 0x0, 0x4000000000000}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7f) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) connect(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) stat(0x0, 0x0) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x3f2}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x20000042) socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e25, 0x2f9, @mcast1}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) 07:27:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) write$UHID_INPUT(r2, &(0x7f00000003c0)={0x8, {"293804cdc7fc79d7bee4ce7683190bda0910dc48eed11146a2064296ce882ebed6f1b88e9558061f201843bc9b957aaf8ef5a02ab391d00a5e9de2240a2bbdf93cb51747697c2bd97d9962667cb9f7fa67cb647c02b09993921f720288589715fc4e88a9773081c9e24a74b4eabcd3424b6fa87eba52179ab69824b59d81774d098b3fd98bb666bc0566e6c37feb2fb4ecfd5780a18b2d107f4388732f27226074e45a59b2015e3255ce398cdb9aafe7984054295277f0244db1fc71e7768297b445b6cf842a8a051ff8e1b3e7127429b54e4a8c01dd1052918d127b92628e528f03d55353cf2a67046a5a08af56a2ca82083ea6f1d42a3a31c605286aaf0ff5d270dde05ebec9102bee46116ab166ae51bd258b5ffce24c3d2e4cbf4d28e66a3763dc9f24d2c5c077988c81aba9a6d99f0ead9b0eb8605d79846fb377e92222defac3e1e61857efba5a1825ae8b5a51e9af621ee7294b7da2dc55a00f77ed062e7a1d234b644a212940d9e06ce824db5cd288889763122b944c76c9e48074183c3c6185d519c92dac03128a814f146487bee68c399a2720f00eb6112901eb85ddbab06ad8da2ab95c26617434a9996373eb1738cce37c9b3833dfa986128c5c17d218d0e9b5d0841a68f1ce18246698637d5963d0578449b214870f3205ccd02714a6f49f7b3d47955e95fdb66040b398fd3fc722b51888d5a87cf2a1e0e3bc6c3a114bd737c3ca5b06d09cddadcbb85aa50b3f69ad19607794768f9bcee2e6c8de6763421ea49bb9a4da5c2c9b47c70fc0e48270e7c6f1637482d3aff24f0a289be43d4e281579a1a53f5e143ddf30e21f6336eba4c4361193d78749680d848aed7c2a1a60000a617053d9b91b51f6170ac30cf45daaec276bd6a7699ba6facc15611de09d823244d709115f5f30030ddd661417a52328cb8e271cb63f48511a9f064f086574a5b9527432cb21fb52514136b21b716dbcd8cf28e9cccbbf96b1fb948e684dad5fe6ade8c9655955d8ccc051d2220150861d3e1e8e4f90716f24a356e51937138aaf99d706fa61b9b8cd7e94487fcc8bbc8b1dd2c425d9c0b498f357f2c881e86d560f34578d51c77cfcc06363c3c85b107c5777b81260457ffe11748f69f3b3385959485ea20ff89734126a684152703628cc1f6dbfbbedd7cbe41438519a4fcb5cbd7d322a51bdd1126742d61179624640a7cea90d2432b1a0c000c2f5b4b5ef2458a54239b0165e41b078db26fdac3e38ae30a001a0858959f3a9e7dfba1d2285b4ed81510f74460979b170d640fbfcb7b48a80fb82810efdd1bf4d2c6e95de82e3b4d5a8119131017cbeed7954e216810ff283aab82729cc6f658216659397fdb2b095d1f0a71c683a832cf17a7941ab5c77cc4ada7292142d4526ecec2efc892fc89fdd64f4f92e0b2f907f4157039865ab0107e5e797737de96d22a986e7e3ec92066dbe3c33a0af2b23d6451c20a136b8ba6a1aaddf4e15914d19934d75796d2590dc79f8a9fc577445e7ee3d664ce0687a646ee01fabdb0709e47f9a0695bdc9d6cd006e86d40bab36ed69232473d9b01e120e0d290c24b31a0dd544be4c1043ab57d8dd8d56acff69700f142d849be741101b96df3ca914bbfacb9866e2130b5c3c496794493e751acea5ac809708889c74a0199de1edb7ff98ebba9da2f7129fbddab2642d6108aaf1f1a5a6725a6bfe3eb5951c1e7da7d94d7a5e4487d5e8ab9ffcaf3f348f7b5adfc151ba03d359193078eb7331ca5864ca74adbe18b56dd62b7add80707b415ccc0f14f98bb14c7edf26b50e99345a38f6f3e611560d987622033838d8a93004df90665eb70bd65ed22d55ee2f353e937183a403cd89ff1e14c0f2799f9fe8b44e691a6ab397fc74204ee91d4c533c8e7cfb78ecff24e763dc1d27ad9d402386d66f3b25236781eeaf8db506792cfd74b7d5d77a34a7303d6fda8a0aea6f8776e369e5c015c4c9560c9c58db9ecb3c695d23476e86ccfa895009b3cbf1a712560e6b01c0320181ca182a2033795e77c7b51d70093d143ab3ed31722c0424c3c979fb32fa4570a120c4f08c53242d23fe5ea7e0c9fe179ca4af5514d7cc9759cdd6fab897f3b776ea4b24850932de775a15fce4d66ff055aa28a5bff4ede23a2ea4c6716572a3356958ad88da5130c86ecb61ee97dd4087f58f7057b68b5722d48dd90a68214891422f4a2d04a73e2c46697227631167a1a84f7a49bd28b262300eebc5505f45554af8875306a7e5c6d4a17d65a49a7c37d9d9154817287ce4bccfd4fe1152ab25ee49c3b49b2b87ad46305c571f12b56eefadecc055b6a550d3bad4f679b0ed629b581dbad91f7cbda10930df5e2d3b55a6cf04465433131023579a89944eef475ef830285ea6f9b1f6d5a871977dfcd74eca87b0f53e25956431d842e3e2ee324cc1fb5b7e50b73ed19ebdb97e0b891cf8f9a27ee3ff2397930d73d46565e658adc046345181e05353996e619aabfe14b233b3b9cf48a8f845ffc27d7cdef78cca4b4142a0e1a5e2d31a5f63135c8543f3440a11b63c59dab95f700860f1493ec6ab258c76343230704eeb1e923d09f4303fde89619422980b08ba2d2a366a80d2203aee7a8881162ca4bca9dd06cd1b81c4d607c382e84293e3b576f155e7fa16008e24e14c83b4dbafb6e6541eeb2148f281fc8d445b8b8cd697bb0e2ae814411c02dbef8bf438c2575fd7c402b00b775b4a965a7907300b0a249b93f629b075f5b82292a86fa18d1ed08789b93553237c20dec69fc980876511ce95feffea87db7f8d2a223c9a4d3a0853768b132ca2274c0546edd82d213a847dcf43d5df2895517d1caf3b8cf5b755e15b325f70a9b6731126f8933661be9b2f949c2cc82cdc54e7332dbf6fae636fcbbb9019ab7afbbd6d47c4a56e5cce4c5aa983fda508e3d15d36e45f573961403a06788dedee1bbffd580e8d00076b06831149b4f34054c4e7bb3f0b7dae08ed919c1b8c15a878df2edb5dc2afbbf216211b813b36732e4db058f34a560df4d14d5331dddc8a875745af396f5741b4ba1e079daf2d51921f86a3cc70a2f4fffdfacc75cc9063bb65c003a2ed2447ad1cb0370958fa04feae513e3f3fdcd18870c8350f2d03898b3dd04a0e8d2b71621de1da34df249ce731bb094d4d0fb0e4bd30e04b6dee98749cd544cf7210552131820364eeae84bfe12525c2aa7937511ae3ab0a987bae2ddba6b130c05fe49041ea304b7abe68dadfd2b71fa9890b0a3032ad90737a93b38d492658c224a187a553ada9c3666c76573bbefe03770d1987cb6532a0f69faa61b45d597bf365ad35a5a0edd13bae3450117e3961e19a75cca12e0f5e6627f40d94306438517d7085697094a85660eaba8010804095ca1b56297da1c52e7a7d3f04edb2ce04b67efc323f9c70a388af14ce7ae26adfa62dd34c5c1191df6d301b811bc6657cabaf2c283137f59fb09ea9e04884b919c90357fab60424dabfda0572d32682d2bf87ff611d1d0a440318af1f1dcec368db284972ffc55627171de3bf0065d8dae6479fcb5bc85fae0b9a4f8c6038083467b4f9f584b36f660ace563b9e2df2b6845bedadd9d5ba0e70674f6e4f20d14e7db417caa3669e9d3a89b8a571819f31ef1cd8c531ac7afb561341b86b62f30f5eaada1cdfc0d5658db87c9d29962c24b29196570f3b11c88bf1287e6498e671abba8f90d8ff5d7af121467709116fc2a035a5603d5bd88b437bdb40c1efd3e6b4ed3b40fa893f23521e580145b6ef9c64177500ad7b47cd124bdb76e84c0a0865f6b903aacd8a5ebf48ac6ddc07e3714aadb0e4961104d2343118d7c0264413849841c843bd4c9e1790cd853e0a34750cdf24737bf23a97080c8b5e661d7d90c791d45392fbf994cb5b5e5f588c26041d9547500faff3a8b936a4878b7108cdd9e4426c412758c36a705a532e4e5d50e2836531feddad7464b920947bde09c33ff42322bc07d84499ad379a7cdc4c43b09a95f1ff838b3b856c44c2f3bf915015ad4cb8119f9b126ff2e98688de724831902cdd81cd6f59256edea25fd40f6376cc744261a7b6c0f56798d9ae24f7ca01eca5bfdc52bec655d1f3fe96b39b7bcdd06852f0b1d56c3fd0c501998313756d5a40e9eabdf0ac99a9591600482dfcb5ebe2db324d71e678740038cf64406fb69a9c59f17b0838930f592aa63de87de7164edff4f4772cc641c5483bf878c1840a01b25deb14ad88d210de057fa0ff906309a2144121b515481178103521340ec4c313f0039e8243df29d841c36bcc32f0e2a361a18e60d8d5b7bf4df1edb37d060c73a336c608621351a2d7e8672653397d1b3523b76d4e6a2bf3bbfdb1c94b3e56413fc64bdc5c49cd54683f45286bf90c95b756aaa258692b4428cb997898b578a780714da6adbe7e4abf9013dafd2b85b091f03379287baa7ccf528b94be63794e171cb6272745d5e7fa8072757e18b748267af0f84f0e76658036e48b98a5969afe6bac2b7f818831648d93721f47771faabf237d65154783ac2c6de08d4c43f1164316fdd7a1f364d1b6d5eb2a452b74584ef6fa5ada87633c160088b38c778b3acd7fbba8a28287370fdf2daebf4bfc3c9d0e66cbe0d35594f41b04160563b61d5b0f3300f0bef9c51b3d872ac7c86de17a615ecaf04c06df2534b579e2d578b56673c392f0ac78e59204724bbecf5031f0d4de992f988fad0c5d740677acf90d6fbbbf7ad9c99211388d785b2091e93c395b1738baa825e08f4463beb24a1c45aafe64d9fcf0b7b53099735cda21b9cfd834b7160712ad981ce1f55e625c848e3f659832480f255ad916ca88e2863655f06050d55edf51c447c32310140ab6cbb1b5756493d169241287fa38e45da739997e1c1e69071010d7d5c4024b25f8ed191948ec43b8a757bc90e3ac028fa499cd030b646f7aa288c880d6d7cf0507c717144bcb4dd81e16d791cd591bdf683d1039bf8b6ea41c0b4b844c87efa935b92c49a81025f6d49ec2f0d1f0f9e095048e4187a801298d5d058af421c720b9e9e9b3f56e241af343c8a31cccc8c2ca6c2c9239045838e7715e53887d4d702c3c459d5cb0a90d9e0f4e0cedd80f19c13a2e25d0088b52dac7336c9c3d1e3481ecdbbc9ef76292eae84c5b7654a056abbdd40bd63991bc3ea8a3e41679694dc5f096e197cb68aaea950043342fdc7e91a846acb3035e3cca220ba36109df23c6fda1ccbc99a2b348910a6f2f1c1daac10c76530ede90d8f935be8a1fafb18cde18873f2cdb9db3c6a123b1d2f088fcb6e9209342c496c088f9e3504f472650a6c14ff42b503a577522fb3effee8e182b82b70f645941b35954fb632972efb6ded4e93cb84014a008a99ebda394ff0f53f5dda9afbe57a9a3010ba27e1e33eaf7d91a8b19289b65fa4432f1b5394d3b7908dfe30ecff5875709445156a94454fc97ece73bdc87df6ff6508b0248c849acc94aac693d84ffa2932a5222f23bc6371c496225c1c68417f505ba9763058c15fc4e39868e446872101d01d45929180b1131979dc6e509a2d0ac162fd448b97fb5c5747ac664f858f6f27449acdcd58c016306268dccf04e03b084fe829bc8600058b9047742c894d7d56d2de16639ef6c0ada2d0bcf478e2ace32e6f9d06b5cb64d3e5633ed4a4be2821910354c0c8af64eb8c58bd3bb1a6110add931ce5ca696219fca8a308c1cbce61e4e13f945e4dd372d74f82aabd86bdbf59b0ed097ef7853065a224725b0e07f63c0eebaf7fc6d0f2695f276ff015f", 0x1000}}, 0x1006) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:27:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:27:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:27:52 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) getpid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 07:27:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000040)) 07:27:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet(0x2, 0x1, 0xf191) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 742.379142] Bluetooth: hci0 command 0x1003 tx timeout [ 742.384505] Bluetooth: hci0 sending frame failed (-49) [ 744.459054] Bluetooth: hci0 command 0x1001 tx timeout [ 744.464422] Bluetooth: hci0 sending frame failed (-49) [ 746.538827] Bluetooth: hci0 command 0x1009 tx timeout 07:28:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) prctl$PR_SET_UNALIGN(0x6, 0x3) ioctl$KDADDIO(r0, 0x4b34, 0x7fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) 07:28:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:28:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, "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"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x0, @empty, 0x6}, @in6={0xa, 0x4e23, 0xc000000, @ipv4={[], [], @empty}, 0x9}, @in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x4, @rand_addr="cc9f4baed4a4a44aa22865b09f87c1e7", 0xffffffff}, @in6={0xa, 0x4e22, 0x3ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffff0001}], 0x8c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:28:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c060072654232425e0000e300d70904489b00"], 0x1c}}, 0x0) 07:28:01 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) getpid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 07:28:01 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x208040, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x400, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f00000009c0)=""/110) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1af5eff25331f2c060d7f77959a2f8d4cb0baf48ba8a8d24a25bf5f947d295fb747f57b749cf9c62d9a5ff3ada239f3b62d2e25f348b729db5ccf8a8c771329c6867a9e6d3616c829a9eb1c09f", @ANYRES16=r5, @ANYBLOB="02002bbd7000ffdbdf250200000c0800"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000425bd7000fddbdf25010000001400020077673100000000000000000000000000060006004e21000008000500010000001400020077673000000000000000000000000000060006004e23000067dc56b7c72994f653eb85cc61ae492416b3203b3488a5662f76d26f310ad32950af"], 0x54}, 0x1, 0x0, 0x0, 0x4044000}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000b8802c3eed6f8c4a7c1775c47ec2aac23e9e59d14becdab248cc45c8ad90aae598474e5e7a95580562056ac718d0f4f5cee696c155fa8e33d96adc6e9902a8d10c29bf4e1bf4aa5ad113623ebe9bcbad2c6e7eaade08ad891158aec3edcaa097397c072630281a4bacf779b1eee20969de9f866a0c44cf21bb700bae796b1a67f9da6694ee0c00005dda20cf619cd99ce6e960d15a0d47edcbca5e6f7726cd4229ba99342467c43c6357729c1e9c23d1c9f9f2cf6d8db2d9ee8d6efad7f6de8b42bbd341cbf665daf3fd8db089e1ab292e479ca45a417f79836b2e19b3a9cedd86cbadc020", @ANYRES16=r5, @ANYBLOB="040029bd7000fedbdf25010000000800020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x410}, 0x80) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x100, r5, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x0, 0x4, 0x0, 0x1, [{}, {0x0, 0x3, 0x6}, {0x0, 0x3, 0x6}, {}, {0x0, 0x3, 0x6}, {0x0, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x57, 0xa, 0xdf1c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64fa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45854953}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe00}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x604337df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x291d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x48f0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2448}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x24, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47c2eeb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fecec8c}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x24040081) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r8}) r9 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r9, r0) [ 750.524468] device lo entered promiscuous mode 07:28:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000), 0x4}, 0x9cc46edb4bdac257, 0xfffffffffffffffd, 0x5bd, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffffffdffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'veth0\x00', 0x2021}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={@remote, 0x36, r3}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x324, 0x0, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) r8 = socket$inet(0x11, 0x3, 0x10000) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x9b02e6d4404d0861, &(0x7f0000000300), 0x4) keyctl$invalidate(0x15, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000087dfc8)={&(0x7f000005e000)=@nfc={0x27, 0x1, 0x0, 0x4}, 0x80, 0x0}, 0x60400d0) recvfrom$inet(r8, 0x0, 0xe, 0x400000000002000, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0xc0406618, &(0x7f0000000180)={{0x0, 0x0, @identifier="029272e4e893cce830d37b0087ae00"}}) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r9 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200042, 0x62) write(r9, &(0x7f0000000600)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e9e688d35a978813c38add66548d7575727ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f", 0xe00) sendfile(r9, r10, 0x0, 0x12000) 07:28:02 executing program 4: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000000)={0x1, 0x1}) [ 750.559221] Y­4`Ò˜: renamed from lo 07:28:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:28:02 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x5, 0x101400) dup2(r2, r0) [ 750.683272] audit: type=1800 audit(1585898882.178:111): pid=21003 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=16173 res=0 [ 750.714954] IPVS: ftp: loaded support on port[0] = 21 07:28:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:28:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x3b8) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750f", 0x47, 0xe, 0x0, 0x0) socket(0x10, 0x803, 0x0) [ 750.870701] audit: type=1400 audit(1585898882.368:112): avc: denied { write } for pid=21026 comm="syz-executor.2" name="net" dev="proc" ino=87438 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 750.903590] audit: type=1400 audit(1585898882.388:113): avc: denied { add_name } for pid=21026 comm="syz-executor.2" name="pfkey" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 750.938378] audit: type=1400 audit(1585898882.428:114): avc: denied { create } for pid=21026 comm="syz-executor.2" name="pfkey" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1 [ 752.548420] Bluetooth: hci0 command 0x1003 tx timeout [ 752.553723] Bluetooth: hci0 sending frame failed (-49) [ 753.658980] NOHZ: local_softirq_pending 08 [ 754.618369] Bluetooth: hci0 command 0x1001 tx timeout [ 754.623682] Bluetooth: hci0 sending frame failed (-49) [ 756.698279] Bluetooth: hci0 command 0x1009 tx timeout 07:28:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x4044c0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000100)=0x6) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) 07:28:12 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x1, 0x48001) dup2(r2, r0) 07:28:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x7, 0x1}, 0x0, 0x0, &(0x7f00000000c0)={0x5, 0xa, 0x4, 0x3ff}, &(0x7f0000000100)=0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0xc199}}, 0x10) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00000002c0)=0x6, &(0x7f0000000300)=0x2) 07:28:12 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) getpid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) 07:28:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x3b8) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750f", 0x47, 0xe, 0x0, 0x0) socket(0x10, 0x803, 0x0) 07:28:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001ff77512beb3a771154c8a9684c5", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012000900010076657468000000000400020008000300c91e25de29b04b1ea41c3fce927ac1bc7d9f94a37f2ff9a5c4e5cdd64c85e6ea52e93ec419c9fc3a7cc3c80f0a049582017e0200000000000000210019351fd4c796cb3fee10561c07a78164da04fe37d4f4bdbc50ef88e94a1a5da0232b0823e3aaa458db72444ee03404e0bb8f000000", @ANYRES32=0x0, @ANYBLOB="a8ddfbc82f487246dfef4d015497f7db711adc4daba3915b7031568576864a6f21a567dbf0dcc5d863a44f5a32370c09d9a46a482327e757dcc3121d9ecf3a00c28916213ac140c2b9caeb080000000000000062520bb6d6be64f32d9f904ba3448339a544d106db"], 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) socketpair(0xf, 0x2, 0xa93, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f00000003c0)={0x470, 0x1, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}]}, @NFQA_PAYLOAD={0x48, 0xa, "2f85daaa4534518ada7ee7c21172bffb2f5cd99bfcf5e114e11f406d155a47b21fb6dbfecf96904c6d8c6aadb1ef4e4efbb3178a13e06efd7cb19f82aa915dbfa941b705"}, @NFQA_EXP={0xf8, 0xf, 0x0, 0x1, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_MASTER={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2cb6c115977647e6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xb}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_MASK={0x20, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8000}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, @NFQA_CT={0xe8, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0x14, 0x17, [0x80000001, 0x79, 0x7, 0x1]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0xc8, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}]}]}, @NFQA_EXP={0xdc, 0xf, 0x0, 0x1, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x56}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x114}, @CTA_EXPECT_MASK={0x84, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, @NFQA_VLAN={0x3c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_EXP={0x9c, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="fe8b7e4cf4f6a2091278918f14ceb869"}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}]}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr="a59d51e4e55c712d9fd447b0c46976ef"}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, @NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xffff}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xe9}, @NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}]}, 0x470}, 0x1, 0x0, 0x0, 0xe2}, 0x40040d0) r4 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xfff, 0x103200) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) r6 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x10001, 0x201242) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000040)=[0x6, 0x0], 0x2, 0x80000, r5, r6}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000100)={r5}) sendmmsg$alg(r2, &(0x7f00000000c0), 0x5a, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000), 0x10) [ 760.826719] Bluetooth: Unknown HCI packet type 5e [ 760.836509] Bluetooth: Unknown HCI packet type 43 07:28:12 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r5 = socket(0x10, 0x3, 0x0) close(r5) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="023df3d52d9d89cf1a7b6aee8b11debce35300f2056d09fd6a06ec1edb1b1959949eee7a6b512eb4ce20df4898211022a325fb053ca4469ae3e672ccbf41de21725a9357bb3810edd289ac754fd5ff47eb255af7b7dfa73b1ec766297af8c053", @ANYRESDEC, @ANYRES32=0x0], &(0x7f0000a8a000)=0x3) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x1fc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r8}, &(0x7f00000001c0)=0x20) 07:28:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r3, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x3}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x20000000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000090030000c801000000000000300100009800000098000000f8020000f8020000f8020000f8020000f802000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280054544c0000000000000000000000000000000000000000000000000000000000ffffff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800434845434b53554d0000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004453435000000000000000000000000000000000000000000000000000000000000000000000ac1414bbac14140000000000000000006261746164765f736c6176655f300000626f6e645f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280045434e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r4 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x24) 07:28:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="a7b74aad84a9d68309edc937d385a7c5959263093c6547c70921cd03f191f3b525328e92fad8556bc8405672662be6236747a6cdb02d4d678ce828c53466ba9d95a6b464336d4f7eadad38"], 0x0, 0x64}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/2, 0x2}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 760.868098] Bluetooth: Unknown HCI packet type 5e [ 760.872997] Bluetooth: Unknown HCI packet type 50 [ 760.902653] IPVS: ftp: loaded support on port[0] = 21 07:28:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket(0x10, 0x3, 0x0) close(r1) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="03bf9b56f3a2daf96323dab96369091d50955ac1ca7b8dfbb038ec032231539879cdeae69898d6ef47cb57aeeba12ad461f3f2c305ebfae9ac54f239f60f26b01a2a7b92826ff94415959d7d7c1357e1770aef1eacc482445ac33eeeda39949ffecaaefa9c4576bd46c5122068c5b3501f49dbbf226f4a3b79d6196cdb4a39d58cfb2cb6fbff480d5a50e1c9e637c2d37b1d88d90854ac1fd159d6475c37eab3", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f00000001c0)=0xfee6) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={r4, 0xff, 0x0, 0x40, 0xffffffffffffffff}, &(0x7f0000000100)=0x18) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r7, 0x891a, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x4e20, @multicast2}}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 760.915654] Bluetooth: Unknown HCI packet type 5e [ 760.934918] Bluetooth: Unknown HCI packet type 40 [ 760.955935] ip_tables: iptables: counters copy to user failed while replacing table 07:28:12 executing program 2: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000008000100000000003000058008000100756470001c0002800800020000000000080001000000000008000200000000000800010065746800a4d5280386a992be91"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x181100, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000200)={0x7, 0x4b, 0x1}, 0x7) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)={0x3d, 0x6, 0x0, {0x0, 0x0, 0x14, 0x0, 'net/ip_tables_names\x00'}}, 0x3d) creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r1 = semget$private(0x0, 0x1, 0xc1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f00000003c0)) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000500)={{0x2, r2, r3, r5, r8, 0x88, 0x3}, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 760.986045] Dead loop on virtual device sit0, fix it urgently! [ 761.018003] ip_tables: iptables: counters copy to user failed while replacing table 07:28:12 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8a, 0x200) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000080)={0x80000000000000, 0x100000000, 0x1, 0x0, 0x0, [{{r3}, 0x5}]}) syz_open_dev$dri(0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) dup2(r4, r4) [ 761.037381] Dead loop on virtual device sit0, fix it urgently! [ 761.055478] syz-executor.4 (21080) used greatest stack depth: 8512 bytes left [ 762.857847] Bluetooth: hci0 command 0x1003 tx timeout [ 762.863152] Bluetooth: hci0 sending frame failed (-49) [ 764.937826] Bluetooth: hci0 command 0x1001 tx timeout [ 764.944440] Bluetooth: hci0 sending frame failed (-49) [ 767.017730] Bluetooth: hci0 command 0x1009 tx timeout 07:28:22 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c10300000300000050030000000000000000000078010000a0010000780100008002000058020000580200008002000058020000030000000000000000000000ff020000000000000000000000000001ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e65747063693000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003801a001000000000000000000000000000000000000000000000000380071756f7461000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c657231000000000000000000000000000004000000000000000200000005000000a600000000000000000000000000000068004354000080000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffac1414bbfe880000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468305f746f5f7465616d000000687372300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800e00000000000000000000000000000000000000000000000000038005345540000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x3b0) socketpair(0x25, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="08020000", @ANYRES16=r2, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 07:28:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:28:22 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000000)={0xc, @dev={0xac, 0x14, 0x14, 0x15}, 0x4e24, 0x1, 'dh\x00', 0x8, 0x8, 0x3ff}, 0x2c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r3, r0) 07:28:22 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) getpid() 07:28:22 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000280)={0xa925, 0x20, 0x1, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = dup(r2) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r6 = socket(0x10, 0x3, 0x0) close(r6) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000100)={r9, @in6={{0xa, 0x4e21, 0x3782, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}}, 0x81}, 0x90) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x18) dup2(r3, r1) 07:28:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) write$P9_RLCREATE(r1, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x80, 0x3, 0x1}, 0x1}}, 0x18) 07:28:22 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="2495e04604bc48bbadf0059cfbc6bd1a5cdb6cb746db1802296feb35b0ff5dd97db4c6ffa1fab41a1e13beacf3a6683b6da96071ab5315a4656a4291de2ed90492ebda28f7b01408bf582f0fabb973f27e517ec456b98e4d103001da8a730100d178b1a7a8e07bf8b99da303c5b3ef43a8308e131d2260ccc4400b4dedacef2e41a71d5b44ee7a91b768760471a10be89d6a396ff272ffc4f45e1f8cb2af0474992b6f281d72f84cc9b5682564275363701c46fc"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x300) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f0000000140)={0xa03f, 0x4, [{0x8, 0x1}, {0x3}, {0x2}, {0xc}]}) msgget(0x1, 0x422) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f00000004c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) 07:28:22 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)) prlimit64(0x0, 0x0, &(0x7f0000003680)={0x0, 0x747bb057}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000003440)=[{{&(0x7f00000008c0)=@caif=@dgm, 0x80, 0x0}, 0x8}, {{&(0x7f0000002d00)=@in, 0x80, &(0x7f0000003200)=[{0x0}, {&(0x7f0000002dc0)=""/116, 0x74}, {&(0x7f0000002f40)=""/66, 0x42}, {&(0x7f0000002fc0)=""/64, 0x40}, {&(0x7f0000003040)=""/197, 0xc5}, {0x0}], 0x6, &(0x7f0000003280)=""/94, 0x5e}}, {{0x0, 0x0, &(0x7f00000033c0)=[{0x0}], 0x1}, 0x6}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000bc0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000ac0)}, 0x0, 0x7f, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000680)='status\x00') readlinkat(0xffffffffffffffff, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000c00)=""/242, 0xf2) preadv(r5, &(0x7f00000017c0), 0x332, 0x0) [ 771.036498] Bluetooth: Unknown HCI packet type 5e [ 771.041690] Bluetooth: Unknown HCI packet type 43 [ 771.102945] Bluetooth: Unknown HCI packet type 5e 07:28:22 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) syz_open_dev$dri(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x7}]}}}]}, 0x48}}, 0x0) r7 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x7fffffff, 0x1, 0x5, 0x101, 0xffffffffffffffff, 0x9, [], r6, r7, 0x2, 0x1, 0x2}, 0x40) dup2(r8, r3) 07:28:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x80000001) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) fcntl$setown(r3, 0x8, r4) r5 = dup(r2) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 771.146613] Bluetooth: Unknown HCI packet type 50 [ 771.164804] Bluetooth: Unknown HCI packet type 5e [ 771.170883] Bluetooth: Unknown HCI packet type 40 [ 771.202472] IPVS: ftp: loaded support on port[0] = 21 07:28:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) fchmodat(r6, &(0x7f0000000080)='./file0\x00', 0x80) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendto$inet(r5, 0x0, 0x0, 0x1000000024048841, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) 07:28:22 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r2, r0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000003c0)={0x0, 0x6, 0x10001, &(0x7f0000000380)=0x8}) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000000)={{0x0, 0x0, @identifier="f82adaeb3685a45d675ee1ede8c1b707"}}) 07:28:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x58, 0x1f, 0x2, 0x70, 0xae, 0x2, 0x2, 0x5, 0x4, 0x1, 0xd8, 0x40, 0x3, 0x6}, 0xe) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x800) bind(r6, &(0x7f0000000180)=@nfc={0x27, 0x1, 0x0, 0x5}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000ad4f000000001c00128009000100626f6e64000000000c00028005000c0000000000deedfb32f3b99ecb72db9c035a4991ce5fc8eff345b74e4433c6888f5ed208c4424ac5bb7c01a8d8858b4064650cdd920e09f8c521f5817fcf6bb31e6f1a2ebb8906000000683be7e81ec4668546595701e8f8cab69987acc79bae8f71eb3fcefe3d0882831ce0148a29c6876961b95d3c8d5efc74b7942d12de34d305002206ee72a238f7643af36def90d2a9d01f2fdeff99ef92bad3a699a718cf94d2384a1ef17aa6e7522b"], 0x3c}}, 0x0) 07:28:23 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 07:28:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xa) 07:28:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x3}, 0x2}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000001c0)="9b2cd7bc5028043ae7594bbd809ea25a4be22d4c6feb8870b3060da795051b510f16a9bc6324b946635c1e7ae78b8e708839d7a0a20ceff0b895cc8b49e34c76eac273f57f4c59dff4c8582ed248fc918ef82a6f50e353bf2ec1ae6be4dc93e2f5e9f3155c8c09d8e8bcaea9b31b4792ccb7c283328451d79dd05c5958bb041be1f0c41b0194976e83294b14a69abc6544e114c94866ea2eeca6b8c000cd321629abdb80d799d5f71c0fce8dca9fde6cd9cd5d6ad4cf6aab97b2afee90acf6241183968aa6b9034a7712728327cfc05858d084dcd38a81056448370fe66a8d8a5c654146b9e0", 0xe6}], 0x2, &(0x7f00000013c0)="073727b902084e5977dc724f821f3a5e900b98a3acc069f3f9bdf6a335f3aa4b28c189726bbaa5e1210a02979e23b9204c5b89cff8e6b2fb29a093a660de0d78fa16773795361f141a19d382ed203af48b559b08395e6379c37aec14574cec5baccf8042970a32a0b345b1b06b13011753d0a0bd24389ba0337c73f0a02766a60b5024bffaa5af74fdd907b5c3b8ecf8e596c96f63da2104cbfc3749d76d2f0c61bc3e9c2a830381038995e9fd222c9b9f188a1d0ca7bc7d0e3c8d2e5c1fb75bd432b278", 0xc4, 0x8000}, 0x20040800) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 771.558424] IPVS: ftp: loaded support on port[0] = 21 07:28:23 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r3, r0) [ 771.593960] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! [ 773.097261] Bluetooth: hci0 command 0x1003 tx timeout [ 773.102705] Bluetooth: hci0 sending frame failed (-49) [ 775.177065] Bluetooth: hci0 command 0x1001 tx timeout [ 775.182400] Bluetooth: hci0 sending frame failed (-49) [ 777.256926] Bluetooth: hci0 command 0x1009 tx timeout 07:28:32 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e22, 0x5, @remote, 0x7f}, {0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x36}, 0x4}, 0x100, [0x3, 0x7, 0x3f, 0x2, 0x8, 0x9d, 0x80, 0xfff]}, 0x5c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x4030) keyctl$revoke(0x3, 0x0) 07:28:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000000)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:28:32 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x60c900) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r2, r0) 07:28:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000600)=0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/kvm\x00', 0x92000, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/null\x00', 0x88000, 0x0) r5 = socket$inet6(0xa, 0x2, 0x34) r6 = syz_open_dev$audion(&(0x7f0000001cc0)='/dev/audio#\x00', 0xe6b, 0x610000) r7 = socket$rds(0x15, 0x5, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) sendmmsg$unix(r1, &(0x7f0000002040)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)="cd7e818279165f914878e9998f9cbac3eb710eaf7051e8b56a54b93d7f5e4b43376f564ec10f6ed72270cb76fbe3ce83a3309b8cd5b7ee64cac667a241b8f064ffc59230128e478c8c8a0a72f142bcc62b3aa3dc98783e2a4e4bd23678b94ce29a1222e10567b68bb27de86fbbc7d312291d82c18c3a0ceef1f33392903f40e2c0141688750a544294e7c351ef212900046c2901fd53b58b2733292320bbd772fa58", 0xa2}, {&(0x7f00000001c0)="9714b7d1a9dbee3b334b48a9cfab57472a30a8451f7b8140005edb29bdf9987131aef9e33fb3717d05adb0a80a9f069150b1a43c0fa4c887add7535c2cd898d6ad1b0022052bcc108e5c4d12792417eb5af6cf4d7f11d421db625705db6b4be5a9ddf7de4ea5d4edb8f39c0f7bd7707e50e7fb564573d9afadf0b6155affa1b86cda6319c90bc634627e3f9c8f71295bd5d02d873c49028efb8820acfab4158ee1ae0f850df4b3e9da88ded5428809e2b37d8d82d97957394e7c0505c2fe", 0xbe}], 0x2, &(0x7f0000000400)=[@rights={{0x24, 0x1, 0x1, [r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xa0}, {&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000000680)="4e2cc7d769298151ec33f070d101570b0d358728047b9f144c476c3b79cb7a7ea1e1d27e246e1019d636d06da1beae9679f950f7d1364d14911344e837c9e639eec1e294f680444ff4000e6b61b990a1a20b4ed20f39a22146081107b93c48506e43ba61ed136738353f0171d7ee7250891d5e08251aef40fcfef1d015c4df06f65ab7c10334d5ef7e1002872286a9ea5323368bfdb0cf2a4bb34eb86b67957b9d230a262a5884e85a4342b1cf17871c15b3a634b0c4bbd5b1daddae6712c6bb3667d146bb42067e4193026bef26eb31b1711eb0", 0xd4}, {&(0x7f0000000540)="54b8742b40161c23a8f7d659f33765152fff1ae3d25ae95086535b4f1a843bf9a145106c7fff3291311eb1b2abd8ffbeda489d50e17e581f801b6e200c7e117b368fda6b25c3828b6577966592d18b27a4c646affd5ec6da3035a8bdc44095ecfd96757e93cb5c4dc20ec4d5d40b494e779863b0415d41efef0c753e57c54f6cea9f0773e85bb0", 0x87}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="1eeca857d0342b17645954ecd3b69c4e110eb8d7423f8b5324721c8be16250d9312e41346969c92e965be968fb3ee9f356afc3666e29d179428c0fccca461d9711eb5a36d7cf59db56c43be36ac172f07363f03e1940f259585df7bd980a69c5f2b2661d4c7a66e680d04d61e6b74f60254f1cb9599864b07bf11e18a71ce06facdab6615deff6f37d1d5578cf6d12ae6ccdf577b09e10b292847204f88f8d007d7b72a986a22025af55c4ddabf4656fb70982aadcc15a4b6bbe52", 0xbb}], 0x4, &(0x7f0000001d00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r2, r2, r3, r4, r5, r6, r7]}}], 0x118, 0x8000}, {&(0x7f0000001e40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001ec0)="a606a25b51281c9b3b90b34055d44eeddfca92274b5ac533c69124b04f620c99bba170b4f1e76760acdbd938a595c50f1723268601346e3d64b82a373ec90abb311bbc37d71583a1555666dac511bd4516ed9e7d022a315edbda292cdedf9256e288a65a41f402333e44f2d6a9", 0x6d}, {&(0x7f0000001f40)="0d10bbf070fd116ac57c06a362b828fb28abf292f7", 0x15}], 0x2, &(0x7f0000002000)=[@rights={{0x28, 0x1, 0x1, [r8, r9, r10, r1, r1, r11]}}], 0x28, 0x40810}], 0x3, 0x4000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 07:28:32 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="2495e04604bc48bbadf0059cfbc6bd1a5cdb6cb746db1802296feb35b0ff5dd97db4c6ffa1fab41a1e13beacf3a6683b6da96071ab5315a4656a4291de2ed90492ebda28f7b01408bf582f0fabb973f27e517ec456b98e4d103001da8a730100d178b1a7a8e07bf8b99da303c5b3ef43a8308e131d2260ccc4400b4dedacef2e41a71d5b44ee7a91b768760471a10be89d6a396ff272ffc4f45e1f8cb2af0474992b6f281d72f84cc9b5682564275363701c46fc"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x300) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f0000000140)={0xa03f, 0x4, [{0x8, 0x1}, {0x3}, {0x2}, {0xc}]}) msgget(0x1, 0x422) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f00000004c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) 07:28:32 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 07:28:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:28:32 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6tnl0\x00'}) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r3, r1) [ 781.284384] Bluetooth: Unknown HCI packet type 5e [ 781.290229] Bluetooth: Unknown HCI packet type 43 [ 781.343348] Bluetooth: Unknown HCI packet type 5e [ 781.363287] Bluetooth: Unknown HCI packet type 50 [ 781.395347] Bluetooth: Unknown HCI packet type 5e 07:28:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000000), 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x200, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 07:28:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) write$P9_RXATTRWALK(r1, &(0x7f0000000000)={0xf, 0x1f, 0x1}, 0xf) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) recvfrom$inet(r3, &(0x7f00000001c0)=""/246, 0xf6, 0x100, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 781.422452] Bluetooth: Unknown HCI packet type 40 [ 781.427975] IPVS: ftp: loaded support on port[0] = 21 07:28:32 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) syz_open_dev$dri(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) dup2(r2, r0) 07:28:33 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aa4010000160a0000000000000000000000000006c80003800800024000008d6b08000240000000002c000380140001007663616e3000000000000000000000001400010076657468315f766972745f776966690068000380140001006d6163766c616e3100000000000000001400010076657468305f746f5f68737200000000140001006c6f000000000000000000000000000014000100766972745f77696669300000000000001400010074756e6c30000000000000000000000008000140000000000800024000000092080001400000000008000140000000000900010073797a310000000008000740000000010900010073798030000000009c0003800800024000001000400003801400010076657468305f766972745f7769666900140001006e657464657673696d300000000000001400010074756e6c300000000000000000000000080001400000000008000240000000094000038014000100626f6e645f736c6176655f3000000000140001006d6163766c616e3000000000000000001400010076657468305f746f5f7465616d0000000c000540000000000000000420000000000a01040000000000000000030000080900010073797a310000000074000000030a01010000000000000000070000051c0008800c00014000000000000000000c00014000000000000001010b00070066696c74657200000900030073797a320000000008000a400000000108000a400000000008000a400000000008000a40000000020900030073797a32000000007ce399f72c91c0531ceb5ee053d91400000011002129769801ca3374fea95648b4a0fdeb9ac20c7c1c00c4e9fc09a60d11db54072e7840a11241ca0892ec481e9ab734e10940da02077adb98503afe4d8617c7aba06becea7ed94933a0d527bbc9adf6a1f4a0af6b978a"], 0x260}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) dup2(r2, r0) [ 781.565462] ip_tables: iptables: counters copy to user failed while replacing table [ 781.650932] IPVS: ftp: loaded support on port[0] = 21 [ 783.336587] Bluetooth: hci0 command 0x1003 tx timeout [ 783.341939] Bluetooth: hci0 sending frame failed (-49) [ 785.426404] Bluetooth: hci0 command 0x1001 tx timeout [ 785.431748] Bluetooth: hci0 sending frame failed (-49) [ 787.496364] Bluetooth: hci0 command 0x1009 tx timeout 07:28:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="0400000000000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='flush']) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000040)) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r3, r2, 0x0, 0x80000005) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000180)={0x0, 0x0, {0x101, 0x4, 0x3, 0x8}}) 07:28:42 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x20200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r3, r0) 07:28:42 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:28:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000000), 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x200, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 07:28:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) rmdir(&(0x7f0000000000)='./file0\x00') 07:28:42 executing program 5: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)={0x4, 0x1, 0x4, 0x800, 0x101, {0x0, 0x7530}, {0x1, 0x1, 0x3, 0x8, 0xff, 0x89, "ec3f71c9"}, 0x5f, 0x1, @planes=&(0x7f0000000040)={0x5b93, 0x3, @mem_offset=0x7f, 0x2}, 0xc21, 0x0, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r4}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r5, 0x400455c8, 0x4) write$binfmt_elf32(r5, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x7f, 0xd2, 0x3, 0x5, 0x2, 0x3e, 0x4, 0x1b8, 0x38, 0x111, 0x8, 0x0, 0x20, 0x2, 0x774, 0x0, 0xffa1}, [{0x60000000, 0x3, 0x0, 0x101, 0x3, 0x5, 0x2, 0x8}, {0x4, 0x4, 0x1, 0x6, 0x7, 0x12, 0x4a, 0x20}], "127a8c30621e3a45e08de40bcf9bf8fafeac7ac8d83f775d07b1e03f64e729d98a200a617bc65cb86768b55f71856057e97ad9512dd4b2a7ed35dc6c6f47c1453d45aaa7210ad67e7b62871600a9dfae0155860590326ebf925d3204265b6a6c6bb81b57b6aac6368a104b255c983b468623b935ba083ddd07fdca164465ab2938eaf27d6b939f908f8367c877b38fd17f3f608a17f8460393f9b1ea2a8b0779a4f77e31a99033e5bf9228cefeef570382ae67", [[], [], [], []]}, 0x52b) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000000)=0x4030) 07:28:43 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r2, r0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/71, 0x47}) [ 791.473803] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29231 sclass=netlink_xfrm_socket pig=21354 comm=syz-executor.4 [ 791.498211] ip_tables: iptables: counters copy to user failed while replacing table [ 791.571672] Bluetooth: received HCILL_GO_TO_SLEEP_ACK (in state 0) [ 791.593701] Bluetooth: Unknown HCI packet type 5e [ 791.601514] Bluetooth: Unknown HCI packet type 43 07:28:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100039042bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002800128008000100736974001c00028008000100", @ANYRES32=r4, @ANYBLOB="08000300e000004c590106000e0007000000"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', r4}) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000040)=0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@local, @in6=@rand_addr="6586b15c85fee666e79e4c27a6fb64a1", 0x4e22, 0x0, 0x4e21, 0x3ff, 0xa, 0x80, 0xa0, 0x18, r5, r7}, {0x2, 0xffffffff, 0x6, 0x31, 0x80000000, 0x2, 0x7fffffff, 0xffffffff80000001}, {0x1, 0x0, 0x6, 0x3fd9}, 0x20, 0x6e6bc0, 0x2, 0x0, 0x2}, {{@in6=@mcast1, 0x4d4, 0x32}, 0xa, @in=@broadcast, 0x3506, 0x2, 0x3, 0x5, 0x7f, 0x1, 0xff}}, 0xe8) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 791.623815] Bluetooth: Unknown HCI packet type 5e 07:28:43 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x400) socketpair(0xf, 0x3, 0x0, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x7ffffff7) [ 791.654129] Bluetooth: Unknown HCI packet type 50 07:28:43 executing program 3: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x1b9, 0x4) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) getpeername$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r3, r1) [ 791.684863] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 791.692120] Bluetooth: Unknown HCI packet type 5e [ 791.705021] Bluetooth: Unknown HCI packet type 40 [ 791.724041] IPVS: ftp: loaded support on port[0] = 21 07:28:43 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r3, r0) [ 791.872683] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:28:43 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x88880) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x4800) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r2, r0) 07:28:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x110, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x70}]}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x40}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x5e6efa05}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0xd22}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x44000) 07:28:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="000075de00000800000000000000"]) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000080)) [ 792.093283] overlayfs: missing 'lowerdir' 07:28:43 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:28:43 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f00000002c0)="1975b710bdf61e81b4c8b057a5", 0xae, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x218, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$describe(0x6, r2, &(0x7f0000000000), 0x0) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r4, r0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x8, 0x10000}, 0xc) 07:28:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x40140, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f0000000000)={0x3, 0x9, [{0x15d, 0x0, 0x3}, {0xfffffffe, 0x0, 0x7ff}, {0x3, 0x0, 0x3ff}]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x4}, 0x10) [ 793.575867] Bluetooth: hci0 command 0x1003 tx timeout [ 793.581456] Bluetooth: hci0 sending frame failed (-49) [ 795.655817] Bluetooth: hci0 command 0x1001 tx timeout [ 795.661128] Bluetooth: hci0 sending frame failed (-49) [ 797.735675] Bluetooth: hci0 command 0x1009 tx timeout 07:28:53 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x24103, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000100)={0x9, 0x1, 0x9, 0x0, 0xffffffff, 0x8f, 0x9, 0x81, 0x37, 0x8, 0xf7, 0x79, 0x0, 0xb05, 0x1000, 0x1f, 0x1, 0x9, 0x1, [], 0x39, 0x4}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x4030) 07:28:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="000075de00000800000000000000"]) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000080)) 07:28:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000000), 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x200, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 07:28:53 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x1, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_FLAGS, @NFTA_TABLE_FLAGS={0x5, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040811}, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r3, r0) 07:28:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x10, 0x70bd2c, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0xc0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) open_by_handle_at(r1, &(0x7f0000000480)={0x101, 0x9, "46aceec2efc6e704372e2deb15ca876900d2b0dd3e76174f70c54baa15e7858f215de3dc0032c7c0555b6030cdfc95f4b0a9b7e479c91444c0d3637d28a29f6e43f28f8833e5f0df85142a93cc145deac5948bbf5eb5ddb15eac3f6cb2031898eb6b328ed469f92ff99216afa2e629504a5f6433c0cbc31d6f007b9b54ffcd18304d805ca4df24c93091e24c9a6516235e97fdebd1c6560ab5d6f9d15c3dc0509ee2a229b4e62760e0a853ea8e53ed8f415729bda89f03bd681e9b7a822baa7ec6bdf0a7deef20c0799c93e396c18e03097b6f4eee5fc4648a62ac6048836f1c8cdb7838f3386259dc184929c25322dfac433bb3d74e296e1b"}, 0x2a80) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x24}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0xffffffc1, @mcast2}, r5}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x24}, {0xa, 0x0, 0x0, @mcast1}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0xffffffc1, @mcast2}, r7}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r7, 0x4d03}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:28:53 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 801.716806] ip_tables: iptables: counters copy to user failed while replacing table [ 801.770347] overlayfs: missing 'lowerdir' [ 801.778190] Bluetooth: Unknown HCI packet type 5e [ 801.794078] Bluetooth: Unknown HCI packet type 43 [ 801.824801] Bluetooth: Unknown HCI packet type 5e 07:28:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000000c0)=""/18) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1\x00', 0x10) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000000)={0x7, "d41c94f9a37a80332f77f4643f867f97dc2c0cd374e00b40f21ead6bf0cd9106", 0x4, 0x2, 0x0, 0x7f, 0x8, 0x2, 0x100, 0x8}) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:28:53 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r0}) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r1, 0xffffffffffffffff) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r3 = socket(0x10, 0x3, 0x0) close(r3) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r6, 0xffff}, 0x8) r7 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000080)) [ 801.885989] Bluetooth: Unknown HCI packet type 50 07:28:53 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="f7"], 0x1) close(r4) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@newlink={0x6c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0xfffff455}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x2}, @IFLA_GRE_TTL={0x5, 0x8, 0x8}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x2a2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x2a}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x6c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newsa={0x1c4, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@tmpl={0x84, 0x5, [{{@in6=@mcast2, 0x4d3, 0x1}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x2, 0x0, 0x1, 0x2, 0x7fff, 0x7ff000}, {{@in=@broadcast, 0x4d3, 0x33}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x40}, 0x3502, 0x3, 0x0, 0x0, 0x0, 0x401, 0x7}]}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x1c4}}, 0x40000) splice(r1, &(0x7f0000000000)=0x9, r5, &(0x7f0000000040)=0x8, 0x4, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) [ 801.912959] Bluetooth: Unknown HCI packet type 5e 07:28:53 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0xfffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) fanotify_init(0x40, 0x2) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendmmsg$alg(r2, &(0x7f0000001880)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="4f4e1c93bb8acd3edde437ae80a385dd2da34bfbb92e60076faf84ce060a2dc0331f9794b07675d5c77fa5b52c7ce7ba7b082c63414c00b96879d5e3641903f6a606e018313e1d10c256099975b11db924cc9dcfb4c93dba8d297216bcab58821ae3c4abb7dd72a7ae440f23e94e7b165affdfe9633ef8951e5eedee0f284df16b91ef231ff9c912724621cf51337bed4dd5a1d83e49c192cf914d4ee75cadf8c7b92d35458fe2b52a4835f39e22f3912f12c31790ccb1cfe6cba2b2aa438348a9737ebf8551107347d63fcce1fec126acb1", 0xd2}], 0x1, 0x0, 0x0, 0x4008000}, {0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="815f307364880885583cfb44e5386d600f8db327b991ff4ee659104d81bdec3f12eab0d9ea4819cc6fe603ada21ca2cfd9e13dc34a40675660fac4c2559b128c78", 0x41}, {&(0x7f0000000300)="35de14c1f492847f0e7cb3ba7e3664093910c5e0402be9eb05767636880f21e847f12bc34bd8c31df91ab793e2f922826d2f8810dcbfb4d7cd5944f1373fe5b82b8016f5321837469ea108c0532649f0c73f213dd17735baf266c8c827a44bc432cde49ec7a627981929cb7cfb5273fc3b80eac0ddfceeba955bf0d4ca87356870dc47aa6ab4c6c2e943eb9e4312e979b2558c483a34d0a2b3a53b23", 0x9c}], 0x2, &(0x7f00000003c0)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x98, 0x117, 0x2, 0x82, "8344ae32c1000a677d3d88600c20e14ab67b46b26272580b8db0dc1158cc4f9a43562abb0b811fdeee6dc6c5438f16788aca3ece0c31f688df7d022287e1959196f1979e45def88ea0ae8119515eb3c30d3a8d4a78abba1d05aa5e041d243b46f33963bc41b456671bc5fd7eb582154de81002796491e7a22e82f8f41adfef622f05"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x10e0}, {0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000014c0)="941416d43ee21e1ac18932abccbf9e74fa4d8c4603a17028f24d3be7d3449963ae129ff90f364ef67246f4cfa7e1855b255aad1c6d5db996f0e07cfee9edb2337455a9eb401bd721bd6d917b10efc394a91265b89d3ef93f8a8841a0b5b233238b2e2c6812c914a35cf93c98e73fee7230cfb8c80245892e5c2eabb6bedb32a4e111da91e8acff8eb92e1d20ca2626b795d376e59e8717cde2d51c30677d00150a4c94244838c72cb06db6136e112f7c76c3ec16f5ef2a326cb6afaa6aad61520860c1cefc0fea509b9be82a23328b", 0xcf}, {&(0x7f00000015c0)="101fb379fadb384a329721f1adfcdc082c763d3a11a73a101cfae916743bdc145beb74d05a71d133bd2e567d0c6a22e4214035ef217e90c3345ce5370a87ec5b0a3e02e47954cc4b4c2436fc5e39e05fe12071ddb8fa2e9157151fc9fbcf260c221e4fa3282036c3464a5bf6fbadd245bcdf026b4f58277ae23f2f2e6dbc204bd2fbcb71e74af6b5f3e6d4720e40ecf5a36438a6c375d1abafbe6cf815b0691976a79825d895e4eb11fbd678225069c3df6928ba011eff23b03f898558ec40e74cb2cf459be133077927b3d63dcae83072e8803043a1faf0d3879ab98d896131c1102a11102dc5ff", 0xe8}, {&(0x7f00000016c0)="fc148e55b14c4e943c0a016f39635137d6cf52ebd26c11090a3eb3f1df0f050b2f330e4f271281b89fb322ae1b807bced91be459b750d1db159adc1906a19407d1113c04293c8ea72315210e230ee36759bd5fbf133be274cfc2a230147a8f542372ab", 0x63}], 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="f8000000000000001701000002000000e3000000c8f67aa1e78c582ba4d9492e04d021196e9b1edc26d0845743c5acc843285861d1dfed811adecce15a82d19124ecb7c074e49a42d60a2991fd02d1361f10dde98ba9d42960bfa673e7088d783ca606a9cfb5c30d938302065cc4c2081385dee61c4bdcd9baa5dd5cd347aa16df4cc7e250f2fe7c229a2d3cb9cc41e9d38ccda767594fc4828a16776be6dd4ee910277a70cd2a3c908839cedd19b88e99d4da3fb56c270197466c526f445e0e7a4e941e6b66301aef222c6a7ab164c56354be0899f8e20e00da2b32e6c8e2c50cb009cf6d96f8ca4be7f8ceee2531eedb9909a3414a4a00280000000000000017010000020000000f000000a5364e8700f03f317ed25681d8bdce0000000000180000000000000017010000040000000100000000000000"], 0x138, 0x10}], 0x3, 0xc0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r3, r0) [ 801.947305] Bluetooth: Unknown HCI packet type 40 [ 802.048336] IPVS: ftp: loaded support on port[0] = 21 07:28:53 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r2, r0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) 07:28:53 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x3f, 0x3, 0x9, 0x9}, 0x8) dup2(r2, r0) [ 803.096768] IPVS: ftp: loaded support on port[0] = 21 [ 803.815425] Bluetooth: hci0 command 0x1003 tx timeout [ 803.820770] Bluetooth: hci0 sending frame failed (-49) [ 805.895398] Bluetooth: hci0 command 0x1001 tx timeout [ 805.900718] Bluetooth: hci0 sending frame failed (-49) [ 807.975102] Bluetooth: hci0 command 0x1009 tx timeout 07:29:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000000), 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x200, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 07:29:03 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000040)={0xb, 0x2}) dup2(r2, r0) 07:29:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f00000000c0)=0x2) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff000000000000000000000000ff01000000000000000000000000000100000000000000000000000000000000178646d3b7d847abebfe6f7c8e42", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000004d0014006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000002000000"], 0x188}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000000)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:29:03 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 07:29:03 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="f7"], 0x1) close(r4) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@newlink={0x6c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0xfffff455}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x2}, @IFLA_GRE_TTL={0x5, 0x8, 0x8}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x2a2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x2a}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x6c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newsa={0x1c4, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@tmpl={0x84, 0x5, [{{@in6=@mcast2, 0x4d3, 0x1}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x2, 0x0, 0x1, 0x2, 0x7fff, 0x7ff000}, {{@in=@broadcast, 0x4d3, 0x33}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x40}, 0x3502, 0x3, 0x0, 0x0, 0x0, 0x401, 0x7}]}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x1c4}}, 0x40000) splice(r1, &(0x7f0000000000)=0x9, r5, &(0x7f0000000040)=0x8, 0x4, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) 07:29:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000000640)={&(0x7f0000000240)={0x27, 0x1, 0x2, 0x7, 0x40, 0x4, "74d2e61020fd1aefe20faeafe945d5baad49f77d71bc44aba21d8e2ce3a6b7c1075e9cbedd9edbadf2766deb584228d8bb6d0b5b967489099bf79c5236bda8", 0x18}, 0x60, &(0x7f0000000540)=[{&(0x7f0000000340)="19aa5993c15fdd7aa2b3f08da28a1b8796fd7bb25975c98c963a784007dd56c129b8fc8f451c140fee9e2f0ecc55e48c56f2d24ad8f5fd9d303338eeaea018299689662d03275036503eab0ecb9f001df38c1a383f047285f0423aa8531a84e64cdb0d88490d58fd05455626a2f3b2e74acc58919684b9987f790c8ab4233f0175b7fb3626bdf6ba7cb69bd057dd2f71c0c77c545fc9c01a830fabdb816d9c4b29d4f6f2df05bc849471138729a5f832881e05e2d17b5f0281b30907d247af7bac4608911d147b0a05f9fc059d80b8ae8a32317c30814de7db3d9ea3af7f229400402003d49edd5c3a356ce401c1", 0xee}, {&(0x7f0000000440)="f4425e370dacb74e24fe779e3c3e06fea9ad07ad8d5f900df695ad4915ef8f18672f6083a6b89f794c94c9504b832189e127377416f2644cd71488f3692c8d42223563db8b790f8cbcde5672bcc3a5d654d6757cd02b73fa352096313da23dd2541bb2cbcc71a8a633569d56df4bbc7adfc0f1952226a53db13e7377ef6ca7b532f33b178a2a0f4560ab4fb0c781ac91c41a60f5bc65ec4bbba2018a54541cf43fd6032fc9c1e0a0dfdfcdc3cb28278dc2d60071ac18a9840cbe70a9b583100af083b062c955e79d0d541b0c6e27e9f169312cd8cc8ebc533d39de93f793", 0xde}, {&(0x7f00000002c0)="855c1ffccd8454c811fa10cc915bb7b7bd79417e88f4aa5d", 0x18}], 0x3, &(0x7f0000000580)={0xa0, 0x117, 0x9, "a436910274b363e718525bbe8349bb4fba6c5ce1583bc0a69fbcce1da521d9949e808d28e678bdf7c4d8d4ed21dcaa7b24295cbdf837e7de7766c840a22f9610d4cf02278507fe615584d06afbf0d1e6e7108316c57a4e0e0ff9637eb5c7c9393449b850fe5b085b2bbce72ce7dd12a946145c96c1f8277266e2b9f5911a665fafbde0b5f14550cdb0955f"}, 0xa0, 0x24040040}, 0x800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)={0x9615, 0xb, 0x4, 0x40070002, 0x400, {r2, r3/1000+30000}, {0x5, 0x8, 0xbd, 0x8, 0xff, 0x20, "54060325"}, 0x0, 0x2, @userptr=0x6, 0x7fff}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f00000001c0)={0x7a03693a, 0x7, 0x4, 0x4, 0x9, {0x0, 0x2710}, {0x5, 0x8, 0x0, 0x8, 0x4, 0x4}, 0x3, 0x1, @planes=&(0x7f0000000180)={0x1, 0x8, @mem_offset=0xff, 0x7}, 0x5, 0x0, 0xffffffffffffffff}) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) [ 811.965372] ip_tables: iptables: counters copy to user failed while replacing table [ 811.978816] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. 07:29:03 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x202440) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000080)={0x98a, 0x6dd17e48da19d451, 0x4, 0x200000, 0x2, {r4, r5/1000+30000}, {0x3, 0x8, 0x8, 0x9, 0x2, 0x0, "3654b4e5"}, 0x6, 0x4, @offset=0x1, 0x6, 0x0, r6}) dup2(r2, r0) [ 812.045799] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. 07:29:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) 07:29:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 812.189769] Bluetooth: Unknown HCI packet type 5e [ 812.201238] Bluetooth: Unknown HCI packet type 43 [ 812.233872] Bluetooth: Unknown HCI packet type 5e [ 812.270462] Bluetooth: Unknown HCI packet type 50 [ 812.279061] IPVS: ftp: loaded support on port[0] = 21 07:29:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) 07:29:03 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x8000, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x9, 0x1, 0xffc, 0x2, 0x2f, 0x101, 0x20}) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = socket(0x10, 0x3, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="00800000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x8000, 0xc1, 0x0, 0x4ee7, 0x3ff, 0xffff, 0x1ff, 0x5, r5}, &(0x7f0000000080)=0x20) r7 = syz_open_dev$dri(0x0, 0x0, 0x12203) dup2(r7, r0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={r6, @in6={{0xa, 0x4e21, 0xa15, @loopback, 0x2}}, 0x322, 0x6, 0x6, 0x172, 0x1}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={r8, 0x2}, &(0x7f0000000180)=0x8) [ 812.311336] Bluetooth: Unknown HCI packet type 5e [ 812.328294] Bluetooth: Unknown HCI packet type 40 07:29:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000000)={0x5, 0x6, 0x4, 0x100000, 0x7fff, {0x77359400}, {0x2, 0xc, 0x6, 0xff, 0xc0, 0x1f, "ea6ca9de"}, 0x8, 0x2, @fd=r3, 0x3, 0x0, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:29:04 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x4, 0x2, 0x100, 0x401, 0x7, 0xd923}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r2, r0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f00000000c0)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) 07:29:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r1 = socket(0x10, 0x3, 0x0) close(r1) r2 = socket$inet(0x2, 0x4000080801, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB="1400000042198391675f714b105b9b573ed6"], &(0x7f00000000c0)=0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e23, 0x81, @mcast1, 0x8}}, 0xfff, 0x1f, 0x1, 0x1, 0x2, 0xfe1d, 0x7}, 0x9c) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$KVM_GET_REG_LIST(r7, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="05002e6f23bfdc9510ee9de7b8f000f7ffffff0005000000000000000080000000000000060000000000000006000000"]) 07:29:04 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x804}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r2, 0x40044104, &(0x7f0000000180)=0x28) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000140)={r4, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 07:29:04 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 07:29:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xfffffffc, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x7fff, 0x4) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1, 0x8) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="0084dc40c10f1e80ecaec48a2bbf9ab1c72edf856a88ef21bd7813b26387d3086a4fad536de86c8a836156375baefec1bd2116eb1fa2cf56749b5568652f145a", @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf250a00000008002c0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4040000) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000340), 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14000, 0xa71, 0x0, 0x0, 0x0, 0x6, 0x9}, 0x0, 0x0, r3, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/98, 0x62, 0x4000, &(0x7f0000000380)=@rc={0x1f, @fixed={[], 0x11}, 0x7}, 0x80) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x800000020006691a, 0x8, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 07:29:04 executing program 4: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0xbe, 0x4, 0x1}) clock_nanosleep(0x0, 0x0, &(0x7f0000000140), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = gettid() r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x44, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x95}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f800000}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000041}, 0x80) r7 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) recvfrom$unix(r7, &(0x7f0000000180)=""/107, 0x6b, 0x40, &(0x7f0000000200)=@file={0x1, './file1\x00'}, 0x6e) tkill(r2, 0x1000000000013) 07:29:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) socket$kcm(0x29, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 814.214616] Bluetooth: hci0 command 0x1003 tx timeout [ 814.220028] Bluetooth: hci0 sending frame failed (-49) [ 816.294587] Bluetooth: hci0 command 0x1001 tx timeout [ 816.299916] Bluetooth: hci0 sending frame failed (-49) [ 818.374480] Bluetooth: hci0 command 0x1009 tx timeout 07:29:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff000000000000000000000004ff01000000000000000000000000000100000000000000000000000000000000e00c7f63080546c8bf445dc1a1e8ac7048688456750cedea48af0280fc3229837dadb76e4a69b72e6d0c19f7d061d2191e077a1e887c7315b611399b79a6f5f3504a337988c3b9173fbd5c295549cc03dacbb5fb363c12804b84c00da9d3a8af933183014bdf2976ccd86b757b65c5c1eb90d010912a8d5692a49b9878c1ef4b8c94a45433874246e7090c313e057402b7a00643d13f859b2d03000000481fa9f06a5b48e1e0e26d435e3cab36a2b8f8e639d4da58c9a2365cc5bb33d3afdc231d5af5f7c4b25a5a658d9acaf25a624fdc0595d29af8d58c06bbce065d8785", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYBLOB="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"], 0x4}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) ioctl$sock_proto_private(r1, 0x89e8, &(0x7f00000001c0)="ab51f72954c84edd1b0576291575da749b23165cbbe945c92524167a56e3e915a2fb42600ac040dd1b1abdddd72c80ff2526d7a1ec5a73eca165ef9a3c023ddfe8f78cf4d3bf4cbde82113572ed30829a8775fa98062f92113727afb21f3455cfcf14b9c81b32930a6a439c529c57ebe9ae33d145c39a5914896afbefc5c094719a92ffb52f752d4020597084d1cc5c3d881b372b58ca81a926ab86149e38888a3616085dc1d8cea56dd288fd32c326b7da666ea3853b9d9a70e262f40f81f59d5dd587e5c28799beafa71a4dfa957") r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:29:14 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x200002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$VT_DISALLOCATE(r3, 0x5608) dup2(r2, r0) 07:29:14 executing program 4: timerfd_create(0x9, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='cpuset@\x00', 0xfffffffffffffffa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) io_setup(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(0x0, 0x40) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) r1 = open$dir(0x0, 0x0, 0x0) mkdirat(r1, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x800, 0x1000) r4 = dup(r3) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x102, @rand_addr, 0x1fc}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r5, 0x7fff) sendfile(r4, r5, 0x0, 0x8000fffffffe) 07:29:14 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x33, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) clone(0xa0008300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000280)=0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x22c680, 0x3ce47c9a4b8a4dbe) perf_event_open(&(0x7f0000000640)={0x4, 0x70, 0x81, 0x5, 0x3, 0x1, 0x0, 0x3, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x68, 0x7, 0x5, 0x9, 0x0, 0x8001}, r1, 0x400000000007, r2, 0x2) fchdir(r2) open(0x0, 0x323201, 0xac) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfd, 0x6, 0x0, 0x41c1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x2}, 0x0, 0x1fffd, 0x40080609, 0x3}, 0x0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r5, 0x8200) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x110, r6, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000003280), 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) fcntl$setstatus(r3, 0x4, 0x44800) io_submit(r4, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000000, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x8200}]) timer_create(0x1, &(0x7f0000000180)={0x0, 0x12, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000340)) timer_create(0x1, &(0x7f00000001c0)={0x0, 0x824, 0x0, @thr={&(0x7f0000000580)="50f2b8e3b7d1ccb40c6d09cd913921e29c6a22936301fcffff528f3b0e17ed3844959befef4eed24507e9708b9238820d5ef3fd8b004598810af48cd72a0c360339c2b45fcb8350341c99e1722cde365059e0200e33419702ca92b84d6cfae8bd62f8edef25c88707410df0dc5774c72f2a16cefaa160bac7217969b3e58cc3d647622fa0afb4cb26aa89e70acb91122ab23ed339425109578dc00"/164, &(0x7f00000004c0)="1e38f914eb0ff21d9540eee49ac914ca1ce69d2eb5a762514daf9786c08646c5085faa7d053d51bc15775052705a525dbaae4e5aee4982baa1b600dcd13edf058d6cbd78570a6aa54e93c6e7e0fc8ffab2fae2f023"}}, &(0x7f0000000100)) socket$inet6(0xa, 0x2, 0x0) 07:29:14 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 07:29:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x101000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="81230200", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e21, 0xfffffffc, @empty, 0x4648}}, 0x7ff, 0x4, 0x5, 0x40}, &(0x7f0000000400)=0x98) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={r4, 0xad77766}, 0x8) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="48000000100020002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002800128008000100736974001c00028008000100", @ANYRES32=r6, @ANYBLOB="08000300e000000108000100", @ANYRES32=r6, @ANYBLOB="51ab30"], 0x48}}, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x801, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=@deltclass={0x58, 0x29, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x3, 0xffe0}, {0x9a86976bca9aa9ff}, {0x0, 0x2}}, [@tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x2c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x5}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x477}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x9}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6}, @TCA_QFQ_LMAX={0x8, 0x2, 0xffff}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) 07:29:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x1000, 0x80000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f00000000c0)=0x7fffffff) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) open(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', 0x0, 0x1c1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfc6d}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) recvmsg$can_raw(r3, &(0x7f0000000240)={&(0x7f0000000400)=@rc={0x1f, @none}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000540)=""/252, 0xfc}, {&(0x7f0000000140)=""/12, 0xfffffffffffffe84}, {&(0x7f0000000d80)=""/126, 0x7e}, {&(0x7f00000006c0)=""/69, 0x45}, {&(0x7f0000000e00)=""/188, 0xb1}, {&(0x7f0000000800)=""/207, 0xcf}, {&(0x7f0000000900)=""/251, 0xfb}, {&(0x7f0000000a00)=""/100, 0x64}, {&(0x7f0000000a80)=""/183, 0xb7}, {&(0x7f0000000b40)=""/242, 0xf2}], 0xa, &(0x7f0000000d00)=""/128, 0x80}, 0x20) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000180)='./file0\x00', 0xe8c7d, 0x0) 07:29:14 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000340)=""/219, 0xdb, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000100)={0x0, 0x1, 0x7ff, &(0x7f0000000040)=0x7}) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f00000001c0)={0x4, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {}]}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400400200) ioctl$RTC_UIE_ON(r4, 0x7003) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES64, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030343004000000000000005f69643da19f0c8148eebd5b4a953bf133a7aba73791caccb4375a6e87e2300b7b0b6e6be2e6b5cad47671745258b97fce65205158f9489ca4bb94686d82fbeca66b955870b9410a4b064beca9307678f931e7a5a02fcc756167542d9bf4cd29dd51a4ab231a4937839939d1a12138686504bb2fe86bc2498ef6583dc4e0b3e82b232063934de58d117a6c7eb65ec00bb3d364af54cc9accdf7b50524b668f5a14297f76603f5dfebf834a0566ac92939b997c00969eecfef5c8d2ad6cabfc2fe11aeda7385b4aa645012678bf153e1713024665b968ba33d56700ec3ff4e82c70fa618c59000000000000000001000000", @ANYRESDEC=0x0, @ANYRESDEC=r3, @ANYRESDEC=0x0]) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) [ 822.960943] Bluetooth: Unknown HCI packet type 5e [ 822.966247] Bluetooth: Unknown HCI packet type 43 [ 822.989169] Bluetooth: Unknown HCI packet type 5e [ 823.021747] Bluetooth: Unknown HCI packet type 50 [ 823.041534] Bluetooth: Unknown HCI packet type 5e [ 823.052948] Bluetooth: Unknown HCI packet type 40 [ 823.080556] IPVS: ftp: loaded support on port[0] = 21 07:29:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2200e}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:logrotate_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x10048800}, 0x20000001) epoll_create1(0x0) r2 = socket$inet6(0xa, 0x3, 0xfc) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x5, 0xc0000) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x90) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0xfffc, 0xffff, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x3ff, @empty, 0x8000}, 0x1c) 07:29:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2200e}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:logrotate_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x10048800}, 0x20000001) epoll_create1(0x0) r2 = socket$inet6(0xa, 0x3, 0xfc) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x5, 0xc0000) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x90) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0xfffc, 0xffff, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x3ff, @empty, 0x8000}, 0x1c) 07:29:15 executing program 4: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r3 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r3, 0x1000000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) bind$llc(r1, &(0x7f0000000040), 0x10) connect$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) [ 823.582278] llc_conn_state_process: llc_conn_service failed 07:29:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x4}, 0x10) 07:29:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x101, 0xcf74}, 0xc) 07:29:15 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f00000002c0)=0x401, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000014000000"]}, 0x1, 0x0, 0x0, 0x40}, 0x40000844) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}, 0x2}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000100)={0x1f, 0x7f, &(0x7f0000000300)="9c5df0291236c5c9b9a360dd7f1c372678870d00aea90fc4f5069c8ba2761c442ade007ba7a4a42bb9eedc9aa91d2fe532d436cfbfc10ccf9bd833382cc8ad0acf0557ca7e9ac286dce4b99624d6fdd84d416dee0d4e13263161215b5b0fab9a32847360ee866940272625dc7b9768f8dece8b441b0c20702ffcfcdc7fa099"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 07:29:15 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 07:29:15 executing program 4: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 824.230545] llc_conn_state_process: llc_conn_service failed 07:29:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000000)) [ 825.014110] Bluetooth: hci0 command 0x1003 tx timeout [ 825.019594] Bluetooth: hci0 sending frame failed (-49) [ 827.093950] Bluetooth: hci0 command 0x1001 tx timeout [ 827.100127] Bluetooth: hci0 sending frame failed (-49) [ 829.173853] Bluetooth: hci0 command 0x1009 tx timeout 07:29:24 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 07:29:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) r0 = syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x0, 0x40000) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x480000) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="73797a309b298311e7176d17c46dee325eeca04077c3647f485107b37067438ec3b105000000000000000000"], 0x2e) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000000)) unshare(0x20600) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x103000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f00000003c0)=""/224) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000180)=0x58e6f20) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) open(0x0, 0x181100, 0x0) 07:29:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000006802bb62221cbe051cd9e4fa674fc9898acf85f0bcc615bf6d0ab26cb768f5f939898d8c69b29bbfeed93aa1052c64ffbd04", @ANYBLOB="0da85c5a3a0a6d3dcd2535ed37e3b11587b1fd8a4e19b1eadf0614a62a11be591fb75a5b1e2f8613"], 0x2}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = open(&(0x7f0000000200)='./file0\x00', 0x260a03, 0x180) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000100)={0x14509169, 0x8, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fchmod(r2, 0x100) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x34, 0x0) 07:29:24 executing program 1: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000000)={0x5, 0x3, 0x1, 0x99a, 'syz0\x00', 0x1200}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@gettaction={0x3c, 0x32, 0x0, 0x70bd25, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x519}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x8000) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:29:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x2}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000100), 0x0, 0xffffffffffffffff, 0xb}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) 07:29:24 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) r5 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x10001, 0x201242) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000040)=[0x6, 0x0], 0x2, 0x80000, r4, r5}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x188}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6, 0x6, 0x3, 0xf0000000, 0x2], 0x5, 0x80800, r4, r6}) dup2(r2, r0) [ 833.091070] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 07:29:24 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000140)={0x1000, &(0x7f0000000000), 0x0, r3, 0x4}) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000000)) dup2(r2, r0) 07:29:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = socket(0x10, 0x3, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r5, 0x6}, &(0x7f0000000100)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) 07:29:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x640) rt_sigqueueinfo(0xffffffffffffffff, 0x33, &(0x7f0000000200)={0x3, 0x1, 0x2}) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffe5d}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@dev, 0x6d}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/75, 0x4b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0xe) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 07:29:24 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0xd66, 0x4, 0x6, 0x10000, 0x7ff, 0x8, 0x129b2499}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000001c0)={0x58, 0x8, 0x820e, 0x400, 0x2, 0x1, 0x8e9, 0x4, r8}, 0x20) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r4, 0x711, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x4008000) dup2(r2, r0) 07:29:24 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x9, 0x3, 0x1}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x24}, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0xffffffc1, @mcast2}, r4}}, 0x48) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r4, 0x3}}, 0x10) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r5, r0) [ 833.385297] IPVS: ftp: loaded support on port[0] = 21 07:29:24 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r3, r0) 07:29:25 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 07:29:25 executing program 2: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0xd66, 0x4, 0x6, 0x10000, 0x7ff, 0x8, 0x129b2499}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000001c0)={0x58, 0x8, 0x820e, 0x400, 0x2, 0x1, 0x8e9, 0x4, r8}, 0x20) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r4, 0x711, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x4008000) dup2(r2, r0) 07:29:25 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000040)={0xffffff2d, 0xb30d}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x4, "d6ae972b0a3dec82"}) rt_sigtimedwait(&(0x7f0000000080)={[0x1]}, &(0x7f0000000140), &(0x7f00000000c0)={0x0, 0x1c9c380}, 0x8) dup2(r3, r0) 07:29:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x2, 0xa, 0x4, 0x100000, 0x0, {r3, r4/1000+30000}, {0x2, 0x8, 0xba, 0x0, 0x20, 0x8, "e733e9e1"}, 0xc8, 0x3, @fd=r5, 0x8, 0x0, r6}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r7, 0xc01864b1, &(0x7f0000000240)={0x7, 0x3, 0x3, 0x9, &(0x7f00000001c0)=[{0x8001, 0x6c, 0x2, 0x8}, {0x3ff, 0x20, 0x74e5, 0x3}, {0x3f, 0x8, 0x3, 0xb9e}, {0x9, 0x5, 0x3, 0x2}, {0x9, 0x9, 0x3, 0x25}, {0x91c, 0x2cb, 0x1, 0x3}, {0x200, 0x0, 0x1, 0x200}, {0x6, 0x94, 0x1}, {0x3f, 0x0, 0x0, 0x87f}]}) sendto$inet(r0, 0x0, 0x0, 0x1000000020040800, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@remote, @broadcast}, 0x8) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000000)={0x3, 'netdevsim0\x00', {}, 0x1}) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x8000, 0x0) 07:29:25 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f00000002c0)="1975b710bdf61e81b4c8b057a5", 0xae, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x218, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$set_timeout(0xf, r0, 0x4) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"/345, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000004d0014006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000002000000"], 0x188}}, 0x0) r4 = inotify_init1(0x80000) fcntl$dupfd(r3, 0x0, r4) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f0000000000)={r6}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={r6, &(0x7f0000000080)=""/30}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r7}) r8 = syz_open_dev$dri(0x0, 0x0, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8440, 0x0) ioctl$LOOP_SET_CAPACITY(r9, 0x4c07) dup2(r8, r2) 07:29:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001340)={0x24, r3, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x24}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x80, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1000}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1000}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 834.409025] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 834.526751] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. 07:29:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) fcntl$setsig(r0, 0xa, 0x30) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/cachefiles\x00', 0x12b701, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000002cc0)={0x18, 0x0, {0x1, @random="7d5a56a7f565", 'syz_tun\x00'}}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000000)=0x1) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) [ 835.493519] Bluetooth: hci0 command 0x1003 tx timeout [ 835.499279] Bluetooth: hci0 sending frame failed (-49) [ 837.573265] Bluetooth: hci0 command 0x1001 tx timeout [ 837.578693] Bluetooth: hci0 sending frame failed (-49) [ 839.653272] Bluetooth: hci0 command 0x1009 tx timeout 07:29:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x84) r4 = socket(0x10, 0x3, 0x0) close(r4) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYBLOB="5200000062590edf1bcd1ae9d7ed8efa509ad915711cce802c2dbaf38a9f37090030f3d85c17400ff273a26f1269643d7de1f548eb5644339c03425dfcf7458c0e3c737c03caf1700868b5e47aa3b3aebedc9d277f677827ec8ec45df421007c82"], &(0x7f0000000040)=0x5a) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r8, 0x7}, 0x8) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000200)={@null, @default, 0x2, 0x56}) 07:29:35 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 07:29:35 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x2, 0xa, 0x4, 0x100000, 0x0, {r3, r4/1000+30000}, {0x2, 0x8, 0xba, 0x0, 0x20, 0x8, "e733e9e1"}, 0xc8, 0x3, @fd=r5, 0x8, 0x0, r6}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r7, 0xc01864b1, &(0x7f0000000240)={0x7, 0x3, 0x3, 0x9, &(0x7f00000001c0)=[{0x8001, 0x6c, 0x2, 0x8}, {0x3ff, 0x20, 0x74e5, 0x3}, {0x3f, 0x8, 0x3, 0xb9e}, {0x9, 0x5, 0x3, 0x2}, {0x9, 0x9, 0x3, 0x25}, {0x91c, 0x2cb, 0x1, 0x3}, {0x200, 0x0, 0x1, 0x200}, {0x6, 0x94, 0x1}, {0x3f, 0x0, 0x0, 0x87f}]}) sendto$inet(r0, 0x0, 0x0, 0x1000000020040800, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@remote, @broadcast}, 0x8) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000000)={0x3, 'netdevsim0\x00', {}, 0x1}) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x8000, 0x0) 07:29:35 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x71, &(0x7f0000000000)={r1}, &(0x7f0000000040)=0x18) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10010, r2, 0x8001) 07:29:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x416002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) setrlimit(0x3, &(0x7f0000000000)={0x5, 0x100000001}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000080)={0x7ff, 0x1, 0x4, 0x1000, 0x6, {r4, r5/1000+10000}, {0x3, 0x8, 0xab, 0x8, 0xff, 0x3, "ea087a22"}, 0x3, 0x1, @offset=0xca, 0x2836, 0x0, r1}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000180)={0x7, r7}) r8 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r8, r1) 07:29:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x63c040, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x43, 0x9, 0x63, 0xff}, {0xf858, 0x20, 0x6, 0x1}]}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x2, &(0x7f0000000100), 0x0, r3}) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x4030) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KDADDIO(r4, 0x4b34, 0x9) 07:29:35 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x4, 0xa8d7, 0x4000009, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3f, 0x400000) getsockname$l2tp(r5, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000140)={0x6, 0x5, 0x1000}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000340)={0x8, 0x4, 0x4, 0x1, 0x101, {}, {0x1, 0x8, 0x1f, 0xcf, 0x6, 0x0, "c5504adb"}, 0x0, 0x1, @offset=0xd2, 0x3ff, 0x0, 0xffffffffffffffff}) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000240)={0x4, r7, 0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r8 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000400)={0x4, &(0x7f00000003c0), 0x8, 0xffffffffffffffff, 0x3}) ioctl$VIDIOC_G_PARM(r8, 0xc0cc5615, &(0x7f0000000000)={0x6, @capture={0x1000, 0x0, {0x9, 0xb6cb}, 0x401, 0x7b}}) r9 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r9, r0) [ 844.060404] Bluetooth: Unknown HCI packet type 5e [ 844.065801] Bluetooth: Unknown HCI packet type 43 [ 844.079188] Bluetooth: Unknown HCI packet type 5e [ 844.085212] Bluetooth: Unknown HCI packet type 50 07:29:35 executing program 2: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="7920e3b2eca67f9db5fa93ee2afb1b57360d4e800af9ef8bda4c857866fdfcb2f7a198f1692f6f71e7577fab109d65eb90389c14a33a690af3bda9dea0e4c3932aff9bc44fe093942b6ce6ca4b1a278d7989ca17ec9ac1a30fb2d0f9161d041a19fcaff8cc0d5c2d6594a1", @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000b0000000000"], 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0xfffffffffffffffc, 0x6, 0x0, 0x8, 0x4cb]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 844.131650] Bluetooth: Unknown HCI packet type 5e [ 844.148677] Bluetooth: Unknown HCI packet type 40 07:29:35 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0x9, 0x9, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r2, r0) [ 844.235206] IPVS: ftp: loaded support on port[0] = 21 07:29:35 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhci\x00', 0x101002) write$vhci(r0, &(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) lookup_dcookie(0xfff, &(0x7f0000000100)=""/249, 0xf9) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000040)={r4}) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x400448cc, 0x0) 07:29:35 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r2 = dup(0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000bca43edfc66f6a2835069fbfc759aad0bcc835e5add5a5ecc2d9dead3044736c01070d42b76056a7dde69ff01cc53fe46377dc29c491c16fcd5c5da92b3f9630", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000540)={r4, 0x9c, "16b7cde369215bc2fe1a5beba63964524157ac5b7219d982c9086a2593f7c9dbb9b2338dd7b6e1550081ba6bff7006598f4a3d06bac0c638c20ac930173e608082c4b2b69c3ea084b46bb4d32c309574d25335cd60c810a71e4f1dc55d3fc17b8921faa00cd780424cc6a311869a187972cf8203037f5cae59c217a13c23efee0a41082a0cb1f7992ef0f94e603076884180fa818dd2feceb72cc2ce"}, &(0x7f0000000180)=0xa4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x7, 0x9, 0x1a, 0x14, "a164409211fb7c1c298f42b6f478b39bccba887e557c244427b44b0fe753e6af2ad1515aa3522cf8ac7273caf53ec317910742ca069b1cbd028f269ef7e9c063", "cebcb1d0f5d88aad8bd405299a6c8ef541526088729f750ca50ba53c7fe7168d", [0x3f, 0x6]}) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000000), 0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r5, r0) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x6000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x5}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000340)={0x3, 0x1, "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"}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000140)=0xc84, 0x8) 07:29:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x400000001ffffffd) socket$inet6(0xa, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [{0x801, 0x0, 0x0, 0x0, 0x0, 0x8000}, {0xffffffff}]}) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000200)={0x0, "89aa5c8cc0a30930aedc24f3ea904a0d88a038a17600558ffa7683c3751d6e74", 0x1, 0x975, 0x7, 0xb700, 0xa}) connect$inet6(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [{0x801, 0x0, 0x0, 0x0, 0x0, 0x8000000008000}, {0xffffffff}]}) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x1402, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x4000804) 07:29:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r3 = socket(0x10, 0x3, 0x0) close(r3) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r6, 0xfffffffc}, &(0x7f00000000c0)=0x8) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:29:36 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 07:29:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x400000001ffffffd) socket$inet6(0xa, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [{0x801, 0x0, 0x0, 0x0, 0x0, 0x8000}, {0xffffffff}]}) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000200)={0x0, "89aa5c8cc0a30930aedc24f3ea904a0d88a038a17600558ffa7683c3751d6e74", 0x1, 0x975, 0x7, 0xb700, 0xa}) connect$inet6(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [{0x801, 0x0, 0x0, 0x0, 0x0, 0x8000000008000}, {0xffffffff}]}) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x1402, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x4000804) 07:29:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000080)="66799744b6b1d008fe48a30c97252ae8fced36d9d0ada01513b1") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:29:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) gettid() r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) [ 846.132800] Bluetooth: hci0 command 0x1003 tx timeout [ 846.138135] Bluetooth: hci0 sending frame failed (-49) [ 848.212641] Bluetooth: hci0 command 0x1001 tx timeout [ 848.217948] Bluetooth: hci0 sending frame failed (-49) [ 850.292567] Bluetooth: hci0 command 0x1009 tx timeout 07:29:45 executing program 5: syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x893, 0x513480) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x4030) 07:29:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xa}, 0x8001, 0x0, 0x10, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340), 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$perf(&(0x7f00000e1000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r1, 0x6) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)='i\ra', 0x3}, {0x0}], 0x2) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0xd, 0x16, 0x8, 0x400, 0x1, 0xf2}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000140)='syz_tun\x00') read(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40008c0}, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r5, 0xc004510e, &(0x7f0000a07fff)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 07:29:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x100, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e22, 0x0, @loopback, 0x3}}, 0x0, 0x0, 0x2e, 0x0, "75bdb5282ba8a4b9377a704e30f1c6d48c46f57f88b9b4113646350e05baa143a858c850d7acc6b767e7e5c69d4c30553575714e36e5efcfe3307d161bc1c253ee244a1342ee2a89078f15ff4d8d7123"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e24}, 0x10) 07:29:45 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 854.200239] Bluetooth: Unknown HCI packet type 5e [ 854.210585] Bluetooth: Unknown HCI packet type 43 [ 854.241588] Bluetooth: Unknown HCI packet type 5e [ 854.275572] Bluetooth: Unknown HCI packet type 50 [ 854.286077] Bluetooth: Unknown HCI packet type 5e [ 854.291027] Bluetooth: Unknown HCI packet type 40 [ 854.444023] IPVS: ftp: loaded support on port[0] = 21 07:29:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xffff0db1, 0x1ff, 0x3, 0xf55, 0x0}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, r5, 0x4}) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000600)={0x3}) r6 = socket$tipc(0x1e, 0x5, 0x0) recvmsg(r6, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/154, 0x9a}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000000440)=""/245, 0xf5}], 0x4, &(0x7f0000000540)=""/177, 0xb1}, 0x40002002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x6, 0x6, 0xa, 0xffff, r3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000000)) r7 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r7, r1) 07:29:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x6, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:29:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x4020, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$bt_rfcomm(r0, &(0x7f0000000440)={0x1f, @none, 0x1}, 0xa) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffff0300000000000000000000000000ff010000000000000000000000000001000400000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x188}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x1ff, 0xb, 0x4, 0x400000, 0x4, {}, {0x3, 0xc, 0x7f, 0x7, 0x7, 0xff, "8e16a1d5"}, 0xd8, 0x2, @fd=r1, 0x81, 0x0, r2}) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="0000000000000000000000ec00"}, 0x1c) sendmmsg$inet_sctp(r3, &(0x7f0000000100), 0xa0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x188}}, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f0000000480)={0x7, 0x7, 0x3}, &(0x7f00000004c0)=0x28) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) syz_mount_image$xfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000500)) 07:29:46 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0xa8) r1 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) inotify_init1(0x40f87483eceaa735) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x168, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xa0}, [@address_filter={0x28, 0x1a, {@in6=@remote, @in6=@remote, 0xa, 0x1, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x168}}, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000040)={{}, 0x5344, 0x80003c, 0xfffffffffffff000}) 07:29:46 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000000)) r3 = syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x527841) dup2(r3, r0) 07:29:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x4020, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$bt_rfcomm(r0, &(0x7f0000000440)={0x1f, @none, 0x1}, 0xa) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffff0300000000000000000000000000ff010000000000000000000000000001000400000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x188}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x1ff, 0xb, 0x4, 0x400000, 0x4, {}, {0x3, 0xc, 0x7f, 0x7, 0x7, 0xff, "8e16a1d5"}, 0xd8, 0x2, @fd=r1, 0x81, 0x0, r2}) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="0000000000000000000000ec00"}, 0x1c) sendmmsg$inet_sctp(r3, &(0x7f0000000100), 0xa0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000fe8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000004d0014006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000002000000"], 0x188}}, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f0000000480)={0x7, 0x7, 0x3}, &(0x7f00000004c0)=0x28) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) syz_mount_image$xfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000500)) [ 854.863244] audit: type=1804 audit(1585898986.375:115): pid=22007 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir979596290/syzkaller.asTNIz/248/bus" dev="sda1" ino=16268 res=1 07:29:46 executing program 2: r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$vcsa(0x0, 0xfde, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000005c0)=""/187, 0xbb}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3, 0x0, 0xfffffffff7fffffb}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r6 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x2000002) fallocate(r5, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r6}) 07:29:46 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x400100) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r2, r0) [ 856.212229] Bluetooth: hci0 command 0x1003 tx timeout [ 856.217544] Bluetooth: hci0 sending frame failed (-49) [ 858.292221] Bluetooth: hci0 command 0x1001 tx timeout [ 858.297639] Bluetooth: hci0 sending frame failed (-49) [ 860.382034] Bluetooth: hci0 command 0x1009 tx timeout 07:29:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000740)='/dev/rfkill\x00', 0x2000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r3 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000240)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="040005000000000008000100", @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r5, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYBLOB, @ANYRES32=0x0], 0xf, 0x0) fchown(r1, r2, r5) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r7 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockname$llc(r7, &(0x7f00000000c0), &(0x7f0000000140)=0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x7}, @IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0xf7}, @IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x3}]}}}]}, 0x4c}}, 0x0) 07:29:55 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x402) r0 = syz_open_dev$dri(0x0, 0x9, 0x224600) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000500)={{0xa, 0x4e20, 0xfffffbe6, @loopback, 0x1}, {0xa, 0x4e22, 0xc17, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x29}}, 0x1}, 0x81, [0x2, 0xfffffff9, 0xbc39, 0x200, 0x93e7, 0x4, 0x32, 0x2]}, 0x5c) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r3, r0) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0xcb33448, 0x6, &(0x7f0000000380)=[{&(0x7f00000000c0)="3f5efda6e265c81241896cddc29bc11fb0e2", 0x12, 0x2}, {&(0x7f0000000100)="f33d67fdbf0e6ad863d2262541a59ed3d154e54df3b454072b86f06e39b26f2cd4a00f1d679226b877cb63973568764c397b7c632eab29276185026345bd9db091b70cd1da8a4d24129c4c745a23", 0x4e, 0x80000001}, {&(0x7f0000000180)="e13ec2012f505764f8983a649895d5626858298f2939cbede53af0", 0x1b, 0x730}, {&(0x7f00000001c0)="1a0f9c1045b43a77307c1dcbd945ac62615bfe4c64f3702fa04c03a55448e4409632db2e150cf9f817c5f42fe4a17c98564f9972858e931c26b823a02022a9a921511e3841f887f86dd54303ddf26f1e51df9998d6bf9cca7d547010260f07208f57b685c7bdbf22a9abd7e28372188b7598e10dc3137a7b2fd4bf9eeeb29e3f77004b56d13aee77faf4e80fb6dd24a6cbcb7b369c1178c89a8547051931f38e3bbabc0adc714abbba", 0xa9, 0x5b}, {&(0x7f0000000300), 0x0, 0x101}, {&(0x7f0000000340)="a3249afe5416", 0x6, 0x2}], 0x40000, &(0x7f0000000580)={[{@noquota='noquota'}, {@norecovery='norecovery'}, {@quota_account='quota=account'}], [{@smackfsroot={'smackfsroot', 0x3d, '@em0!'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x39, 0x66, 0x35, 0x34, 0x38, 0x31, 0x32], 0x2d, [0x61, 0x35, 0x66, 0x30], 0x2d, [0x61, 0x33, 0x66, 0x66], 0x2d, [0x62, 0x34, 0x36], 0x2d, [0x0, 0x39, 0x64, 0x31, 0x34, 0x66, 0x33, 0x36]}}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/dri/card#\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) 07:29:55 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffffbd}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 07:29:55 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r0 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 07:29:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x300, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000000)={0x2}, 0x2000, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000000)={0x2}, 0x2000, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f00000000c0)=""/1) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="978a7b70a994aba61d1604b6a451cb53", 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) getgid() 07:29:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="1cfbbe13", @ANYRES16=r2, @ANYBLOB="110700000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x54805}, 0x20000000) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) 07:29:56 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x100, 0x41) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r2, r0) 07:29:56 executing program 2: sched_setscheduler(0x0, 0x5, 0x0) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x0, 0x7fffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @empty}}, 0x24) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) socket$kcm(0x10, 0x2, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) shutdown(r0, 0x1) shutdown(0xffffffffffffffff, 0x1) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x480402, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000002480)=@assoc_value, 0x8) pipe2(&(0x7f0000000340), 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)}, 0x40001) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x104000000000000, 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000200000003000000c80100003011000000000000480000000300000030110000c8110000c8110000c8110000c8110000c811000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000700098000000000000000000000000000000006d00000000280053594e50524f58590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff000000007e342bb9019e232ea653173139df159a00f43e7f8ed55a8069d7f8a6f52208384e909b55835976"], 0x228) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x104000000000000, 0x2, &(0x7f00000007c0)=@raw={'raw\x00', 0x2, 0x3, 0x1c8, 0x1130, 0x0, 0x48, 0x0, 0x1130, 0x11c8, 0x11c8, 0x11c8, 0x11c8, 0x11c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98, 0x0, {0x0, 0x6d000000}}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x40000) mkdir(&(0x7f0000000100)='./file0\x00', 0x138) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 07:29:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x7}]}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @vsock={0x28, 0x0, 0x2710, @local}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, @can={0x1d, r4}, 0x3ff, 0x0, 0x0, 0x0, 0xff11, &(0x7f0000000000)='veth0_to_bond\x00', 0x1, 0x100000000, 0x22}) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:29:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x8) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) 07:29:56 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1f, 0x400000) ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r3, r0) 07:29:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0}, 0x87e9b1a5bf03cec0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000a000000180004801300010062726f6164636173742d6c69d027d86e"], 0x2c}}, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "81a0ab681378dab2", "d979c838a6fd8dd60b6647538693242e", "f3091cea", "89c4e6d6fbaa01be"}, 0x28) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x204, r2, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x28}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x800, @ipv4={[], [], @remote}, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'netpci0\x00'}}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x49540000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x40}, 0x4000810) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000006c0)={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), 0xffffffffffffffff, 0x2}}, 0x18) r4 = socket$inet(0x2, 0x80801, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) getpeername$l2tp6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000400)=0x20) sendto$inet(r4, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) [ 864.646313] IPVS: ftp: loaded support on port[0] = 21 07:29:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @local, 0x20}, 0x1c) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x131680, 0x72) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x28, &(0x7f00000000c0)}, 0x10) syz_open_dev$dri(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff000000000000000000000000ff0100000000000000000000000000010000000023ec6cabe2a430dac8dd0000000000000000000000009c7ea25a3db7d377640057b97f0a3399db981358a21c81a4a6443a9935f75b263c1d24eca4f754947080d44492d54a37ea1f3b2ad468", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000004d0014006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000002000000"], 0x188}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x204, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0xa}, [@tmpl={0xc4, 0x5, [{{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}, 0x4d2, 0x33}, 0x2, @in6=@local, 0x34ff, 0x0, 0x1, 0x5, 0x2, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x4d2, 0x33}, 0x2, @in=@empty, 0x0, 0x4, 0x1, 0x20, 0x0, 0x40, 0x9}, {{@in=@multicast1, 0x4d2, 0xff}, 0xa, @in6=@ipv4={[], [], @rand_addr=0x3}, 0x3503, 0x3, 0x0, 0x4, 0x84b, 0x6, 0x5}]}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x204}}, 0x0) dup2(r0, r5) [ 864.783152] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. 07:29:56 executing program 2: socket$inet6(0xa, 0x200000000003, 0x87) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaa000000102b00fe8000000008000000000000000000aafe80aa8700000000000000000000000008907800"/70], 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0xf000000, 0x8, 0x9, r0, 0x0, &(0x7f0000000000)={0xa2095b, 0x8000, [], @ptr=0x6}}) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000080)) 07:29:56 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x7, 0x40, 0x2b44e0f0, {0x4, 0x9}, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r3, r0) 07:29:56 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r0 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 07:29:56 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x101, 0x19280) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote}, @ethernet={0x1, @local}, @phonet={0x23, 0x5, 0x65, 0x25}, 0x0, 0x0, 0x0, 0x0, 0x6758, &(0x7f0000000000)='ip6gre0\x00', 0x4, 0x9, 0x200}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r2, r0) 07:29:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @local, 0x20}, 0x1c) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x131680, 0x72) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x28, &(0x7f00000000c0)}, 0x10) syz_open_dev$dri(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff000000000000000000000000ff0100000000000000000000000000010000000023ec6cabe2a430dac8dd0000000000000000000000009c7ea25a3db7d377640057b97f0a3399db981358a21c81a4a6443a9935f75b263c1d24eca4f754947080d44492d54a37ea1f3b2ad468", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000004d0014006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000002000000"], 0x188}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x204, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0xa}, [@tmpl={0xc4, 0x5, [{{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}, 0x4d2, 0x33}, 0x2, @in6=@local, 0x34ff, 0x0, 0x1, 0x5, 0x2, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x4d2, 0x33}, 0x2, @in=@empty, 0x0, 0x4, 0x1, 0x20, 0x0, 0x40, 0x9}, {{@in=@multicast1, 0x4d2, 0xff}, 0xa, @in6=@ipv4={[], [], @rand_addr=0x3}, 0x3503, 0x3, 0x0, 0x4, 0x84b, 0x6, 0x5}]}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x204}}, 0x0) dup2(r0, r5) 07:29:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0}, 0x87e9b1a5bf03cec0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000a000000180004801300010062726f6164636173742d6c69d027d86e"], 0x2c}}, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "81a0ab681378dab2", "d979c838a6fd8dd60b6647538693242e", "f3091cea", "89c4e6d6fbaa01be"}, 0x28) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x204, r2, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x28}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x800, @ipv4={[], [], @remote}, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'netpci0\x00'}}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x49540000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x40}, 0x4000810) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000006c0)={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), 0xffffffffffffffff, 0x2}}, 0x18) r4 = socket$inet(0x2, 0x80801, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) getpeername$l2tp6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000400)=0x20) sendto$inet(r4, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) [ 865.404175] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. 07:29:57 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x4040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0x800, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r2, r0) 07:29:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d00)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d802000088010000f0000000f000000000000000f0000000400200004002000040020000400200004002000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000004000000000000000000000000000000028006164647274797065000000000000000000000000000000000000000000010000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000b80000000000000000000000000000000000000000004800544545000000000000000000000000000000000000000000000000000001ac1414bb00000000000000000000000076657468305f746f5f627269646765000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x448000, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000100)={0x5, 0x12, 0x9, 0x200, 0x8, 0x2, &(0x7f00000000c0)="bc2fc644481736fb"}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = syz_open_procfs(r4, &(0x7f00000001c0)='personality\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) r7 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x10, 0x0, "2ceca7f2cbf2d6eac925af6a00783ad9954bbcb50f20a914d54755f845a96c4dfec67a56b54b9002fe7e8548f60f5c1f4f397e2766dff36ebafcf269e052ca41020ab8d248cfc5c2a85361b994ff5fc3"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r6, r5, 0x0, 0xedc0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x400, @empty, 0xffff}, 0x1c) 07:29:57 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r2, r0) keyctl$revoke(0x3, 0x0) [ 865.668354] ip_tables: iptables: counters copy to user failed while replacing table 07:29:57 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@secondary='builtin_and_secondary_trusted\x00') dup2(r2, r0) [ 865.730554] ip_tables: iptables: counters copy to user failed while replacing table 07:29:57 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0xcc9a}, {@empty}}, 0x44) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x208200) syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000140)={0x4, @local}) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x186}], 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2824c27, 0x0) 07:29:57 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300000a0000000000000000000000030006000000000002dfffffdf00000100000000000000000200010000000000000000fe00000000030005000000000002000000e000000100000000000000005031dda3ebb1617b5d5b953e8cb3af484b82a47c41532b13435d4bb0ca7a1002a9f4b0ec316312119430aa3133905bcfeb5c"], 0x50}}, 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x5, 0xfffff06a) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) write(r4, &(0x7f0000000040)="9e9cf9183c779329a500f0ad593124", 0xf) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 865.899044] audit: type=1804 audit(1585898997.405:116): pid=22172 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir979596290/syzkaller.asTNIz/255/bus" dev="sda1" ino=15970 res=1 07:29:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)="6d0405b49f551980f9cc8f6100ce165174764ea29d1261e642a163f1b0dad25f130a129f9ee1e2ae124bf568582119c23a4d7903bc5a8b698e4671b2928f251cc530e386489ca6be72b7da68db5660522e4050388209739a3556672a20d91424814a38630b3237f105a1739df55baf70465e701b5fc1e5e341b90e73e18dae398874c20957cf699888ccb4f44f067d55d06163af457d0e8354db9993e8f3bf364c473a705c4092", 0xa7, 0xfffffffffffffffe) keyctl$get_security(0x11, r3, &(0x7f00000001c0)=""/156, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) r6 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000240)='./bus\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYRESOCT=r6, @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="040005000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r8, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYBLOB, @ANYRES32=0x0], 0xf, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r10) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000280)={0x6d, 0x7d, 0x2, {{0x0, 0x50, 0x7, 0x9, {0x0, 0x4, 0x7}, 0x8200000, 0x1, 0x10001, 0x5, 0x8, ',em0%%(]', 0x8, 'keyring\x00', 0xa, '\\lo*system', 0x3, 'syz'}, 0x8, 'keyring\x00', r5, r8, r10}}, 0x6d) 07:29:57 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0xffbffffd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="eb3c906d6b66732e666174000404090a0200027400f801463504dd51ada788fd41b3ea1c5da905dbedecd54779a14d39cbdf25eb90da145dfd7184fb70c0ec7e55ee075d6e8734e28687edf26be1e779ddff2cf417720c36720ff3d34d91fe12cb77948dd416185a2d3d858a1c4478e00eef1f388f976aa55e7f8ff87c5c6af925c750137f15d147ff54f94035ebd9", 0x8f}], 0x0, &(0x7f00000000c0)) 07:29:57 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r0 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 07:29:57 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x4, @random="a5dc67b62e29", 'vlan1\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) dup2(r2, r0) 07:29:57 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f00000000c0), 0x8, r3, 0x4}) write$P9_RSYMLINK(r2, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x2, 0x1, 0xff}}, 0x14) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r5, r0) 07:29:57 executing program 2: r0 = gettid() perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0xacb, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000400), 0x1}, 0x9104, 0x0, 0x0, 0x6, 0x0, 0x4, 0xb}, r0, 0x0, 0xffffffffffffffff, 0x0) gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000000240), 0x9}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xe2d0) getpid() ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000200)) r2 = socket$kcm(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x7, 0x8, 0xf1a}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x0, 0x8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000300), 0x4) socketpair(0x2b, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000540)={0x700, 0x1, &(0x7f00000003c0)=[0x6], &(0x7f0000000440)=[0x3, 0x8, 0x0, 0x4, 0x40, 0x2], &(0x7f0000000480)=[0x2, 0x4, 0x9], &(0x7f00000004c0)=[0x9, 0x9c, 0xffffffe1, 0x1, 0xfff], 0x0, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x0, 0x0, 0x0, 0x0, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1000000}, 0x40) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r5}) recvmsg$kcm(r4, &(0x7f0000009280)={0x0, 0x0, &(0x7f0000009200)=[{&(0x7f0000007f00)=""/171, 0xab}, {&(0x7f0000007fc0)=""/89, 0x59}, {&(0x7f0000001ac0)=""/4101, 0x1005}, {0x0}, {&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000009140)=""/176, 0xb0}], 0x6}, 0x10142) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x400c00) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r7, &(0x7f00000000c0), 0x0, 0x2}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpu.stat\x00', 0x7a05, 0x1700) r8 = socket$kcm(0x29, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000001a80)) 07:29:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000d80)=[{{&(0x7f0000000300)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000480)=""/217, 0xd9}, {&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000640)=""/149, 0x95}, {&(0x7f0000000700)=""/249, 0xf9}, {&(0x7f0000000800)=""/71, 0x47}, {&(0x7f0000002080)=""/110, 0x6e}, {&(0x7f0000000900)=""/142, 0x8e}, {&(0x7f00000009c0)=""/67, 0x43}], 0xa, &(0x7f0000000b00)=""/237, 0xed}}, {{&(0x7f0000000c00)=@sco, 0x80, &(0x7f0000001000)=[{&(0x7f0000000c80)=""/106, 0x6a}, {&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000000d00)=""/110, 0x6e}, {&(0x7f0000000e40)=""/167, 0xa7}, {&(0x7f0000000f00)=""/222, 0xde}], 0x5, &(0x7f0000001080)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x8000000000001e, 0x5, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8), 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) umount2(&(0x7f00000000c0)='./file0\x00', 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @local}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0), 0x0) 07:29:57 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = mq_open(&(0x7f0000000000)='$nodev\x00', 0x68fad688aca5f8db, 0x20, &(0x7f0000000040)={0x1, 0x6, 0x401, 0x8}) fcntl$addseals(r1, 0x409, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000080)={0x3f738, 0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r4, r0) 07:29:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0xc0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x49082}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) sched_setscheduler(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000680)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "a5c268", 0x1177, 0x3a, 0xff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec00000, [{0x0, 0x19, "e5fb000005005357cd99e33bca98e246dc9027eb3334ea443e7fdc4049b892d54090878bee496aa11e07fb0f1db1a0ebe2f95347b0317613063381165c01f08fea1048ea59a6f2273e02707fdd7defc02bde3192360593169594710bddd04aead6c89c87778555de42d23236534ba1a799a63eb4532003a703b249e4628e4706bccc7a264ee85014d99a7fd4565d3c416c835a741eb4e97140e834013724d23450072f0087ac65295ca0d7c601c30de0161560e2d20c5b1052e9b208e25470e9fa884ecd2082ec38b3cb19c083"}, {0x0, 0x1a, "14a142ef59c04e8e7b4db5309006bd98ec79847a52ed68124e8a24d3079fc53b81c039a7d59f992dcb481043f510a0ce1ebb98c07a624ff8c8cc0b4fd3b8e700196d1f5696e184393de669ffaebfbd494a9d6a5fedac0738ffc3dcb3c1b96e48fd063786ae5701f6aa5022621e665607848e20f162630df96d0a773993e97ae6b847e51883d73d66bb30b4375229cfd0c9c41f511bfbf2bca94caa7ce76be257173a4eae2b484117ac32acf6ea1a32def26c919c93055c2f9a640b2d847d527357902538828abd66b3d1a9b8503406"}, {}, {0x0, 0x1f7, "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"}, {0x0, 0x1, "c3dc73ee76fa"}]}}}}}, 0x11a9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x2, 'vlan1\x00', {}, 0x8}) 07:29:58 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000054fd52b46791fd7269dae475d132be7a3fed74bca9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000004d0014006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000002000000"], 0x188}}, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x7f, 0x1f, 0x5, 0x9, 0x0, 0xbdee598, 0x6108, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x7c9c42f6b02f3f6d, @perf_config_ext={0x40, 0x9}, 0x1, 0x0, 0x0, 0xb, 0x5, 0x1f, 0x50}, r5, 0xd, 0xffffffffffffffff, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x3, 0x1, 0x2, 0x0, 0x3ff, 0x4d9}, 0x20) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x5, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000480)={r2, 0x5, 0x6, @link_local}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'\x00', 0x4009}) close(r6) 07:29:58 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="6b1094b9", @ANYRES16=r4, @ANYBLOB="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"], 0x1950}, 0x1, 0x0, 0x0, 0x40050}, 0x24040804) r7 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r7, r0) [ 866.656247] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. 07:29:58 executing program 2: r0 = eventfd2(0x0, 0x3) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000d4a000)) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000740)="77b2770dbfdb54f4", 0x8}], 0x1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000300)={0x80000000000009}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) clock_gettime(0x2, &(0x7f0000000280)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f00000001c0)) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2, 0x2010, 0xffffffffffffffff, 0xffffc000) open(&(0x7f0000000000)='.\x00', 0x8400, 0x0) personality(0xc) r4 = socket$inet6(0xa, 0xe, 0x3f) ioctl(r4, 0xff2, &(0x7f0000000100)="295ee1311f16f477671070") r5 = epoll_create1(0x0) r6 = socket(0x1e, 0x0, 0x1116) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)={0xfffffffe8000201f}) setsockopt$inet_udp_int(r6, 0x11, 0x6f, &(0x7f0000000100)=0x7, 0x4) pipe(&(0x7f0000000340)={0xffffffffffffffff}) ioctl$BLKSECDISCARD(r7, 0x127d, &(0x7f00000002c0)=0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) fcntl$getown(r2, 0x9) r8 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_notify(r8, &(0x7f0000000140)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000380)="7be4d6b00202ca53878499e01146863a2e7c8ca45e1910e5eba6453bb6f234b5a1b1bca731970a74bf8a96b0af49ea18156c9b8a615bfa2f506fcf44060d36e38f66f111149434d5139e416358ea33f34b4507cdc299f7868d5f186e6bd604ffc3f9c902c80049b4a1088b53589231cc0e948c73bae880b0cd422eb3d794ef6c5bef18804d5b20072bbd41d46b2703a7dbc5382f23428b921089a96c08b52beb376473686085355e1bf5298e61a5dc12c792c39b551ab1f5c30950aafa9272231027ad2cdd94f9df653774ec7410e59c1d7f70c546cfd6db266f22ef04fad1c223b5d57e8fb973778a3b45f03e390c8fb16c9ac11dd845b0bbd7b5e4b97af95619397eeeac19f8fdd052e23a1ebc455b48b7d0c770e300a23cf2630f3a533b2eb14285510fa1795ff7989b78ff410cafda7c7adadcd7020cb197f93fa7b2a105f74fdaf352dc5b5ae0757edcb49aadfeb797e3ed9d", &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed82555cd1ae800d"}}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x101000, 0x0) ppoll(&(0x7f00000001c0), 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x8) mq_timedsend(r8, &(0x7f00000e6000), 0x0, 0xe7, &(0x7f0000e0b000)={0x77359400}) 07:29:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 866.839081] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. 07:29:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x40, 0x0) syz_open_dev$vcsa(0x0, 0x8998, 0x240100) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="ba6823520d62401ddcd9794a0503008ad0ebdffec73acab3ae0da8a3570a0840457c1c7aed39"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:29:58 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 07:29:58 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r3 = socket(0x10, 0x3, 0x0) close(r3) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x1f1e, 0x8006, 0xffff, 0x6, 0x0, 0x0, 0x3, r6}, &(0x7f0000000040)=0x20) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r7 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r7, r0) 07:29:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf2505000000080004009d020000fdbd4b3e13fa26f7bee9893f833bcb42f6004f863a45b45b9df4ed6398c45dc99316ee601cfb12587f877175d7ac837df4e961128b85d46f760311076c945f54a7212ce7f886a74e95828aff9a60ae40272e80ba334dff3da0a8ebb5f8f6660831dd50cf09"], 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000000) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x8000000, 0x3}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000000c0)=0xd, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2}, 0x8000000200036150, 0x1, 0x3, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) sendmmsg$alg(r3, &(0x7f00000033c0)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)="2f2d5f05644903dd6262b6fe58ba033960d849f76f56753238ad56d1f81adbb7299317a5c49730a1561b4bf3a5cf8542cdab386c96587c6da74a97570a5ff650c31c12f93d5803b4d84d9239dd39d59a75a4081a2db66a6c4b72ca5341d8148a7ce6727e0d05eb5a68395d73e0882eba9af06ee6d92c8e35a84579e5318578f872563adf0bc8a30615bb80bb2498b12a7daf8ce3b18bda78719b89c5c5d579063feb8a03ba176e76e39e874433be502a19a60fb4c25df84eec5d535093f3881b51f4e198", 0xc4}, {&(0x7f0000000380)="be56056d537f4feffeb872e92ca245fd29253e94e6e15509ad4f23b1e6080b80ce1d127196554f6483cdf14ef9a05a1bae95e1530f9790b933ce0af5e299fd092b04834df559cdb3427740f51984f267ff4f44373156f836abaf2c873783d961d5b9ea49778e194cf1daa9bbf6812f8b06165306c7d84370e11e34d772b3ad19133bff47", 0x84}, {&(0x7f0000000100)="01f64783598b7e08308867be626a79", 0xf}, {0x0}, {0x0}], 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="ffc87536b9df9e75d835d360cca7c522a1b643a3e6aa94abb1fbffa59ddeb788704b9cb7c998fd45bfe1bc14f23b98026440a50db6a6790617da9f13b259e0c86a25867fa455d5e43a795db5b5d9f3122aa60077e7aae86b493e4dff78efdec06177c2ec0d68ed9bd484d29b8bb24a1307a0a9b71af7a9784a413d11720550461d197f8c0cd76a954ec26b4a63069977160e3e63a4145372299f02cdf8c2210e8b0bc016ba07d07d177e56f59f04cdf5de259e065edfec98158bf5bd407e1807f0bba2bb2f485d760037d0b5"]}, {0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000001480)=ANY=[], 0x0, 0x44880}, {0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000a00)="371f91fe99b1b1ba095e4195fb05ffe7a93ba89c119fa7ddcbed1aa3fc8ea20e9f741a6226b9de7b05f026e2d30e8d2dfc6246402b6af5a69a2d6c6d7c2d7339247afb064553bc480a12893ee8b3e50803f7af1042abfef6838f7765770a08f18a088cc0e6da5c1e3ac8c366738957c28ce6a58d885c3c0b5cb4209d488ea17bff03e672718e953f6ed44c643341a81e2e2dd67a40a0203ad3ca22b95462db5cfccd9906bd94c248118a0d4fb48134e8b2c79990861cb9de944375d76cfd16091709a5fb66da02c00bfa0c58d93779a954dedb6c94d5163eddfd7278010ff01e6501f35286f3415b61522607b7685b", 0xfffffffffffffef2}, {&(0x7f0000000b00)="14a82354e8cddefcbc", 0x9}, {&(0x7f0000000b40)="fb84aeafc29ca944103da5a815e5eaa98e67dbf43d03229707f87576d4c9b03e9abedaad7e932544a430b7a225c7ffa4305e740680549b66267e5339196ee0f0e92bb8d9fa47a125dc39e784646f2c28f8087173ea13448c0e9d1571e3c8803d7c81264e197198ba729e1e4802952ebc25f1fe4f231832a33892548150df94323858547866", 0x85}, {0x0}, {&(0x7f0000000d00)="f5cc0affe79a45931a58187b986c778898ba4d1b21413600d5294460ede7906e1278b297ef0ba99f7db6e2647eb3303a68d8d1c2a2c946d7500ed2cee1a95b4b584a73e153111bf19a3d1e52ae577e642cedcb4330bbc2431895be5eb4651ff6b2cb65f4578e06d6e1c06a7f0d11db0f2349396d968c9b95e129d0bde03ddf3ce9d051ebd1", 0x85}, {0x0}, {&(0x7f0000000e80)="0e4acae45b931a787f4ba607a7392942b94258ab3ebae57473109f9d802c348a39823400d98c75efdd0101a8b25f6966c87b001b6d9919c712b8d94db99bfb579b0a2d906bddc605afdf7fbffbaeaa25dc95c24d6330642103df35600762baad4e6498a4eeeb0328fbf3932ae4d41200"/125, 0x7d}, {&(0x7f0000000740)="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", 0x115}, {&(0x7f0000000300)="5cf6686794fcdec9a242f6713ddb968ae2365ce42bd5c69b6ce83da80e5241f3ca00f6364d06fe2e89dffd07e7f99ba6d75f6ff54d4d45d24266c60384980b5016a934d8ce3950e255ba6e81c991d5ca9f47cc", 0x53}], 0x9, 0x0, 0x0, 0x24008840}], 0x3, 0x0) 07:29:58 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0xf000, 0x4, 0x6, 0xff, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="680000000104236400000000000000000c0000010a00020000000006000000b1246fb99448856852000800034000000002080004400020f9100500010003000000080003400000ffffea000540000000030800054000000fff06000640000100000800034000004000000002"], 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000011) dup2(r3, r0) 07:29:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf2505000000080004009d020000fdbd4b3e13fa26f7bee9893f833bcb42f6004f863a45b45b9df4ed6398c45dc99316ee601cfb12587f877175d7ac837df4e961128b85d46f760311076c945f54a7212ce7f886a74e95828aff9a60ae40272e80ba334dff3da0a8ebb5f8f6660831dd50cf09"], 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000000) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x8000000, 0x3}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000000c0)=0xd, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2}, 0x8000000200036150, 0x1, 0x3, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) sendmmsg$alg(r3, &(0x7f00000033c0)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)="2f2d5f05644903dd6262b6fe58ba033960d849f76f56753238ad56d1f81adbb7299317a5c49730a1561b4bf3a5cf8542cdab386c96587c6da74a97570a5ff650c31c12f93d5803b4d84d9239dd39d59a75a4081a2db66a6c4b72ca5341d8148a7ce6727e0d05eb5a68395d73e0882eba9af06ee6d92c8e35a84579e5318578f872563adf0bc8a30615bb80bb2498b12a7daf8ce3b18bda78719b89c5c5d579063feb8a03ba176e76e39e874433be502a19a60fb4c25df84eec5d535093f3881b51f4e198", 0xc4}, {&(0x7f0000000380)="be56056d537f4feffeb872e92ca245fd29253e94e6e15509ad4f23b1e6080b80ce1d127196554f6483cdf14ef9a05a1bae95e1530f9790b933ce0af5e299fd092b04834df559cdb3427740f51984f267ff4f44373156f836abaf2c873783d961d5b9ea49778e194cf1daa9bbf6812f8b06165306c7d84370e11e34d772b3ad19133bff47", 0x84}, {&(0x7f0000000100)="01f64783598b7e08308867be626a79", 0xf}, {0x0}, {0x0}], 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="ffc87536b9df9e75d835d360cca7c522a1b643a3e6aa94abb1fbffa59ddeb788704b9cb7c998fd45bfe1bc14f23b98026440a50db6a6790617da9f13b259e0c86a25867fa455d5e43a795db5b5d9f3122aa60077e7aae86b493e4dff78efdec06177c2ec0d68ed9bd484d29b8bb24a1307a0a9b71af7a9784a413d11720550461d197f8c0cd76a954ec26b4a63069977160e3e63a4145372299f02cdf8c2210e8b0bc016ba07d07d177e56f59f04cdf5de259e065edfec98158bf5bd407e1807f0bba2bb2f485d760037d0b5"]}, {0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000001480)=ANY=[], 0x0, 0x44880}, {0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000a00)="371f91fe99b1b1ba095e4195fb05ffe7a93ba89c119fa7ddcbed1aa3fc8ea20e9f741a6226b9de7b05f026e2d30e8d2dfc6246402b6af5a69a2d6c6d7c2d7339247afb064553bc480a12893ee8b3e50803f7af1042abfef6838f7765770a08f18a088cc0e6da5c1e3ac8c366738957c28ce6a58d885c3c0b5cb4209d488ea17bff03e672718e953f6ed44c643341a81e2e2dd67a40a0203ad3ca22b95462db5cfccd9906bd94c248118a0d4fb48134e8b2c79990861cb9de944375d76cfd16091709a5fb66da02c00bfa0c58d93779a954dedb6c94d5163eddfd7278010ff01e6501f35286f3415b61522607b7685b", 0xfffffffffffffef2}, {&(0x7f0000000b00)="14a82354e8cddefcbc", 0x9}, {&(0x7f0000000b40)="fb84aeafc29ca944103da5a815e5eaa98e67dbf43d03229707f87576d4c9b03e9abedaad7e932544a430b7a225c7ffa4305e740680549b66267e5339196ee0f0e92bb8d9fa47a125dc39e784646f2c28f8087173ea13448c0e9d1571e3c8803d7c81264e197198ba729e1e4802952ebc25f1fe4f231832a33892548150df94323858547866", 0x85}, {0x0}, {&(0x7f0000000d00)="f5cc0affe79a45931a58187b986c778898ba4d1b21413600d5294460ede7906e1278b297ef0ba99f7db6e2647eb3303a68d8d1c2a2c946d7500ed2cee1a95b4b584a73e153111bf19a3d1e52ae577e642cedcb4330bbc2431895be5eb4651ff6b2cb65f4578e06d6e1c06a7f0d11db0f2349396d968c9b95e129d0bde03ddf3ce9d051ebd1", 0x85}, {0x0}, {&(0x7f0000000e80)="0e4acae45b931a787f4ba607a7392942b94258ab3ebae57473109f9d802c348a39823400d98c75efdd0101a8b25f6966c87b001b6d9919c712b8d94db99bfb579b0a2d906bddc605afdf7fbffbaeaa25dc95c24d6330642103df35600762baad4e6498a4eeeb0328fbf3932ae4d41200"/125, 0x7d}, {&(0x7f0000000740)="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", 0x115}, {&(0x7f0000000300)="5cf6686794fcdec9a242f6713ddb968ae2365ce42bd5c69b6ce83da80e5241f3ca00f6364d06fe2e89dffd07e7f99ba6d75f6ff54d4d45d24266c60384980b5016a934d8ce3950e255ba6e81c991d5ca9f47cc", 0x53}], 0x9, 0x0, 0x0, 0x24008840}], 0x3, 0x0) 07:29:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000001540)={@l2tp={0x2, 0x0, @local, 0x2}, {&(0x7f0000000500)=""/4096, 0x1000}, &(0x7f0000001500), 0x44}, 0xa0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x1c, r7, 0x301, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x100, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "717f2f801f955ca8025c55e28740"}, @NL80211_ATTR_KEY={0x8c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "8360e0ec58"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_SEQ={0x13, 0x4, "c090e053c82a1e2ef366de983e1960"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e50c2e04cc"}, @NL80211_KEY_SEQ={0x9, 0x4, "acd6d59a36"}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3efad143f0"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "7e852c2642af6c28be2d95b96b"}]}, 0x100}, 0x1, 0x0, 0x0, 0xc800}, 0x8004) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001600)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="40866f63c13160a1ec293094ab0e8f1b781c65190cf9d3edb32d01be587a12af7a03e694400000ad188a4c3de60afc8379b169f25b52999cd26599a98b4cb409fe01f7ea14cdd2aab61ae0dacdf151dd57316e3e8a8c4d5909c82dadedf23176c2ceb2a91814e89c601bf0f46369f3e03b0e5a8e1d07ab6a658e036484e28170167201a050231954ee7dd63bf6ce470db9d6645c43ee7fd0dfc82b96b5f1cf6a9e88879dd1342ce5380ecde4c0e128517f86a1206d5efb4d4cf7fcf83a462fd5a72dab03a8a684"], 0x44}}, 0x0) 07:29:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x20010, r1, 0xfffffffffffffffa) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x2b, 0x13, &(0x7f00000000c0)="b5e6c25af6f309147a2ddae385530f981cc27a7a3e9f9d4a0c1238626fbbf3ecf50feecb383e98e0b2fb669d7acb2620946a5c80cb077c8abbce62aca2b46d2e9c534172dba1888a09a066e7a5e618f0184859f4060e4c544045cea0e3ea53316328a60abac5009d42505c091399152716ffe4c3ba7718799087b794d23d374042b4ab837788bcf73594f3e76c3f494878a8c270e141d0a992b0d442a0d92be2a5a6468c33ed06ae5ef20190975054a9db9397d1f00f0277c3a02519f76896c484e8806bfa7d5c67b2f218b2d450d1693632a43f53626ba3c88304cf92d2b964329fdef3716596ce1adeac3673f75ec656f203cd832fbbdb23aa836998a84a86d1747edefe0c6b808992ee18469a5b9eeefeb3324058673730e09f4b5c3c235ec39eb65004dfd81daa40964599d5297b6fdd7626b96f382989ada371eb134061b089d5574edb1558d2675af9ae7cb0fe16501bef10fa0677cfb6ce0c2e0ba5f67290b8beb94f0fac9823e42443620d538a5cf6695096c008dadd5f3d14bbaad0474bfb014995df0a970d655d7ff10381d8bb3be3139a4d33c6c21ce142cd54a17b7b1b9b89af2b3632b0d24602989c7474f570816112e356eb1af84c3b316c97cfb6715eef4e2a9b37211c108e3871b92ec11f89fbcc7a1f47206d57a41f46cf84514cdf2fea7e994682ece0346e5b9b8035cb284b266a42818a9e2d5d776bd10f43829f5913e1481c1f9399e6fdcc88c34700314e5b53941b2ae540a1d2600c91dbfe88d7901811a288a24f76b17b000a7f6cfea9b5e6bd8c0afe2e7f1e9cb93acf318fee289dbfb6e301f8af99262c7c660a5d786222b66c79e8ac39c69e66e5d9aa11e34c0e80a4a9d771603da3c1b9ec0bf75e57991bbed18654df374e035378272fa8e9767304417bd9093bdb3e3ba3ccc709c51f9ad9fab90811ec1f9fd5192d16859b2457d42caac2c85abd6cea007021aad5036c7b0050b63156ca009d1bff2b461ab025a747230ce551588397b37adad508c7bb23efb5ee4dc578b36dda45967800ddfcb33a08d997ed68bf7746c22e20009411491ac58cb960510141c7c2ff1651d4c935821a367eb2214765a71472af5b8ba4e941388b027cc2507143b3fbaeaac2068734ddb9907233973f361a51ea4233e095a75735213015ae9fe873de644083019b39407225dee4f2ac3d9db5bfaa03c16a394d99a0fa1ff8a0fb45096ae3e3ac485a912f4795648d64980beb6a4a843f6143f5f691839b67606f3d10d73775445b5416202909b3bee0d99ee19ee012ff20a7b366ec559c8bc810fa1aa31f1df20233f46884c2eb36f0f0093d108c13f30ea239d8cd6d512ffca3932a70b9819c8f602594183fa9545c948550c106228a03068538c790229fce9216c36fb4135fc8884c34e05147506ea8bd5931c534a3bfd01b4aa7eb8fe3"}) [ 867.699582] batman_adv: Cannot find parent device 07:29:59 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) perf_event_open(&(0x7f00000001c0)={0x1, 0xfffffffffffffda6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x80000041c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x0, 0x4ddc}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f00000000c0)=r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={[], 0x12}, 0x7fffffff}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x2101, 0x0) ioctl$SIOCX25SSUBSCRIP(r6, 0x89e1, &(0x7f0000000340)={'batadv_slave_1\x00', 0x2, 0x40}) [ 867.750491] batman_adv: batadv0: Adding interface: gretap1 [ 867.780512] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 07:29:59 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) accept4$phonet_pipe(r0, &(0x7f0000000100), &(0x7f0000000180)=0x10, 0x80000) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180245aedee676240d8b5f4d7c000000ec00000002000000560e8ebef997e586ada27469ca53c130aa62d39a6e0730ceb4cacb5b30d04bd42ca1d0e58d3e65a3f3aa158dd6ddb14f2ac8ebdbf2e4988102ecd42b8486825ae695ddf7bc2f7cb08665f7332dde61954e75af842a49d7a8b8c21b55fa009df205c724e095b6fc163ecf0aa24f2193f5a3afe82ebf6d7b43"], 0x18}}], 0x1, 0x0) read(r0, &(0x7f0000000ec0)=""/4096, 0x1000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 867.882987] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active 07:29:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x40, 0x0) syz_open_dev$vcsa(0x0, 0x8998, 0x240100) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="ba6823520d62401ddcd9794a0503008ad0ebdffec73acab3ae0da8a3570a0840457c1c7aed39"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:29:59 executing program 1: syslog(0x3, &(0x7f00000000c0)=""/132, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:29:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000090000000300000068020000e80000000000000000000000e800000000000000d0010000d0010000d0010000d0010000d00100000300000000000000000000007f000001ac1414aa00000000000000007767300000000000000000000000000074756e6c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c8f3e7000000000000000000000000000000000000000000280065636e00000000000000000000000000000000000000000000000000000001000000000000003000616464727479706500000000000000e400000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 07:29:59 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 07:29:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000001540)={@l2tp={0x2, 0x0, @local, 0x2}, {&(0x7f0000000500)=""/4096, 0x1000}, &(0x7f0000001500), 0x44}, 0xa0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x1c, r7, 0x301, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x100, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "717f2f801f955ca8025c55e28740"}, @NL80211_ATTR_KEY={0x8c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "8360e0ec58"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_SEQ={0x13, 0x4, "c090e053c82a1e2ef366de983e1960"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e50c2e04cc"}, @NL80211_KEY_SEQ={0x9, 0x4, "acd6d59a36"}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3efad143f0"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "7e852c2642af6c28be2d95b96b"}]}, 0x100}, 0x1, 0x0, 0x0, 0xc800}, 0x8004) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001600)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="40866f63c13160a1ec293094ab0e8f1b781c65190cf9d3edb32d01be587a12af7a03e694400000ad188a4c3de60afc8379b169f25b52999cd26599a98b4cb409fe01f7ea14cdd2aab61ae0dacdf151dd57316e3e8a8c4d5909c82dadedf23176c2ceb2a91814e89c601bf0f46369f3e03b0e5a8e1d07ab6a658e036484e28170167201a050231954ee7dd63bf6ce470db9d6645c43ee7fd0dfc82b96b5f1cf6a9e88879dd1342ce5380ecde4c0e128517f86a1206d5efb4d4cf7fcf83a462fd5a72dab03a8a684"], 0x44}}, 0x0) 07:29:59 executing program 2: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) get_thread_area(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) chdir(0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) renameat(r3, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r2, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="a746f415e9fa79e88d9834795c8d3ba7f5411ec7644c5144ee5f35bf1c2fd0eef7c7141e8477471e1396bd7e228c4b191acd156461ea2493dc976ac85de731e00778d9aee0f68a1bfb60b158c9e5e80283af9e8fba29b134374f572f061207af9c1cbc4fb2383f0d474cd46ac6ed29a7269708d80fe6ffd67b7243088b67e8f41378d9e0a70a6dab54872236780f18aa82581243ea905699570f06e69c4b1227ce2508b04addafae99f4f86eac738fc13e02c0e5928d6d610aa8f4273b8de5f3b601a72d44545fdc7d5b63cf7553000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x33) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x6c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) [ 868.256364] batman_adv: Cannot find parent device [ 868.286428] batman_adv: batadv0: Adding interface: gretap2 [ 868.309174] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 868.422350] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active 07:30:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xd) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xf000, &(0x7f0000000440), 0x8, 0xffffffffffffffff, 0x4}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88010000100013070000000000000000ffffffff000009000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000004d0014006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000002000000"], 0x188}}, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)={0xa639dc7, 0x3, 0x4, 0x1000, 0x6, {0x0, 0x7530}, {0x5, 0x0, 0xfd, 0x3, 0x44, 0x3, "5258c676"}, 0x0, 0x3, @offset=0x2, 0x480, 0x0, r2}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = accept(r4, &(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000004c0)=0x80) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001800)='NLBL_CALIPSO\x00') r7 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e20, 0x5, @local, 0x7}, @in6={0xa, 0x4e23, 0x81, @ipv4={[], [], @local}, 0x1ff}, @in6={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffff9}], 0x54) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d46e9193", @ANYRES16=r6, @ANYBLOB="007000ffdbdf25030000000800010000000000080001c67900000008cd000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r8 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000002540)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002500)={&(0x7f0000000380)=ANY=[]}, 0x1, 0x0, 0x0, 0x24000851}, 0x4048000) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, r6, 0x800, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x800) 07:30:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000001540)={@l2tp={0x2, 0x0, @local, 0x2}, {&(0x7f0000000500)=""/4096, 0x1000}, &(0x7f0000001500), 0x44}, 0xa0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x1c, r7, 0x301, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x100, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "717f2f801f955ca8025c55e28740"}, @NL80211_ATTR_KEY={0x8c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "8360e0ec58"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_SEQ={0x13, 0x4, "c090e053c82a1e2ef366de983e1960"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e50c2e04cc"}, @NL80211_KEY_SEQ={0x9, 0x4, "acd6d59a36"}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3efad143f0"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "7e852c2642af6c28be2d95b96b"}]}, 0x100}, 0x1, 0x0, 0x0, 0xc800}, 0x8004) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001600)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="40866f63c13160a1ec293094ab0e8f1b781c65190cf9d3edb32d01be587a12af7a03e694400000ad188a4c3de60afc8379b169f25b52999cd26599a98b4cb409fe01f7ea14cdd2aab61ae0dacdf151dd57316e3e8a8c4d5909c82dadedf23176c2ceb2a91814e89c601bf0f46369f3e03b0e5a8e1d07ab6a658e036484e28170167201a050231954ee7dd63bf6ce470db9d6645c43ee7fd0dfc82b96b5f1cf6a9e88879dd1342ce5380ecde4c0e128517f86a1206d5efb4d4cf7fcf83a462fd5a72dab03a8a684"], 0x44}}, 0x0) [ 868.593241] Bluetooth: Unknown HCI packet type 0d [ 868.598206] Bluetooth: Unknown HCI packet type 5e [ 868.604244] Bluetooth: Unknown HCI packet type 43 [ 868.623428] Bluetooth: Unknown HCI packet type 5e 07:30:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x4}}]}, 0x34}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x82080, 0x0) ioctl$RNDZAPENTCNT(r6, 0x5204, &(0x7f00000000c0)=0x8) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 868.648113] Bluetooth: Unknown HCI packet type 50 [ 868.680904] Bluetooth: Unknown HCI packet type 5e [ 868.695133] Bluetooth: Unknown HCI packet type 40 [ 868.739040] batman_adv: Cannot find parent device [ 868.747862] batman_adv: batadv0: Adding interface: gretap3 [ 868.755552] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 07:30:00 executing program 4: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r1, &(0x7f00000001c0)="ca165c93eefdbf4740d2aeb4bfddefd44b313d9a8dece5766fa2b76c", 0x1c) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000140)={'ipvlan0\x00'}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0xa457, 0x0, 0x4}, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3b}}, @ipv4={[], [], @broadcast}, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x800121}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 868.816977] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active 07:30:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0), 0x4}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000340)="8bd300d859012c32b9613206b8c628aa4cc2c872e2a2b3021a0ac711e50f9ba6808425480713c4e91ee8f548978a6ace5807da30c26894343e2f3c93deb4dc9ad43139b3200ef577f42af5502b3ca6035e9e9348b02e787ecc62a95ec18fa2e207a464a2a1c54970211bce2431db9daad1499e410102632ad8d9c09a8329351265406ef22e6a3aaf297cdd1e9a0eb9d6fb233284dfa829657b8fe24a46699ccb57be259ffc99eade1d931bc2a54c36b23f537d51ffe03b8380588cc5a486908602fdcd793744a66e852e21b9d5d557c90a4b8a88c489185e853412aba4117c754d", 0xe1}, {}, {&(0x7f0000000440)="944b8373b0918f064e6c3496d0239691fb3c86933e3724c3e79091df5bb6e376f958f9d793c1bea70dfd817706c0c3e1205ff0997085ab31309e227cf8b2f0fd42c0fd1fcbb3a30b271a794236263c40b3348f65207addfad6f8ff4dcf46ac620d1ccbc7700d3a411741ca72587b855a47", 0x71}], 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000200)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) socket$key(0xf, 0x3, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x20000, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f0000000500), 0x37d, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) 07:30:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000000)={0x3, 0x2, @stop_pts=0xa79}) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f00000000c0)={0x48, "7bd0ae325d0adf9a0ad6c96092d4466d56ca9630de492ce29fc409cd91f343c4", 0x3, 0x69b5226f, 0x5, 0x7, 0x1000000, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:30:00 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x80000, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 07:30:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x2}}, @algo_auth_trunc={0x4d, 0x14, {{'md5\x00'}, 0x8, 0x0, "02"}}]}, 0x188}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000001540)={@l2tp={0x2, 0x0, @local, 0x2}, {&(0x7f0000000500)=""/4096, 0x1000}, &(0x7f0000001500), 0x44}, 0xa0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x1c, r7, 0x301, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x100, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "717f2f801f955ca8025c55e28740"}, @NL80211_ATTR_KEY={0x8c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "8360e0ec58"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_SEQ={0x13, 0x4, "c090e053c82a1e2ef366de983e1960"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e50c2e04cc"}, @NL80211_KEY_SEQ={0x9, 0x4, "acd6d59a36"}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3efad143f0"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "7e852c2642af6c28be2d95b96b"}]}, 0x100}, 0x1, 0x0, 0x0, 0xc800}, 0x8004) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001600)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="40866f63c13160a1ec293094ab0e8f1b781c65190cf9d3edb32d01be587a12af7a03e694400000ad188a4c3de60afc8379b169f25b52999cd26599a98b4cb409fe01f7ea14cdd2aab61ae0dacdf151dd57316e3e8a8c4d5909c82dadedf23176c2ceb2a91814e89c601bf0f46369f3e03b0e5a8e1d07ab6a658e036484e28170167201a050231954ee7dd63bf6ce470db9d6645c43ee7fd0dfc82b96b5f1cf6a9e88879dd1342ce5380ecde4c0e128517f86a1206d5efb4d4cf7fcf83a462fd5a72dab03a8a684"], 0x44}}, 0x0) [ 869.059491] batman_adv: Cannot find parent device [ 869.076139] batman_adv: batadv0: Adding interface: gretap4 07:30:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x8efc0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000080)={"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"}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x4}) dup3(r4, 0xffffffffffffffff, 0x0) [ 869.088779] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.119211] batman_adv: batadv0: Not using interface gretap4 (retrying later): interface not active 07:30:00 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000023f000)=ANY=[@ANYBLOB="840008000000000000bd7000ffffffff0000fffc0c00000000000000000000005b659a62290ffc380c2dbfdc5e9f13e11b3769a33ea6b6b2c1b4e2bf501fb1bb949069c201000000000000004fcd4dd3050bc1705fa158cf0d70309f7f5969136e03003294c0356675ffff000044f2a432a15b4ced6aa166b5040d0000000000000000"], 0x1}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f000023f000)=0xa, 0xb6) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f00000000c0)={0x1, 0x0, 0x101, 0x2, {0x8, 0x2, 0x3, 0x80000000}}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x5030c0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4008050) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x12000, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r7, 0x4040ae72, &(0x7f0000000100)={0x9, 0x6, 0x0, 0x0, 0x6}) 07:30:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000740)={0x9, 0x4, 0x1, 'queue0\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', r5}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64000000000c0002000800010004000000f293b1f6ef59ed5c26845620d363b9bd1ca296c5ec09bf9c53374ce7c2bec128f6880766a781b7d853b9ebeb313acb15ace50c0b73db0bc941804eb14518c36313e396e9927ba0b89421ec59aaf25e12261abe52dca25634bc42a7b40866debe41cdca73c05918cc311a0d1d972fdb06d30e9fc11418e0ecb9c8ee651960ffd9acdaa4bc4ef90b2dc0b05b13a3c29a3d"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r7, @ANYBLOB="443c3d7c834cfa9d683826e7673405fcda4522e51baaeb8b90a6f914cd"], 0x50}}, 0x0) r8 = socket(0xa, 0x1, 0x0) close(r8) sendmmsg$inet_sctp(r8, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x3bf, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) vmsplice(r2, &(0x7f0000000340)=[{&(0x7f0000000440)="bfb4a9b536871a4cba636a2333e240ba9aab30d5a48b8db234deda83e2b7297d5612008739d341743a7808f7bfa95aef08d44061e1c08285d997076471a2b9354ec6c4007a94ea83841f38666b61330c118fa177a02e5163a5b51d02a68cc614c3c63cbc5a2db2b962d4a97ba770dd9a3604757027ae6a44a764c550a41918274e229554326538cdfaa5559164008c5d5f7feeaf1f9f2c324b6d8624450003aa3faa8b8d3aaa4fc30fb99c0ee558d972d4d0f21c7e2fdde02efdf2c83efb1b8a0349c868a698e352adb76f70b721357747f1a168d3bbaa17a13178cfae5605af6ca10a3bf9ac7f63bee2932ee4bb2856fd6e3e", 0xf3}, {&(0x7f0000000300)}], 0x2, 0x1) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c00)=@newlink={0x25c, 0x11, 0x40d, 0x0, 0x0, {0x10}, [@IFLA_VF_PORTS={0x104, 0x18, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8213466678450fb59c2924685716395a"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a31a3ef0bf923d99c8694ef79fd6dd23"}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "acb32b75a63c5fb0e87ba16fb2fa4d4e"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7f0000000088dd87d577fc039e00"}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, 'keyring\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "eed7c556fc9677358bfb2352e8a09579"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8293d1075ab198e8792e3a51753e7a1b"}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xef}, @IFLA_PORT_PROFILE={0xd, 0x2, 'security\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8795eb53195afea78915f40151e7e299"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "766a1518e7df47b2160d2071f8f20e77"}]}]}, @IFLA_IFALIASn={0x4}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x861}, @IFLA_MAP={0x24, 0xe, {0x800, 0x3, 0x1, 0x7, 0x3, 0x3c}}, @IFLA_VFINFO_LIST={0xd4, 0x16, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000000, 0x2, 0x7f}}, @IFLA_VF_MAC={0x28, 0x1, {0x4}}]}, {0x94, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x491, 0x8}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x36ca, 0x10000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x101}}, @IFLA_VF_VLAN={0x10, 0x2, {0xffff, 0xa68, 0x273}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffffe, 0x8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x400, 0x5}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1ff, 0x627, 0x48e6, 0x8100}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x73f7, 0x400}}]}]}, @IFLA_WEIGHT={0x8, 0xf, 0xb4e3}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x74a3}, @IFLA_GROUP={0x8, 0x1b, 0x7ff}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}, @IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x25c}, 0x1, 0x800000000000000}, 0x0) 07:30:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="663ad41e7e8eeaec"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="66baf80cb8d8244487ef66bafc0cedc4c35d6d16ad0f060f01cab92f090000b80001c0feba000000000f30b805547fc60f23d00f21f835100000050f23f8660fc770a8b9df0b00000f320f01cac4c2e137fc", 0x52}], 0x1, 0x68, &(0x7f0000000080)=[@cstype0={0x4, 0x9}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 869.373704] IPv6: ADDRCONF(NETDEV_UP): bond3: link is not ready [ 869.379851] 8021q: adding VLAN 0 to HW filter on device bond3 [ 869.417360] bond3: Enslaving veth9 as a backup interface with a down link [ 869.565013] IPv6: ADDRCONF(NETDEV_UP): bond4: link is not ready [ 869.573529] 8021q: adding VLAN 0 to HW filter on device bond4 [ 870.611372] Bluetooth: hci0 command 0x1003 tx timeout [ 870.616677] Bluetooth: hci0 sending frame failed (-49) [ 872.691561] Bluetooth: hci0 command 0x1001 tx timeout [ 872.697087] Bluetooth: hci0 sending frame failed (-49) [ 874.771264] Bluetooth: hci0 command 0x1009 tx timeout 07:30:10 executing program 3: socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x200000000000000}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0}, 0x40) r10 = dup(0xffffffffffffffff) ioctl$SG_GET_ACCESS_COUNT(r10, 0x2289, &(0x7f0000000600)) open_by_handle_at(r10, &(0x7f00000003c0)=ANY=[@ANYBLOB="780000006305000050ac3d99c7feff030002dc5fb201ce57abf581589a1fa2875f465fdc21f4e97b5e6af0736698b0cc713f180c7205000000f6430c98c67d0010000000000000d3332493d610bf512d4cbf955f8de59053cc6f6125c3af48130f4e64e60a9ac5c07cd7840accd815560c83b86c65bce89f7a73ee1a7c9660df7bb5417e5d6babf09ba1afd321f2ce1407d9bc0815d2485e89d72ed21d4cab2a57b6561a67e1cab9244f3c7076d4675253f23cd093e76270208ea82c6bfb3cac471f3a46ea75929354b164e561d7916da66c43f651d2787aa4d3533f2a2efdeb72a582810875dfb4fa6c5e41882b75"], 0x12da00) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) 07:30:10 executing program 2: r0 = socket(0x10, 0x400000000080803, 0x0) write(r0, &(0x7f0000000100)="240000001a00d17da53a7436fef7001d0a0b49ffed0000008000280008000300010000009186cc67455968532358f1d48b4b904d6671709295983223a4b6e1f75fd2a0c121bc230cc782493334f06f174820a6f709e0c664bc14e9", 0x5b) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) write$vhost_msg_v2(r2, &(0x7f0000000300)={0x2, 0x0, {&(0x7f0000000180)=""/129, 0x81, &(0x7f0000000280)=""/97, 0x2, 0x3}}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KDGKBMODE(r6, 0x4b44, &(0x7f00000000c0)) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000008000000000001e000000100000000000000010000000000000000000000000a00000b167ea90275e81609db32c1e44c516500000000000000000000000000be34286fae6298adf24178c6ca9c3832d0fed53c1e984764d97c3e4a4da21fe923a6e08c2206def120bf5280b8daa50a25e171f4119b31001b80ff4c20ca77d8e2fa0c45", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb0e9716630b10000000000000000000000000000000000000000000ffde000000000000573a00000000000000000000000000000000e10c87dcbf71ee1ef54b58e6c5f99ea8ad352f3fbb4d0daa5685b8e4b6659846c09a2b09a3d2f123efa2f6280261"], 0x454}}, 0x0) read(r0, &(0x7f0000002580)=""/4096, 0x1000) r7 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$SNDCTL_DSP_GETOPTR(r7, 0x800c5012, &(0x7f0000000380)) 07:30:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xaaaaaaaaaaaab42, &(0x7f0000000200), 0x200404, 0x0) r0 = socket(0x10, 0x3, 0x0) close(r0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="3c95357a", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f00000001c0)=0xfffffffffffffe85) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x3, 0x8, 0x2, 0x6, r3}, &(0x7f0000000040)=0x10) 07:30:10 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x400800) write$P9_RWSTAT(r0, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000100)=0x3f, 0x4) creat(&(0x7f00000000c0)='./file0\x00', 0x6) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, 0x0, 0x711, 0x0, 0x25dfdbfc, {0x7}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}}, 0x40400a4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2400c081}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000d4) sendto$inet(r1, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 07:30:10 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) socket$inet(0x2, 0x80000, 0x73) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 07:30:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="e092db4cc739a0b09794c04cfae2f9", 0xf}], 0x1, 0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) [ 879.239312] IPVS: ftp: loaded support on port[0] = 21 07:30:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4030) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000100)={0x5, 0x3, 0x9, 0x2031, 0x20}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x5, 0x768, 0xfff, 0x1f9}) [ 879.319343] audit: type=1804 audit(1585899010.826:117): pid=22511 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir521696900/syzkaller.aJ4BXy/470/bus" dev="sda1" ino=15813 res=1 07:30:11 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) dup3(r0, r3, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = socket$inet6(0xa, 0x40000080806, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x404e20}, 0x1c) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x200, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000100), 0x4) listen(r4, 0x400000001ffffffd) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0) socket$inet(0x2, 0x200000002, 0x200000) 07:30:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 879.827067] kasan: CONFIG_KASAN_INLINE enabled [ 879.832914] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 879.908831] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 879.915354] Modules linked in: [ 879.918566] CPU: 0 PID: 22 Comm: kworker/u4:1 Not tainted 4.14.175-syzkaller #0 [ 879.926209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 879.935751] Workqueue: events_unbound flush_to_ldisc [ 879.940882] task: ffff8880a9a1e5c0 task.stack: ffff8880a9a28000 [ 879.946962] RIP: 0010:skb_put+0x2b/0x1a0 [ 879.951235] RSP: 0018:ffff8880a9a2fb90 EFLAGS: 00010202 [ 879.956745] RAX: dffffc0000000000 RBX: ffff888092254980 RCX: ffff88808fc91780 [ 879.964031] RDX: 0000000000000019 RSI: 0000000000000004 RDI: 0000000000000000 [ 879.971314] RBP: 0000000000000000 R08: 000000000000527e R09: ffffffff8a084c70 [ 879.978595] R10: ffff8880a9a1eee0 R11: ffff8880a9a1e5c0 R12: 0000000000000004 [ 879.985881] R13: ffff888092254990 R14: 00000000000000c8 R15: ffff88808ec164a0 [ 879.993161] FS: 0000000000000000(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 880.001580] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 880.007474] CR2: 0000558152a78a80 CR3: 0000000052b7a000 CR4: 00000000001406f0 [ 880.014752] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 880.022154] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 880.029441] Call Trace: [ 880.032043] ll_recv+0x4fe/0x1040 [ 880.035735] hci_uart_tty_receive+0x1ec/0x4c0 [ 880.040239] ? hci_uart_write_work+0x670/0x670 [ 880.044829] tty_ldisc_receive_buf+0x12e/0x170 [ 880.049419] tty_port_default_receive_buf+0x6e/0xa0 [ 880.054447] flush_to_ldisc+0x1dd/0x3f0 [ 880.058596] process_one_work+0x813/0x1540 [ 880.062414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22531 comm=syz-executor.1 [ 880.062843] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 880.079571] ? worker_thread+0x15d/0x1070 [ 880.083737] worker_thread+0x5d1/0x1070 [ 880.087729] ? process_one_work+0x1540/0x1540 [ 880.092300] kthread+0x30d/0x420 [ 880.095787] ? kthread_create_on_node+0xd0/0xd0 [ 880.100466] ret_from_fork+0x24/0x30 [ 880.104188] Code: 41 56 41 55 41 54 41 89 f4 55 48 89 fd 4c 8d b5 c8 00 00 00 53 e8 66 e9 60 fc 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 880.123392] RIP: skb_put+0x2b/0x1a0 RSP: ffff8880a9a2fb90 [ 880.196148] audit: type=1804 audit(1585899011.706:118): pid=22534 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir521696900/syzkaller.aJ4BXy/470/bus" dev="sda1" ino=15813 res=1 [ 880.247550] ---[ end trace 21793d034812a03a ]--- [ 880.252809] Kernel panic - not syncing: Fatal exception [ 880.260576] Kernel Offset: disabled [ 880.264253] Rebooting in 86400 seconds..