, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000840)=""/249) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r3 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000080)) sendto$inet6(r1, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:00:32 executing program 0: chroot(&(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000140)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x4) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7fffffff, 0x80) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000180)=""/130) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) fallocate(r1, 0x0, 0x0, 0x1) 16:00:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 16:00:33 executing program 1: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000380)=""/167, 0xa7}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='status\x00') write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast2, @in6=@empty}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) close(0xffffffffffffffff) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000240)={0x4, 0xb5e}, 0x10) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000480)=[{&(0x7f0000000280)="4eaebab9fc1fb1b3f5eb8d78ec9f0f4621d046c71e0970bb9e20a41e56c47db72f5ca54e93353b34db0f0f31e87f38de815aa2fda21c8c35117d70f51b4ca93d1a232d073af639f5d0ae8856ea9bc39dd4f9f3d84d0d220a98fb14262edb16a2ab208b66862322c15e72e056cc717b62c74bfcd4857aaaf55b9c99ee1d35c221bd5333120d397d35837de3c09505b8a317e81e02157d413661c7db740fca4e5f64883d12d22f1015fecdc77a02e6bb96df45e74ce0152157940a31ac09a9c01649bff0d10c8022f9de95a1df291d25be1b", 0xd1, 0x1000}, {0x0, 0x0, 0x3f}, {&(0x7f0000000380)="9fb686f69c5aaf9cd21be4b8989fcbcb0a6eb43a8fc62f66b7bd1e634652a726f40eab22383a065b20f45d3e996e65569bc67f851946a08ae9ab503f27b2e0d8a409dec541e001ac1d43382fe5748bb550996321f290bc0f1fd6abaa180708d2b13efa3a955e09464f343d6dcdefaf7f97faa3f754c6b845f093828b2a0045275e9f9276a09bf6ec11a50773d89815126ae78622b29e3a22dfeca2a8e98498c8be4e1221a1cc16bd96a0cd2384c9e30e", 0xb0, 0x9}, {&(0x7f0000000200)="657c56139ed5c8d491c1777257b754059df68c5559", 0x15, 0x3}], 0x4, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004b0100000000000000009078ac1414bbac1414aa44180703000000000000000000001100000000000000000000009078e0000001"], 0x0) 16:00:33 executing program 5: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='fdinfo/4\x00') write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x2ab}, 0x2) r2 = socket$kcm(0x10, 0x800000000000002, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="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", 0xfb}], 0x1}, 0x0) [ 343.450524][T15523] device bond0 entered promiscuous mode [ 343.469028][T15523] device bond_slave_0 entered promiscuous mode 16:00:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 16:00:33 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000840)=""/249) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r3 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000080)) sendto$inet6(r1, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 343.541070][T15523] device bond_slave_1 entered promiscuous mode [ 343.577155][T15542] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.5'. [ 343.602669][T15523] 8021q: adding VLAN 0 to HW filter on device bond0 16:00:33 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) link(0x0, 0x0) getpgid(0xffffffffffffffff) fstat(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, 0x0) sendmsg$unix(r2, &(0x7f0000000d80)={&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000740)="94fb434deea7daee024d39240829924798412068bf643e60841a2f48f608ce320eab233a18e6eba475070fa39249", 0x2e}, {&(0x7f0000000780)="bc5a0bbe33bd6adaa841b0c507c44ea7763af8c2c7c65070d0333d1cc938c16a87", 0x21}, {&(0x7f00000007c0)="da813e7d25504e020ca1326cbdd7afbeb739daf58349b0d223492326d6c111b18fc2473d006f5a8a69488fc01fcd9c74a96e64cae4fce1d5f7858e070e9f67dc1885e4da0ab5fc9310a38c0cc26446da24fda42b22f337f8cf45f7efdc506caecb81d12a72e19245d79c4e612af0dd64405e93193bdd8cca84f9bd8144c5df4a605361d11d8ecc0f9ea0abfc94c8363a6cf5aee8939bf0c0", 0x98}, {&(0x7f0000000980)="953039137b1a5c0790c00963bf319fa5927f8e46afbd67f58d2042f024f73d91bdba4668d1764b1a8b95086b38fb60480fae20913311fd38c4b555349a39231253b7f53ea7496f975610bde9ef4062edc1ba8681e2495482ef29d59d3fbddc287aaa58c24dfcd183fa0e7d8b98c27cd68df431a40c2483129e004d239be190f4703faaa3d866508e7ffd0cce1989c8da756eb0ec9e9b5fdb53c54996a1fe2255cc67f61193668cbaa7", 0xa9}, {&(0x7f0000000a40)="17d13d4c667f9e9f2816600a16cb3b2848be9bb7288db095b7c9913fb76703ba14c0fd80449c9c5cb0993528439c053582935ca787e8ea2bd7132800e3a99037352aec62184e9826976ae0eb7678adbe20f371972acda3a98233b6f2148af80ccf49c79ec863cdaebdea7e26eb8da1de5a44c0a6b432e66a5e34a24100431cd501c88349532200218cce1a773c7f", 0x8e}, {&(0x7f0000000b00)="7ef24f25601acf5db5e227aaa6489a0b3787843c4395597e06dd89d2349c876ee8fee331869ad1e136ab269f7df5e53cdf69d9bc43e1932e42abba", 0x3b}], 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001400000000ec00000000000000000000d695bdbcabaf0787f9e6d8f47a549f779dcb43f9ef8de0959e902cbd1c46ad14d09e82a4c1326a66a66bed4b4991dde752c02b077f5b936fda0c69417d1836fcaab91bb4d63aaaa0702b743bccb29712ecbc36fc0b88d7ffde2ae1a0dd49a8f8cc8fbabc29cc381ef2b3df8dc0864c3b5347c8669aece55c5fad5b6098753e152e98e24e6b1e1e6edf90ec3d681af99c48d887dac0a5dede8425e568057532d35d26ef478453a7baf4", @ANYRES32=r2, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32], 0x70, 0x8001}, 0x20044014) socket$rxrpc(0x21, 0x2, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) syz_open_dev$sg(0x0, 0x0, 0x400001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xab3}) getsockopt$inet_udp_int(r2, 0x11, 0x67, 0x0, &(0x7f0000000040)) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000001f00)='/proc/self/attr/exec\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2001, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000000c0)={0x8, 0x20, 0x7, {0xf, @vbi={0x8, 0x6, 0x80000000, 0x34565559, [0x100000000, 0x5f298fd3], [0x0, 0xfff], 0x109}}}) [ 343.671420][T15551] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.5'. 16:00:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 343.784119][T15520] device bond0 left promiscuous mode [ 343.794130][T15520] device bond_slave_0 left promiscuous mode [ 343.802361][T15547] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=65000000) [ 343.812198][T15520] device bond_slave_1 left promiscuous mode 16:00:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r3 = geteuid() r4 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={r2, r3, r4}, 0xc) r5 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) dup3(r5, r1, 0x0) 16:00:33 executing program 1: r0 = socket$inet(0x2, 0x7, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) r3 = dup2(r1, r1) read$FUSE(r3, &(0x7f00000001c0), 0x1000) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000140)=""/121) accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10) 16:00:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 16:00:33 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000840)=""/249) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r3 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000080)) sendto$inet6(r1, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:00:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003580)='/dev/mixer\x00', 0x40, 0x0) getsockopt$inet6_int(r1, 0x29, 0xff, &(0x7f00000035c0), &(0x7f0000003600)=0x4) clock_getres(0x6, 0x0) 16:00:33 executing program 5: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='fdinfo/4\x00') write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x2ab}, 0x2) r2 = socket$kcm(0x10, 0x800000000000002, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="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", 0xfb}], 0x1}, 0x0) [ 344.215361][T15582] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.5'. 16:00:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 16:00:34 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xffffffffffffffa7, 0x101000) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0xfffffffffffffefb) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0x12) 16:00:34 executing program 5: sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0xa36f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x8000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x100000, 0x0, 0x52, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x7) 16:00:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000000000ffff00000000000000000000000005000900fd0000000a000000000000000000000000000000000000000000000000000000d5d218978d4905bedc2738000000000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x285, 0x135801) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x4102, 0x0, {0xc, 0x13, @l2={'eth', 0x3a, '\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x1) [ 344.366800][T15587] cgroup: fork rejected by pids controller in /syz3 16:00:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c08, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x111000, 0x0) ioctl$VT_RELDISP(r1, 0x5605) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001680)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000001780)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000017c0)={'vcan0\x00', r2}) 16:00:34 executing program 3: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 344.482980][ T24] audit: type=1400 audit(1564243234.151:153): avc: denied { map } for pid=15602 comm="syz-executor.5" path="socket:[47562]" dev="sockfs" ino=47562 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=socket permissive=1 16:00:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 16:00:34 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000140)) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x44000010}, 0xc) syz_read_part_table(0x0, 0x98aeeac5191eeb2, &(0x7f0000000080)=[{&(0x7f0000000000)="02000500000001000000ff07000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={0x0, @empty, @empty}, &(0x7f0000000280)=0xc) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x4e24, 0x5fd, 0x4e24, 0xfffffffffffffffb, 0xa, 0x20, 0x80, 0x8, r2, r3}, {0x2, 0x2, 0x2, 0x1, 0x1f, 0x8000, 0x62f899fa, 0x3f}, {0x0, 0xffffffff, 0x0, 0x5a6}, 0x7f, 0x6e6bb6, 0x2, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x4d4}, 0xa, @in6=@loopback, 0x3506, 0x0, 0x3, 0xe850, 0x1, 0x1, 0x8}}, 0xe8) 16:00:34 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x0, 0x100000000000ff) sync_file_range(r1, 0x2, 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)={0x102b7939, 0xe, 0x4, 0x2003, {r2, r3/1000+10000}, {0x3, 0x2, 0x78, 0x1ff, 0xfffffffffffffff9, 0x40000, "7f0316c5"}, 0x8, 0x5, @offset=0x5, 0x4}) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="05031200000000000032c822dc9604d7faef0061ae995e8b584be0734c3d02dba2c51ab2a02ceb01158efe7d916185b0875fb8fb017daebcafd5a7cc"], 0x3c, 0x1) r4 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000080)={0x0, 0x3, 0x9, &(0x7f0000000040)=0x9}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r4, 0x0, 0x20000000010005, 0x2) 16:00:34 executing program 4: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8810) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000004c0)={0xffff}) connect$inet6(r1, &(0x7f0000000080), 0x1c) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e22, 0x3, @rand_addr="8de7bdb6471f45cf3a3842459042b24a", 0x5}, 0x1c) r4 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000002c0), 0x14) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x8}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000400)={r5, 0x101, 0x10, 0x800, 0x7fffffff}, &(0x7f0000000440)=0x18) recvfrom$inet(r4, &(0x7f0000000180)=""/182, 0xb6, 0x2, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet6_buf(r4, 0x29, 0x0, 0x0, 0x3e1) 16:00:34 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x200, 0x0, 0x0, 0x5}, 0x1c) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000000)=""/241, &(0x7f0000000100)=0xf1) r1 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x2) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xa5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f00000004c0)={0x1000, @dev={[], 0xc}}) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f00000001c0)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x11) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000340)=0xe8) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000400)={0xa0, 0x19, 0x1, {0x12b, {0x8, 0x4, 0x1}, 0x41, r3, r4, 0x1303, 0x13, 0x6, 0x36, 0x4312, 0x5, 0x20, 0x6, 0x9, 0x2, 0x8, 0x9, 0x0, 0x1, 0x4}}, 0xa0) sendmmsg(r0, &(0x7f00000096c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002440)=@tipc=@nameseq={0x1e, 0x3, 0x0, {0x2}}, 0x80, 0x0}}], 0x459, 0x0) 16:00:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 344.887003][T15650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=15650 comm=syz-executor.1 [ 344.901295][T15626] loop0: p1 < > 16:00:34 executing program 3: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:00:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x10303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$packet(0x11, 0x2, 0x300) r3 = accept(r2, &(0x7f0000001340)=@hci={0x1f, 0x0}, &(0x7f00000001c0)=0xffffffffffffffbd) sendto$packet(r2, &(0x7f0000001200)="8e1a883d8c2abae1f5fdf2eccf2f2229fce5ff2ce65117eb03464c6207ce3face2243c3ffe993db274f72b15fe25fab235355d7792b170cc936dcffa5d215abb9622deb2597e9e88fa50e82c17085796ece72f7a7976d952cf9127", 0x5b, 0x20000001, &(0x7f0000001400)={0x11, 0xf7, r4, 0x1, 0xfffffffffffffff7, 0x6, @broadcast}, 0x14) sendto$packet(r3, &(0x7f0000000000)="d681af6147286ab05420fbc041130930fd5aed481e7d4d68ca9e823d0fe8824d7733d03a2e311e250c8eb8a2548e8d469a36393fa834be6df526f7513818721de9614b9d04635d7ff885a153081c4b9071094268b02bfe201c0c22180b3d9300af35db56e8ebe676b93a01525a3589da5d21bae764f6ad2de73ace25558ce13bfa1c6f64f4d0d6dac2bbb57cac55e647332ae5a92f96dff2cb334820e5cf", 0x9e, 0x10, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x5, 0x6, @dev={[], 0x15}}, 0x14) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil, 0x0, 0x4, 0x0, &(0x7f0000fef000/0x11000)=nil, 0xffffffff}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)) 16:00:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 344.929658][T15650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=15650 comm=syz-executor.1 [ 344.964879][T15650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=15650 comm=syz-executor.1 16:00:34 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@grpjquota='grpjquota', 0x3d}]}) [ 345.069001][T15650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=15650 comm=syz-executor.1 [ 345.118326][T15650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=15650 comm=syz-executor.1 [ 345.138063][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 345.143905][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:00:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 345.169877][T15650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=15650 comm=syz-executor.1 [ 345.242880][T15672] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 345.253655][T15650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=15650 comm=syz-executor.1 16:00:34 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x101000, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000140)=0x6002) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0xfffffffffffffdd6) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x840, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000200)={@hci={0x1f, r1, 0x3}, {&(0x7f0000000080)=""/43, 0x2b}, &(0x7f00000000c0), 0x10}, 0xa0) bind$can_raw(r0, &(0x7f0000000040), 0x10) 16:00:35 executing program 3: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:00:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 345.323501][T15650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=15650 comm=syz-executor.1 [ 345.432700][T15650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=15650 comm=syz-executor.1 [ 345.450372][T15672] REISERFS warning (device loop0): reiserfs_fill_super: Cannot allocate commit workqueue [ 345.511747][T15650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=15650 comm=syz-executor.1 16:00:35 executing program 1: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:00:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100000001, 0x0, 0x0, 0xc64d}) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') r3 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000100)={'rose0\x00', {0x2, 0x4e24, @broadcast}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0xfffffffffffffeff, 0x40002) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000400)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0xfffffffffffff311, 0x81}, &(0x7f0000000200)=0xc) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000380)=""/91) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e24, 0x9, @rand_addr="93ecf3386e007854cde2abafdfe42334", 0x1}}}, &(0x7f0000000300)=0x84) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x82000, 0x0) 16:00:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 16:00:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c010000170001000000000000000000a7b5b41e0000000000000000000000bb0009000000000100000055d3bad949140000000000000000ac1414aa000000000000000000000000ac1414b72914d7cec33dd100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fe8000000000000000000000000000bb00000000000000000200"/196], 0x16c}}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x400000) sendmsg$nl_generic(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x25, 0x600, 0x70bd2b, 0x25dfdbfe, {0x16}, [@typed={0xc, 0x3e, @u64=0xb901}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10) 16:00:35 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x2}, 0x7) r3 = socket$packet(0x11, 0x3, 0x300) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x4}, 0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:00:35 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000840)=""/249) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r3 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000080)) sendto$inet6(r1, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 345.764544][T13194] Bluetooth: hci0: Frame reassembly failed (-84) [ 345.765414][T15710] Bluetooth: hci0: Frame reassembly failed (-84) 16:00:35 executing program 5: clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) connect(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x3, 0x0, 0x3, {0xa, 0x4e20, 0x2, @loopback, 0x8}}}, 0x99) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x295, 0x0, 0x0}) 16:00:35 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000840)=""/249) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r3 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000080)) sendto$inet6(r1, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 345.994851][T15723] binder: 15720:15723 ioctl c018620c 20000040 returned -22 [ 346.008019][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 346.013855][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:00:35 executing program 4: r0 = socket$inet6(0xa, 0x2000000080803, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) getsockopt$packet_int(r2, 0x107, 0x1f, &(0x7f00000000c0), &(0x7f0000000340)=0x4) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x277, 0x7}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}, 0x150, 0xffff}, 0x90) 16:00:35 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x5f, 0xfa00, {0x0, r1}}, 0xb9ad4a0c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) fstat(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000540)=0xe8) fstat(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r2, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02000000010002000000000002000700", @ANYRES32=r5, @ANYBLOB="02000700", @ANYRES32=r6, @ANYBLOB="02000500", @ANYRES32=r7, @ANYBLOB="02000100", @ANYRES32=r8, @ANYBLOB="02000200", @ANYRES32=r9, @ANYBLOB="040002000000000008000600", @ANYRES32=r10, @ANYBLOB="08000500", @ANYRES32=r11, @ANYBLOB="100005000000000b1bd6460000000000"], 0x5c, 0x2) 16:00:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="387faf80b4d81a3b2ccc734de33c16975cb771ceed88640366280899c1e959ac5073bea9fb4232813c8ccb1bb74368f0695d6bb871d379e6738ea31e2e8e13e41bed593166e8e6fb856f", 0x4a}, {&(0x7f0000000280)="057ddf8002019b0535da3c13981f863364b6779e9f33bfc335a4b64ef2dd781b447fdcc61df03733af067fef67c3fc0f31b23d8f2d467a4d647e1a55aae55788abf912237856125b76768f9c887afc1d8843352a508104c28953821267d9d71ae6c468c3eadb2d71a2637ddd2c8316c14195c95f63a2b4626fae14f3f8d2607e", 0x80}, {&(0x7f0000000300)="49eeb34f9d0afa839a407fa58124cce295e201d8c3a78fe6f2da48e4681dd2d948165be2fb7ed423454f20ceaf32d663aa1edbac5ac996577a97d53a00ba098bd098e37edd6bd6129a39aae7a55cd62120be9fd1cf151c85674071b421c7de4e863244cbc2e5bbfe845ec6eba3a6903556e08d4d5a30b44c7a81f2da846a49ac707d4e8fdfe29fa904f19841b1a3e113e457fdf19c66ec943cddf06a67a6b1b78d2c9eb05125bb543daeabd97a98f33b8b9bc5bc631ee2d46f9cc96f754b9c971a2a17a621e4acf73130", 0xca}], 0x3, &(0x7f0000000400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}}], 0x1, 0x8000) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000100)={0x4, 0x1}) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000000240)=""/49, 0x31}], 0x1}}], 0x1, 0x0, 0x0) 16:00:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r3 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000080)) sendto$inet6(r1, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:00:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to[team\x00', 0x400}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x6, 0x4, 0xfffffffffffffffd, 0x0, 0x9, 0x17d6, 0x5, {0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x8, 0x2, 0x5, 0x0, 0x3c18}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={r2, 0x8, 0xc, 0x8}, 0x10) write$P9_RLCREATE(r1, &(0x7f00000002c0)={0x18, 0xf, 0x1, {{0x8, 0xffffffff, 0x8}, 0x15b2}}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x800}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x261) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000300)=0x1e4000000, 0x2, 0x1) [ 347.768067][ T17] Bluetooth: hci0: command 0x1003 tx timeout [ 347.774188][T15101] Bluetooth: hci0: sending frame failed (-49) [ 349.848158][ T5] Bluetooth: hci0: command 0x1001 tx timeout [ 349.854301][T15101] Bluetooth: hci0: sending frame failed (-49) [ 351.928087][ T17] Bluetooth: hci0: command 0x1009 tx timeout 16:00:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 16:00:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x43, 0x0, &(0x7f0000000200)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x200, 0x2, 0x7fffffff}, 0xc) 16:00:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="580000001400192340834b80040d8c562c067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) 16:00:45 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:00:45 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000380)={0x1d, r1}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0xfffffffffffffef1, &(0x7f0000000140)={&(0x7f000000a000)=@canfd={{0x1}, 0x3, 0x0, 0x0, 0x0, "0327e1b22b5fcef700580f02000000003f420f000000000001580f02000000003f420f0000000000856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x2000a198}}, 0x0) 16:00:45 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0x75, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, 0x0, &(0x7f00000004c0), 0x1}, 0x1c5) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x6, 0x0, 0x3, 0x3}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="21ff47975252d64a"], &(0x7f0000000140)=0x13) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r3, 0xfffffffffffffffd, 0x9, [0x1000, 0x40, 0x2, 0x8, 0xf9, 0x3, 0x7ff, 0x4, 0x6]}, 0x1a) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000000c0)={0x1, r2, 0x0, 0x2}) [ 356.134319][ T24] audit: type=1400 audit(1564243245.801:154): avc: denied { map_create } for pid=15774 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 16:00:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000100)=0x7) close(r0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000600)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x200800000000001, 0x0, r0, 0x0, 0x1f3}]) [ 356.205986][ T24] audit: type=1400 audit(1564243245.841:155): avc: denied { map_read map_write } for pid=15774 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 16:00:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@dev, @multicast1}, &(0x7f0000000080)=0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140)=0x800, 0x4) r1 = dup3(r0, r0, 0x80000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 16:00:45 executing program 4: r0 = socket(0x21, 0x1, 0xbf70) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10400, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) [ 356.251545][ T2668] Bluetooth: hci0: Frame reassembly failed (-84) [ 356.252577][T15787] Bluetooth: hci0: Frame reassembly failed (-84) 16:00:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x101040, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x180, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) 16:00:46 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x28700, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x10000, &(0x7f0000000080)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r2, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x2b, @empty, 0x4e23, 0x0, 'nq\x00', 0x0, 0xbc, 0x71}, 0x2c) recvmsg$kcm(r0, &(0x7f0000001d40)={&(0x7f00000008c0)=@generic, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000940)=""/112, 0x70}, {&(0x7f00000009c0)=""/235, 0xeb}, {&(0x7f0000000ac0)=""/102, 0x66}, {&(0x7f0000000b40)=""/159, 0x9f}, {&(0x7f0000000c00)=""/181, 0xb5}], 0x5, &(0x7f0000000d40)=""/4096, 0x1000}, 0x40010000) syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000300)='./file0\x00', 0xda8, 0x7, &(0x7f0000000740)=[{0xfffffffffffffffd, 0x0, 0x5}, {&(0x7f0000000380)="3bc5a84c2818dbf2f5da025425c1494bf9015a3479a88fb9efa6c0ddca24637a0728fcc7", 0x24, 0x158}, {&(0x7f00000003c0)="134ff11f239967b19a13bb483ae528dd252f9457a81edbdc5de5c1f4114cbc342751ed6943239c6ed3bcdb533ace2a4266d1fd2e4d51dec3a1c05b7dd629b2197c4c93408f7eb5b7d9f3bde576dc08c9fe7a068f999a995ff6af258cd18b2091351ccf9a22884bdc35e0d2c115ff3f7e89fc6dd00f3d54b5bdfb9646c0238d41d8f64fceea583527bcda830d2773553e35f5332d522f6125f1f3e56e183cf4884b657e412fd09ca00f0ca23a36f873cc247c3faaa1a0724840305c77ca3aed86ff7d9ad43a908177551eb43b40ff71a67179171024e0459c28", 0xd9, 0x8}, {&(0x7f00000004c0)="bf71e9685b42117e854bcb829d2dcb93bfb112d721786ddb65774674b2e311956fdbc29f7b4e9d9ae41eca29", 0x2c, 0x4}, {&(0x7f0000000500)="81895894167f61147765e48bd2934d09ace310b4bf7d93b0518c62efc69c43e02f4a9666b5becaba33ae7453d2f152aa861692a9d0f609663280b4eb9376cd830a814d136c96e508224906dfd3789c17b6761d4506380c639cff474e6b898d310f946a6e67d4e2b339141f00c0b26d2f0e2cec66e542d3f31a2ff4d2a7c51ee694d9d6ada864c9975dd06b1b672a8ba65d833189bbd0e83be4f922408fbbb581c568d808b462e3edca5df14d32f914ffdf784708027a1a12d5076b9559221fad15159f8e8230c6369a2e065cb454e02798f7342da4226bca", 0xd8, 0x1f}, {&(0x7f0000000600)="fe35c599e0236be14deeaea0a1a4c21d1fc024620c3598bca746d32bbb64b6594f52c82dfca83b4f915f03ca8bebb5170d718827561fc80b4d18c827f7ce12b1f90c2990b2736db3a5b223391296453b63c43ff56fae717a117899b64cf87ba64e667f2f1e96213abe7d8dffe268eca6a3e8ffae7f512e430771e305020df3bfd551faa2ebfa0174e9bb7b75bc76f7753331d84124af36ee073f626791b09c7c5f0baf07a69e51c944e20d4ef3595f75138e8e879b21ae0d3ad9341ae2311b40f81c917f6bf5750d6f1ab4", 0xcb, 0xe4}, {&(0x7f0000000700)="9534a502ca9d6fd62e67e50e1cccfdc6fe1061d3f894ad6d4f71ed986e4ac74b5cb4d35e0e844492aa880d7ac858591e9707dae373c28c47478438979c9a", 0x3e, 0x9}], 0x800002, &(0x7f0000000800)={[{@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@shortname_mixed='shortname=mixed'}, {@nonumtail='nnonumtail=1'}, {@rodir='rodir'}, {@fat=@nocase='nocase'}, {@numtail='nonumtail=0'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'cpuset#'}}, {@euid_eq={'euid', 0x3d, r4}}, {@hash='hash'}]}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', r3}) 16:00:46 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 356.596841][T15814] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 356.850454][T15814] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 358.328059][ T3014] Bluetooth: hci0: command 0x1003 tx timeout [ 358.334182][T15101] Bluetooth: hci0: sending frame failed (-49) [ 360.408181][ T3014] Bluetooth: hci0: command 0x1001 tx timeout [ 360.414440][T15101] Bluetooth: hci0: sending frame failed (-49) [ 362.488206][ T3219] Bluetooth: hci0: command 0x1009 tx timeout 16:00:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 16:00:56 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) getpgid(0xffffffffffffffff) ptrace$peekuser(0x3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) r0 = creat(0x0, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xffffffc2, &(0x7f0000000280)='/dnket\x00'}, 0x30) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000680)=""/253) getpgrp(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) getsockname$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f00000002c0)) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) pipe2(&(0x7f0000000340), 0x4000) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 16:00:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_rfcomm(r1, &(0x7f0000000200)={0x1f, {0xff, 0x7, 0xfffffffffffeffff, 0x8d4, 0x5, 0x1}, 0x1}, 0xa) setxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x1) r3 = fcntl$dupfd(r0, 0x0, r0) r4 = getpid() write$P9_RGETLOCK(r1, &(0x7f0000000180)={0x1e, 0x37, 0x2, {0x2, 0x9, 0x1, r4}}, 0x1e) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000240)={'hwsim0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=0x0) sched_getaffinity(r5, 0x8, &(0x7f00000001c0)) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0x8, 0x1ff, 0x4}}, 0xfe6c) write$P9_RXATTRWALK(r2, &(0x7f00000002c0)={0x3bc, 0x9, 0x2, 0x1}, 0xfffffffffffffc9f) 16:00:56 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='syscall\x00.\xc9\xe8\xbe\f0\x14\x8c{\xe9\xc3\xea\x18aY\xd1\xbe\x8a\x19\xe7\x00V\xa5\xf3\x92%o\xcb/%\xc6O\xdc\x851\x15}\xd0\x86\x8c`\xd2\xa16V\x10\xbd\x83;\xf4\xe3\xe4\xf9\xc8\x86\x1e\x10\xd4\xf1F\xe6Y\xd5\'t\x8f\fE\xe9\x04\xb6\xb6aGgk\xbaT@\x06\xbe\xbd\xb0\xa4\xeb@9\xb4\xd2_\xa8\xb5\x98\xa8#\xfc\x1f\x8dhU\x05\x91\nY\xa4>|Z\x1a\xc5\a5\x90\t\xcb\xfeG\xaa\x82\xf4\xb3\x9e\xaa\x8f&:\xc5\xea[\xd6\x16\x84@\xeb\xc3}\xd4@\xc9\xa92\xdb\xecU\x1a\x8f\xfe\xb3\xb0U\xaa\xd5\xe0\xcav{2:;{\xb5\xe3\xbf\xf0\xd9\xdc\t\x0f\x8bN5\xd5\xc1\x14\xb7s\xfb\xb4m(\ry\xd1\xe8}\x8av\xc9\xef3\xd2\xe0\xfb\xfc\x15\x81\x18{X\xd3\x0f\x9d[\x00'/223) lseek(r1, 0x0, 0x1) 16:00:56 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:00:56 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x59, 0x0, 0xc2) open(&(0x7f0000000180)='./bus\x00', 0x4000, 0x0) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5) sendfile(r0, r0, 0x0, 0x8000fffffffe) [ 366.417575][ T24] audit: type=1804 audit(1564243256.061:156): pid=15841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir232160289/syzkaller.N2fwA4/222/bus" dev="sda1" ino=16989 res=1 16:00:56 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0xf9, 0x6, 0xc90, "e7915e3d23c98cce927454be853e03de", "0ebb1b8820496eba21cb5e22445d7611fb83b23f99f12b91c7cb3c728c3506c76f1cf22b14f311a3c929ec6f1e51e591ac51142907d3ecd405b35248fcc849a06fa44f38b8934dbb9327f2b4e71cc0c8abc6948380a63eb3ce8beeeff2576c4e907853fae4824c1282abb75a556b3bf30d25f7301d29e735d2d1484a7f01ac35a3b9a46bd1475f43f88e11e788ad428d27d834abda0571c96a314ec96d4768e849bd19fd0c893851b91f59ee8b83d2f6e7875f559ed79f16abf0b93b4565bdb2e4f819c3eaa44ff141fb1394adfed80a064a8f55457e59f45cfc115e4c35e384198e38fa"}, 0xf9, 0x2) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KDDELIO(r0, 0x4b35, 0x7fffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000240)={r1, 0x34, "42b5fa53cd15e6fd3f38563776f98432f0d2e0dad61daa8a58ddeaba6f73d51930cbebab1a56fea48e4cc3014b7dfe44cea03a92"}, &(0x7f0000000280)=0x3c) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f00000002c0)='^procmd5sumnodev..\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x20, &(0x7f0000000440)={'trans=xen,', {[{@access_uid={'access', 0x3d, r2}}, {@uname={'uname', 0x3d, 'trusted.overlay.upper\x00'}}, {@access_client='access=client'}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted.overlay.upper\x00'}}]}}) uselib(&(0x7f0000000500)='./file0\x00') r3 = getpgrp(0xffffffffffffffff) tkill(r3, 0x32) mkdir(&(0x7f0000000540)='./file0\x00', 0x80) r4 = userfaultfd(0x800) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000580)=@sack_info={r1, 0x3, 0xffffffffffff9531}, 0xc) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000005c0)={{0x1, 0x0, 0x80, 0x3, 0x5}}) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000640), &(0x7f0000000680)=0x4) openat$cgroup_type(r0, &(0x7f00000006c0)='cgroup.type\x00', 0x2, 0x0) ptrace$setregset(0x4205, r3, 0x1, &(0x7f00000007c0)={&(0x7f0000000700)="0f1c1a55b1e7eddf5b3c5f66fc7d091d1b3b9ad00ad7ec2c0992e9dff8519b65aebc389fe95935a72ecc6f415223103390bb156529aafbc788cbf01bd0075e4db1f0361a74f82ddc6d317b526fac042ddb18b7e2b625417f91de266047e82683bf72410285ee857367a85ff78b83d8a3c05baa8482365cb3c8f4925560904b6124cc120e49a61558185809ed1fb145dd3ce97c60f667474a88a0bdc6b3b3be6e533a36f34c26f74f8cf4", 0xaa}) keyctl$set_reqkey_keyring(0xe, 0x7) link(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000880)={0xa, 0x4, 0x9}) setsockopt$inet_dccp_int(r0, 0x21, 0x1b, &(0x7f00000008c0), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000009c0)={0xffffffffffffffff}, 0x0, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000a40)={0xb, 0x10, 0xfa00, {&(0x7f0000000900), r5, 0x100}}, 0x18) fsetxattr(r4, &(0x7f0000000a80)=@random={'os2.', '\x00'}, &(0x7f0000000ac0)='*!{vboxnet0wlan1ppp0cgroup\'-@wlan1^{\x00', 0x25, 0x2) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000b00)) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000b80)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xfffffffffffffffe, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x3, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r6 = add_key(&(0x7f0000000c00)='keyring\x00', &(0x7f0000000c40)={'syz', 0x3}, 0x0, 0x0, 0x0) r7 = request_key(&(0x7f0000000cc0)='rxrpc_s\x00', &(0x7f0000000d00)={'syz', 0x3}, &(0x7f0000000d40)='cpusetcgroup-\x00', 0xfffffffffffffffe) keyctl$instantiate(0xc, r6, &(0x7f0000000c80)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', '\x00'}, 0x17, r7) 16:00:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000880)=@newlink={0x48, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x14, @mcast1}]}}}]}, 0x48}}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000080)={{0xffffffffffffffff, 0x3, 0x9, 0x3, 0x3}, 0x5, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x1, 0x4, 0x8, 0x9}) 16:00:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1}, 0x0) r1 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x3, 0x40280) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140)={0x401}, 0x4) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e23, 0x9, @rand_addr="bcfd1d35f2bf30b73add908aae914e74", 0x34e}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @rand_addr=0x80000001}], 0x7c) [ 366.482725][T13194] Bluetooth: hci0: Frame reassembly failed (-84) [ 366.490400][T15847] Bluetooth: hci0: Frame reassembly failed (-84) 16:00:56 executing program 1: fanotify_init(0x63, 0x1) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x2714, 0x0, &(0x7f0000ffe000/0x1000)=nil}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=0x3) 16:00:56 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 366.557587][ T24] audit: type=1800 audit(1564243256.081:157): pid=15841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16989 res=0 16:00:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = semget$private(0x0, 0x2, 0x8) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000000)=""/212) ioctl$TUNSETCARRIER(r0, 0x400454d1, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) [ 366.649193][ T24] audit: type=1800 audit(1564243256.131:158): pid=15841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16989 res=0 [ 366.661014][T15959] netlink: 'syz-executor.5': attribute type 20 has an invalid length. [ 366.782324][T15959] netlink: 'syz-executor.5': attribute type 20 has an invalid length. [ 368.488145][ T5] Bluetooth: hci0: command 0x1003 tx timeout [ 368.494915][T15101] Bluetooth: hci0: sending frame failed (-49) [ 370.568079][ T3219] Bluetooth: hci0: command 0x1001 tx timeout [ 370.574594][T15101] Bluetooth: hci0: sending frame failed (-49) [ 372.648427][ T5] Bluetooth: hci0: command 0x1009 tx timeout 16:01:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 16:01:06 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002000)={0x3004, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, @str='\x00'}, @nested={0x2fe8, 0x0, [@typed={0x3c, 0x0, @binary="3ac53ba5b05a8300350e20825d9273e432733d4a8eb6c7bde24d36360563d078e719e5dbca3d77729cb9956adfa84fad17e1dc0c39"}, @typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @fd}, @generic="28814cfda75b6dcec883e167f531bf0f6fd6614e2d47a67ec1998617c8fd03c201e939fa7e670db1ba45e98ebfb2efaa6e0ebc603f8ced3e737718ad5b07d9601f5a08f26e8139753e8832777d9da1ed9a98f40e99e9282d24a45a2ed7fbda19b2120e04aa01c0761cf1fa0bcab2717aa11ad0593e673ee5cc37d0dba7744e9da14d", @typed={0x1004, 0x0, @binary="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"}, @generic="446108dfb080dfa16eec36aeac1f2b0ed08ca652b5fba8f5d79646660248730da7539f083cb8cc65fc0ee01c6f36443ab42f44578e7ca1b29b96e5b9a522fa5d4fad564c304c7d8bc680a32607e1e87a1b73502f8b5dd5c972a8eeaf56920066e34f09e45dfbe1143e573c3471dace72180fe30ff2d0b9363b4de1eea518790d5e329a0ef95c47c5596e07ce5db3d830720f7696fb074db0ff91b1889a21174f5e99854c819bd7a4f7c9d9756c9ef649353fc1a7a5e243533ae5667bf8ab8317bbc915cec9ea0dbc3905fda75c032849203fabed96a7d254227c038f58245290e5fc4529dd7bb6c8cc533686f1901a9da88559ebc7f0c1a3ab07b0ef72a592d72c724284ec6876958cf81ae8b965e35e409f8aa37e8e0765eadc0925f8c499cfad698e24ddbd89d8925967c9c5c05214f6262efc6c147286887f5bb2eff4b79caa0e441c7da05eaccac980d7d33f4797bafa947c58dc84d88e34ca463bfd1e492f7e98e1a6ed29c8e372cd7e930a214996ef393edce8ef6e255abf93045520d2007ac46e15980d058bfc7892a3a62ca36bc23eda59fbdc7dbc5f27d2960dbfed74abbdba87baf65d51f893ddc520c0ed03d9063fe66ef4a7a68c7b6b544ffc142e5e52fdf006c73e72a7478e55b7b5aa6a2b151dfc18eedfb338578493e9c4004abb33ab80c87cf14ae07834ead0a00c350025622924b9eab1edf50672ac557a6f116c1b3efb5be3b3be1f30dbd67646d516ca734b2ad1d2ee6a04d26fbdc7c4a60301b3314ee2df2bf068557726ff87ec879d7390197c558c1f26e134ce5a9510547c02b0b96a24cfafdad8d277cc5cdbfd5de711ad9d5169e8ac5c8061868cf9c3d944fd387ef3c4c5e27766660befd6d5d04edd4fe3005e2ad8cfc60718c89c36f775f7a94eeb7d05762fc9488fd40244d153eab64ba89b70b51db59d047b50c20e6e27d687a2fd5f852fb47e88da61c4db49175d8368063fa7ea70c686a43c0cbe633bc88333fee3c0ed4523c11423116e45ceaa3c028b5496eda6cfc414dd04390e7a44dd474ebb06b4386c19360fc0512eb3cd787c82fb6912560220fea5bb4da7fd00c9b0b48b6261a469f68aba30b911fe824f96c9193a18dc5fee310feae5935e59e70ad7eb1160d69807e80352f1985a03a2045c2f7fc07ac9b7e58331b17aee47e248a9c3a518714f6c021a6a3f44f2725d152b7f9f4c7d644ff8ce1d814a508743294a84d065c163bfc62b836658d3059d68cfceebdb3cff35b95864faae0b6727755ac5f39e90181b0feecb32648a692fd66bd8b7662381e53ae246614ef3496315721b48885dfc35be75e43f674babae15d6c8a5c02cd2c7b759f9a68136412567dad3bd3bf591101d93764b9a4c2b37a88dbe76c54265f5c18fe77f84dddbafc8fe03e73993d37230d61bdf930a56c199a6758e9cc2f75a8de2cd7bd9e8aa2bca7516d92e3216f023d8abfa3316f2a7703c2ff6b7b0a17d24e90c2eaa17c5c0c23d10a88fcf9109585d2508e1ac4c399b422e70a5499a9851a337fe7160d7f5ece5d4636a911ad5ece5a893da9fa73193359ec918c4c6c9db1487857d3f4e5611d34baf7a23f3aa240e9990cd74215a31934e573f22892866ca2d3798a6b5e5c959382462013c862241f5d78ac887bcb39480a7286deaae2c636bcde31df48eff8645b089deefddc0373f2d72fb909acdfd1e78c8e9e3892e814f293d9fc99f73dbb93f0c2738c29d8d294784d019428391b3a384420e5aad538bec42449a17b4ae04ed3f0dd23af706603a6a3a28844b39b4219cd7974ec2f3e58a066a91f8bff92ca4421a4ad1bb52bd1692366c1231091d0149f4b9ba2d30960f35fb9925a553fd1c3cda72b6a0365851fc5554c84b16d4fd4f5e93a6e75d973383258a94885649e3a81263d0a811f465b23fd95378e84ee6b96db1187ba7325091da6858e51e98ff6e82bb51830bce9884ff8fe41f2b0e638cda1125ba0ff42def275b2b311ca5af2dd829712bb9bbc5919c48ba41f9d9f99e2cb8210a54f270c6d1aacf65773a981877d9edc896a2afbf567b0aba7f25922eee2de8acddb9897efa3fb9e551ce83392ba9aab4b2e8a7fd423d326e42c7947c0b5df21a0287d853ebf88e9c488552339d5e1d497886ef76ac7370828d666b10c0f20d1d3d67ae2db39e3ef767813c7e980d55c4a7324dd5b218a7cf889fedd115e2022ab5f83f4dd45bd3ed05c758f7da05d64ea37c315b613242b363c9c25fa2cf334588b6dc2fd8041cc74ffe0e9022d0c47d033c2a3ed9e7243bfde5e6a59f6cf0b2768cce4e5c6aa4c88fc17c19d05ed5f027a266668382d89415154fb00fffe03a903a79b04abf522230d39d321de36a82df17d5d93b61f76e608c4af9c7707a1463b82d266891359f155d438ab802a507b3e8cc0f6e023e050340535ddf41b4024f1c20ef0eac8cdd052fa0b5219851f7456e87fe9f54704d33a80ea6c3531074e1e9804db227078ca7662996b8927f3310da11a0daa7ac231df0adbf1e4b8b80b445690d6b3a73f7c73ef049009eb3445d6bd9aabe4e6b3c15df4a2662213bd713d16fed9f518c8388c8ab1409d7808f54fd7c0f6616de64a1a94b9b0534b229d98fbe75f578e7f0b75108cf32dcc739a5c22017585c4f567b709ae5277193b7628d4294cfd2a61d67a22700f07128426f8d1f04ba6f9cade6910b71d28b8b058736d862ffa8272b9132512922c6a01692e236ce04120b69f62d22fcc6c4cbc71a139afa63d0e94db744355c5c98198c09c86a6d00bb091eedfc16b13cd17d4d3a0379a778c6e85c9d03aed51830c5c0d0e8a01f7ff3ccb7eb69bb7ac6475360eb735daf5aca868df2e3d5e6d0347fc930a77b1c966c680165a004554fd99dd42681a1e34baa0d235db50925980b1421226405c08875f4f21c596cde77e84a91fee6e9d4e97833bc0a991975d00cd6eec0bbceb22ad2c0ce4a1c44b772fcf282172d506708f5b227eaf4dce9fa227e2ab0c9066be966fa74572361c9c23ff904a054f0d4b59654b7d8b8ee33f27d353beab063f5ad77a12fbc55743ce3f39cdd3aafdaf3608d5da2753e88e677a9d92f81b8923995425b8bf55491f3f9560c28cc6f110ed221da5a6704be45cd8b41ce03445174e2870be7329dead5c84d4a8f19d717c6d7a48499e06a15e70f11c2a4efa069fc29505bfe72ecb4bed5f86b56fa4998eadfd115fc8b899cd85e30ca3278c04c99105139e71a3cdd9d574a48e2815ecde3aecc0c7d5ea92bbd57f4e150bcf3900fe689af1063b013e8674d0e643d4253136d1553fa21bc0f8e77c8df90ff86e588285ac567641840dcc9e081b8d8410981d9325e673573b3fc4af130025d28ce2b0fb418cf1798b3fa3485a3326f19d671a65c5dc2b2476c62677684566f7affaf2221d26a9622de50552e55490c599d02463afa2af768697e146382f0dbb7bf410a3ff2fe4bc1da8d1b29d3b3bf402d88b17c3313ddfd23c3d0c18fb2ebed86696b227755ca01eae6b66142a35b46d9214688a5738a5a9eda46f18fba1c38dcd13574526a2aebdce8729b1749dbc70369a5517ced30c316d685750ffe3830189cfdeb3a0c2aad86639c29f8e44613bbb069fa9ff02b4f993a3570d752abebcbce9fb8eafa79755a678fd5411b54359a08d5cee64c1412862c192d0dde4cde62d30639cc3e64dc37d5d5ca29cb035d353f53afe8b84b3afe101049a9b15f535da0ed4233c40739c902d6e7c55683fe0c19d51cd7768520be4c0648a7c59775da5ee69b4e7a1c1e25e34bb207823d594ee92756dddd03b098ae5d2b1c1505db0cc8d5060844473b1fdb7a06e69a1e2c1fc736bd66ddf327aad5b09954837cc5ac16eeacf18a363fc7e603c9c53006dcc13c00bfda4f0eb934dc64ec9c2c54be3c8698e8b861c8fe9681cee2cfca69f72c3c5f9316c7a9b3d253914bca99016d0098ab00dd7141c2b7102c919edb6d493feabed745a111e9f353eeddf7fc2897879d3875e2d18e152462877f00f029c3b2a3722451ca648f5c6a79517a31bcbd32c45931cc5838c8d15b2585830828e5c842a41c3657c800b496069ffda18b50f646918c9602f528d7565b592c2b0f2d370c6cf9c0926d32f721f6b7378249140df2a2842d3b279909259a14ade408ea88477339956f372bad9cac2b42070823e27744edbd42f6448c618fdee3f5560e5ce5fa336d3db8fa3769cdaa0843c3ec572e7b4f8c7e75a622de5a53cbc39d523652724c6fa3d1a3a12e5c872035aa068ce45dd3297072ec09890bba36a886f1c182c09312afca327caae551d3aa822838367b529162888440ed7d64ff89da2ef5b215de13ba6f658587d1bc438ac9f3b3aa0d362d10a3fbd0a9b43081534301b9ce26dde86c2b2cf06b53173a1d280694e817c48e7cb64177cf05919b55f8bf27d715d51efd1b4f9f56d13483bb394081c62dde2960054e6451bfff8443b547016041307dc2518e620cc632abd817dbfbd6c457f33a07c89a86f738d38bb7e41de3c089d0414dadc52353a7f3f9c36bbd8f814078f94b6e018367d6f646643e6335262ca5087df4559dab39904248b4ae49282ef7757782fc0d5193008c42cf052c4a52c6129e33f329270119633977b11dedc1c68bc2f687ece164095d8ef9efb33a3bb02d200a9b66b528cf3b8492b99689c9d759eaea0ef6b0cbebf1d7a1ef6ff3e22f848a3359f186d1e77b4e8645e45f06694af9364b885197ec49678a30b369e7853bc9d7d83496505dd5127f8852b7de3eb06bc2aebe4e22e2a4155542f47b2e8c382f8895081bd02a9cc3f958d3d8f3465fbfd35fcce76f10f004782b409d73803a49f8a2522fb7fbaddb3de439d523020cd876f0e98cc723d59bca7e6dfa162158c9643313d871698f49eaa877148de1090a1e08eba8d6b01cde8cae62acb79841fa00050823647881975b84f4c2bd2e9a31544bb0f7d764a0707fc01a43e8c065a76ea3f3c588154aa150c1a8b0788dedaca8598d3dd4e6214dc2bf25578330feb76f933417246b1280707133a1f87ea671ad6c2a45981d2649e078b4caf70790532154dba0b90faedd2ecf6bbf8060a52bac12b444529585ce85d9b831cea93aee9b65a81071cc9750f36f8d879258f828d261e3eeccf9e4c7d40249e5c98d09e3e76d931022cd64cd4d8cbe470d9115bc7075126d1a5904cbb9ac6db2ebadb5c4455a30882afad9e4b8223976cb83233519a25683b10b3eaf950b0b16bd902e38c8e14401c6e54cdb30b296328992d89a403338a473c7624f71c1be4c338afd58a974d91f2b91e95d6052db41d5189e905e51c407a7a82dc998bcc525407f8029936112e3a2b07c7b6b5685713722c82d41f59b2c9814cd2ebe33823181badb9a72cbac3531ceaa8d0b514166cf7d7b6db8f2fb0a0e6ad050e3a6985f4601fb9bc64b1764d5db66dbf729a0e2c16c7e12502fa56fa145517de35b1abe8593ffd91fd53ab65eb5cefc80a2c779f85a6c317588460d19cf5b913fa7aac838c07902c439170bbe077d76806a8b12bd2378f3f1de1e5efb13a405bdbd80a176921b481561fce35495a88b119d0b731b36a7eb10ceabc775746164146c8c20fc064cfb0d4e38a7e1861dbd37e7c2ea556efbf0e7872f67e36bfaa11e242ec5bfc1c1602f484e08cf108b5ca84499b1929249d0b8755b492f1c966188a1ef4fc10f629632b1817c0254846aaed191e9274c57f61a7dedd906774b46fad9509b9390eb2c6055cd0c95285eb8d735480f128ac4faa35d7383e54dad", @generic="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"]}]}, 0x3004}}, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10rist\xe3c%sgrVid:De', 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x101440) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x2, [@dev={[], 0x1e}, @dev={[], 0x11}]}) 16:01:06 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:01:06 executing program 5: 16:01:06 executing program 0: 16:01:06 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1}, 0x0) r1 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x3, 0x40280) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140)={0x401}, 0x4) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e23, 0x9, @rand_addr="bcfd1d35f2bf30b73add908aae914e74", 0x34e}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @rand_addr=0x80000001}], 0x7c) 16:01:06 executing program 1: 16:01:06 executing program 0: 16:01:06 executing program 5: 16:01:06 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:01:06 executing program 1: 16:01:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 16:01:06 executing program 5: 16:01:06 executing program 4: 16:01:06 executing program 0: 16:01:06 executing program 1: 16:01:06 executing program 5: [ 376.948148][T13194] Bluetooth: hci0: Frame reassembly failed (-84) 16:01:06 executing program 4: 16:01:06 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:01:06 executing program 0: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/load\x00', 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f00000000c0)="11f6", 0x2}], 0x1, 0x0) 16:01:06 executing program 5: socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x18) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x4, @remote, 0x6}}, [0xd36, 0x8b74, 0x8, 0x10001, 0xc3eb, 0xffff, 0x1, 0x2, 0x7fff, 0x100, 0x100000001, 0x4, 0x80000001, 0x4, 0xfffffffffffffffd]}, &(0x7f00000001c0)=0x100) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000200)={r2, 0xff}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0xfffffdfffffffffc, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) 16:01:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0xc0, &(0x7f0000000040)="0e346ccbe1a85fe571131d65fd2643a49d581cf53ff2285401a20b47f3407c5bd5d2a4fb0d87fd51ae4de6dccc72d1e19078e8ca60a80486c7ac5ad8e4dbfdfdce57f23ddc7ebee33218b03c5318eb0b405befba73894f8572d69b5ae37a5d9b6e1bbb634224755553d2b3bac26053abd4283006", 0x74) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a6273000000000000000000000000000000f9"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x0, 0x0}) 16:01:06 executing program 1: r0 = socket$kcm(0x2, 0x200000000000002, 0x73) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3, 0x208000) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000200)={@empty, 0x0}, &(0x7f0000000240)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4002020}, 0xc, &(0x7f0000000700)={&(0x7f00000003c0)=@getpolicy={0x340, 0x15, 0x200, 0x70bd2d, 0x25dfdbfe, {{@in=@broadcast, @in=@multicast2, 0x4e22, 0x9, 0x4e21, 0x7f, 0xa, 0xa0, 0x0, 0xdf885eed06ebe0e9, r2, r3}, 0x6e6bb7}, [@algo_auth={0x88, 0x1, {{'rmd256-generic\x00'}, 0x1f8, "6ff388e864e345b8304425f8536acce1680bc339a744975872928547237fe3725457bbc28431f16a030e7f5ec82c999a03813771630dfab06e14714880dbf7"}}, @migrate={0x30, 0x11, [{@in6=@mcast2, @in=@broadcast, 0xff, 0x6, 0x0, 0x3501, 0xa, 0xa}]}, @algo_crypt={0x84, 0x2, {{'ecb-aes-neon\x00'}, 0x1d0, "68fed13af43c6434590cce3a40ad8744cd25aaf398a8f9aee49dc0c06f0aadbc9925411d7d1526a910580dfc28a51ba1f507b09e91a1522bd849"}}, @algo_crypt={0x50, 0x2, {{'chacha20\x00'}, 0x30, "549a6db8a163"}}, @coaddr={0x14, 0xe, @in6=@local}, @mark={0xc, 0x15, {0x35075c, 0xffffffffffffff00}}, @algo_auth_trunc={0x130, 0x14, {{'streebog256\x00'}, 0x710, 0x3e0, "399281b6e237d733d45500af12a2f02cb27672e5c1e8343912a555f9cbe45c5adb8a1f1d66f0e5133d65c44b2b32e4392ea75d834d0f90614934a4f7a5d827f246d4859bad8462dde060cf699b1f2c206755064751f54ae5d6dce898f80b4a6bc5a237c8f34b46c9d2c64bdf11917f327304eb4e77a9d6d67e267dc685eb8a97e58dede95f6063c03b0a4ea323d00857ba9be5715e0e45a842360048bd4753547c89a42f001f91839644a9fc3ed3e231e01429ab7ccdd9ba506595557cb1d7d2c2d2d5ce3e5e4ce1ea3f46609afcfb6d76beb3e929e57087bee14ba49e6ce770aa1f"}}, @extra_flags={0x8, 0x18, 0x5}, @mark={0xc, 0x15, {0x35075b}}]}, 0x340}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000180)) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) [ 377.242379][T16029] SELinux: failed to load policy [ 378.968070][ T5] Bluetooth: hci0: command 0x1003 tx timeout [ 378.978554][T15101] Bluetooth: hci0: sending frame failed (-49) [ 381.048106][ T5] Bluetooth: hci0: command 0x1001 tx timeout [ 381.054243][T15101] Bluetooth: hci0: sending frame failed (-49) [ 383.128095][ T17] Bluetooth: hci0: command 0x1009 tx timeout 16:01:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 16:01:17 executing program 4: r0 = socket$inet(0xa, 0xa, 0xc6dd) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x3b9ac9ff, 0x0) 16:01:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x6, @remote, 0x80000001}}, 0x10001, 0x40, 0xfffffffffffffff7, 0xd3, 0x100000000}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x7}, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) 16:01:17 executing program 5: r0 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) keyctl$set_timeout(0xf, r0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x82000, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000040)=""/193) 16:01:17 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:01:17 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r2, 0x0, 0x5, &(0x7f0000000040)='ppp1\x00', 0xffffffffffffffff}, 0x30) tkill(r3, 0x11) sendfile(r1, r1, 0x0, 0x8800000) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000180)=0x8041000) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@bcast) 16:01:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 16:01:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6a2f5d0023f47bb711415a891b0f018b54f3"], 0x0, 0x12}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffd) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0xfffffffffffffffc, 0x0, 0x0, 0x2000, &(0x7f00002ad000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 387.544999][ T24] audit: type=1800 audit(1564243277.211:159): pid=16167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16999 res=0 16:01:17 executing program 5: r0 = dup(0xffffffffffffffff) getsockname$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@local, @empty, @loopback, 0x1, 0x5, 0x8, 0x500, 0x2, 0x100000, r1}) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00', {0x100000000, 0x9, 0x8, 0x2400000000}, 0x20, [0x800, 0xe000000000000000, 0xf940, 0x3, 0x9504, 0x6, 0x4, 0x400, 0xd8, 0x5, 0x10001, 0x7fffffff, 0xfa, 0x1, 0x1, 0x226d, 0x35e, 0x2, 0x4, 0x1, 0x1, 0x9a7, 0xffffffffffffffff, 0xfffffffffffffbff, 0x3, 0x80, 0xa000000000000, 0x8, 0x81, 0x8e, 0x100000000, 0x1ff, 0x4, 0x7fffffff, 0x898, 0x9, 0x0, 0x0, 0x401, 0x3f, 0x1, 0xffffffff, 0x5, 0x1de, 0x5, 0x3, 0x6, 0x8, 0xfff, 0x5, 0x100000000, 0x65e, 0x9, 0x3, 0x100000001, 0x3f, 0x8, 0x7a, 0x9, 0xffffffff00000001, 0x2000000040000, 0x8, 0x2, 0x2], [0xffffffff, 0xfffffffffffffffe, 0x5, 0xfffffffffffffffe, 0x893, 0x7, 0x100, 0x28e5ac4b, 0x100000001, 0x5, 0xfffffffffffffffa, 0x9, 0x200, 0x3, 0xffff, 0x13d, 0x2, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x400, 0x78b, 0x6, 0x479, 0x3, 0x1, 0xfffffffffffffffe, 0x2, 0x92, 0x6, 0x6, 0x1, 0x7, 0x400, 0x3f, 0x100, 0x9, 0x7, 0x5, 0x96, 0x79e84b12, 0x7, 0x3d08, 0x3, 0x5, 0x0, 0x3, 0x0, 0x0, 0x101, 0x3, 0xffffffffffff0633, 0x4, 0x2, 0xccd, 0xffffffffffffff81, 0x64125d5d, 0x644, 0x1ff, 0x6, 0x400, 0x80000000], [0x0, 0x4, 0x100000000, 0xffffffffffff8001, 0x5, 0x9, 0x1800000000000000, 0x4, 0x8, 0xffffffff, 0x9, 0x0, 0xffffffff, 0x2, 0x5, 0x8, 0x68, 0x40, 0x6, 0xfffffffffffffffe, 0x8, 0x9, 0x9, 0x80000000, 0xf178, 0x5, 0x8000, 0xfffffffffffffffc, 0x9, 0x9, 0x3, 0x7f, 0x2, 0x7fffffff, 0xffff, 0x2, 0x100, 0x6, 0x7, 0x80, 0x3, 0x2, 0x2038, 0x0, 0x1f, 0x2, 0x4, 0x1, 0x5, 0x80000001, 0x9, 0x7fffffff, 0x9b, 0xfffffffffffffffe, 0x9cd, 0x7, 0x1, 0x4, 0x401, 0x10001, 0x5, 0xea, 0x1, 0xffffffffffffcc0a], [0xffffffffffffffc0, 0x1f, 0xfff, 0x5, 0x9, 0x2, 0x2, 0x6, 0x40, 0x3, 0x1, 0x7fffffff, 0x4, 0x100000001, 0x7, 0xfff, 0x7, 0x2, 0x3, 0x4, 0x8, 0x4e954df2, 0xfffffffffffffffd, 0xfffffffffffffc01, 0x5, 0x101, 0x3, 0x6, 0xe0, 0x80, 0x4, 0x9, 0x3, 0x4, 0x200, 0x7, 0x8001, 0x1000, 0x400, 0x8, 0x6, 0x6, 0x6, 0x9, 0x80000001, 0x8, 0x10001, 0x6, 0x5, 0x8, 0x7, 0x6, 0x405, 0x8, 0x5, 0x100000001, 0x101, 0x59, 0x80000000, 0x1, 0x6, 0x100000000, 0x8, 0x8]}, 0x45c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$unix(r0, &(0x7f00000005c0)=""/166, 0xa6, 0x1, &(0x7f0000000680)=@abs={0x1, 0x0, 0x4e23}, 0x6e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ioctl$TIOCSBRK(r0, 0x5427) 16:01:17 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:01:17 executing program 5: mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x18040, 0x88) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00', 0x40) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000100)={0x4, [0x9, 0x3107, 0x1, 0x7]}, 0xc) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 16:01:17 executing program 0: r0 = socket$kcm(0x10, 0xffffffffffffe, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x100) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="2e00000023008163e45ae0870000003f060f0000000000bc4cc91b4dd65b2f0580cb7023f52a556d1c958c00ff00", 0x2e}], 0x1}, 0x0) [ 387.834608][ T24] audit: type=1800 audit(1564243277.501:160): pid=16288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16999 res=0 [ 389.688223][ T3014] Bluetooth: hci0: command 0x1003 tx timeout [ 389.695482][T16259] Bluetooth: hci0: sending frame failed (-49) [ 389.848102][ T3014] Bluetooth: hci1: command 0x1003 tx timeout [ 389.854266][T16259] Bluetooth: hci1: sending frame failed (-49) [ 391.768142][ T3219] Bluetooth: hci0: command 0x1001 tx timeout [ 391.775069][T16259] Bluetooth: hci0: sending frame failed (-49) [ 391.928142][ T3219] Bluetooth: hci1: command 0x1001 tx timeout [ 391.934252][T16259] Bluetooth: hci1: sending frame failed (-49) [ 393.848241][ T3014] Bluetooth: hci0: command 0x1009 tx timeout [ 394.008072][ T3014] Bluetooth: hci1: command 0x1009 tx timeout 16:01:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 16:01:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") prctl$PR_TASK_PERF_EVENTS_ENABLE(0x15) 16:01:27 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) mq_open(&(0x7f00000000c0)='cgroup.subtree_control\x00', 0x40, 0x0, &(0x7f00000001c0)={0x9, 0xffff, 0x69, 0x8, 0x2, 0x8, 0x3, 0xffffffffffffff01}) 16:01:27 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:01:27 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x40) r2 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3, &(0x7f0000000040)=0x80, 0x800) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000100)={0x8, &(0x7f0000000280)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}]}) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000480)={0x0, @in={{0x2, 0x0, @loopback}}}, &(0x7f0000000540)=0x84) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 16:01:27 executing program 5: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x1d, r0, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) [ 397.806714][ T21] Bluetooth: hci0: Frame reassembly failed (-84) 16:01:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 16:01:28 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:01:28 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, 0x0) r1 = userfaultfd(0x0) ptrace$setopts(0x4206, r0, 0x401, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000002c0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x204000}) 16:01:28 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000240)={'icmp6\x00'}, &(0x7f0000000280)=0x1e) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)=0x34, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='veth0\x00') r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.u'}, 0x15) 16:01:28 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1400"], &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={r1, 0x5, 0x1000, "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"}, 0x1008) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec6}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0xa6fe, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:01:28 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001100)={0x0, @in6={{0xa, 0x4e21, 0x4, @empty, 0x8000}}, 0x1, 0x3}, &(0x7f00000011c0)=0x90) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001200)={r1, 0x6, 0xfffffffffffff800, 0x6}, 0x10) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000100)=""/4096) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e) [ 398.422379][ T21] Bluetooth: hci1: Frame reassembly failed (-84) [ 399.848112][T11101] Bluetooth: hci0: command 0x1003 tx timeout [ 399.854243][T16259] Bluetooth: hci0: sending frame failed (-49) [ 400.488043][ T5] Bluetooth: hci1: command 0x1003 tx timeout [ 400.494157][T16259] Bluetooth: hci1: sending frame failed (-49) [ 401.928171][ T5] Bluetooth: hci0: command 0x1001 tx timeout [ 401.939111][T16259] Bluetooth: hci0: sending frame failed (-49) [ 402.568097][ T5] Bluetooth: hci1: command 0x1001 tx timeout [ 402.574305][T16259] Bluetooth: hci1: sending frame failed (-49) [ 404.008269][T11101] Bluetooth: hci0: command 0x1009 tx timeout [ 404.648139][T11101] Bluetooth: hci1: command 0x1009 tx timeout 16:01:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 16:01:37 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:01:37 executing program 1: r0 = socket(0x4000000001b, 0x80007, 0x0) bind$inet(r0, 0x0, 0x0) 16:01:37 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0xff2c) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000100)="3647a5a50bd96b5ba36c737ba26e72da2ebfa04e7fd6520b04bd15b7f95a2eef3e204285d1f1aeec586ef28361af2fa7bb256720bbd04be50f6e536eef7590a24d50a5db27dc6d83ced2da01fd9cb4e11e6df5b201ba3bd7522973416b2df4022240d0d95ef50026a070e5567e0158d45c52989007e9420dc2faae2966df6f2a6197f9d10f5a409ba55216f3ea4fdadb5b30d489082fd325e27d54bf8d50dc767754e50dcd84626f76c8f033e2cdfdfd6c357ab28cbda943f87d0a79ef3865ab6f05d1ca81c23a8a") bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000000)=0xffffffffffffffff, 0x11e) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0xf}}, 0x1c) 16:01:37 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) setfsgid(0xee01) r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7dc, 0x101000) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) mount(0x0, 0x0, 0x0, 0x3, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) write$eventfd(r0, &(0x7f0000000180)=0x1, 0x8) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="7562693a2f736730062f8fd30a2c1d7811630b45e4033e26655dffbf6007e67b080a01d00d64087a4ac9277a7798b3bfefd6a4db66e87a3104d15520fc5de5e7900f3b0e6792ada6933c88c680b32b9271a3e109dd53392330f827588e347e90b5549312189fc0114da5762682e5d5d1b239f9fa7ba1acd1535456fed96c03b15f44f15e"], &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='ubifs\x00', 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x18) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="2b703f36f3dcf214693c46c9661b17b969647320"], 0x6) init_module(&(0x7f0000000100)='md5sum(\x00', 0x8, &(0x7f0000000140)='cgroup2\x00') [ 407.972798][ T24] audit: type=1400 audit(1564243297.641:161): avc: denied { name_bind } for pid=16364 comm="syz-executor.5" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 16:01:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101040, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000040)=[0x1], 0x1, 0x3, 0x401, 0x0, 0xb6, 0x5, {0xfffffffffd43fd48, 0x39, 0x7, 0x1, 0x81, 0x1000, 0x200, 0x0, 0x1, 0xffffffff, 0x2, 0x1e3d, 0x9e, 0x7, "2191a8fc836416c118ab9d471597db4de68c20a16f0d4ac82a43a175a5720771"}}) r3 = dup3(r1, r1, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sched_yield() connect$unix(r0, &(0x7f00000bc000)=@abs, 0x6e) [ 408.030829][T16361] UBIFS error (pid: 16361): cannot open "ubi:/sg0/Ó [ 408.030829][T16361] ,xc Eä>&e]ÿ¿`æ{ [ 408.030829][T16361] Ð dzJÉ'zw˜³¿ïÖ¤Ûfèz1ÑU ü]åç;g’­¦“<ˆÆ€³+’q£á ÝS9#0ø'XŽ4~µT“ŸÀM¥v&‚åÕѲ9ùú{¡¬ÑSTVþÙl±_Dñ^", error -22 [ 408.091921][ T24] audit: type=1400 audit(1564243297.681:162): avc: denied { node_bind } for pid=16364 comm="syz-executor.5" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 408.133334][ T21] Bluetooth: hci0: Frame reassembly failed (-84) [ 408.135347][T16361] UBIFS error (pid: 16361): cannot open "ubi:/sg0/Ó [ 408.135347][T16361] ,xc Eä>&e]ÿ¿`æ{ [ 408.135347][T16361] Ð dzJÉ'zw˜³¿ïÖ¤Ûfèz1ÑU ü]åç;g’­¦“<ˆÆ€³+’q£á ÝS9#0ø'XŽ4~µT“ŸÀM¥v&‚åÕѲ9ùú{¡¬ÑSTVþÙl±_Dñ^", error -22 [ 408.154203][ T24] audit: type=1400 audit(1564243297.761:163): avc: denied { name_connect } for pid=16364 comm="syz-executor.5" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 16:01:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 16:01:38 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:01:38 executing program 5: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xf, 0x4, 0x4, 0x100000001}, 0x3c) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xfffffffffffffff7}, &(0x7f0000000080)=0xc) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000140)=0x200, 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r3, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={r3, 0x7}, &(0x7f00000001c0)=0x8) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00005f1000)={r1, 0x0, &(0x7f0000b88000)}, 0x20) 16:01:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0) write$P9_RCREATE(r1, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x40, 0x2}, 0x3}}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='net/mcfilter\x00', 0x0, r0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 16:01:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x80, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r1, 0x0, 0x16, &(0x7f0000000200)='-cgroup^vboxnet0user-\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r1, 0x0, 0x16, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', r3}, 0x30) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904014865160b00010005000000000000190e000600000000010000000153b4", 0x2e}], 0x1}, 0x0) [ 408.630501][ T24] audit: type=1400 audit(1564243298.301:164): avc: denied { setopt } for pid=16390 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 16:01:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x80, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r1, 0x0, 0x16, &(0x7f0000000200)='-cgroup^vboxnet0user-\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r1, 0x0, 0x16, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', r3}, 0x30) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904014865160b00010005000000000000190e000600000000010000000153b4", 0x2e}], 0x1}, 0x0) [ 408.720421][ T21] Bluetooth: hci1: Frame reassembly failed (-84) [ 410.168068][ T5] Bluetooth: hci0: command 0x1003 tx timeout [ 410.175234][T16259] Bluetooth: hci0: sending frame failed (-49) [ 410.728102][ T5] Bluetooth: hci1: command 0x1003 tx timeout [ 410.734995][T16259] Bluetooth: hci1: sending frame failed (-49) [ 412.248115][ T5] Bluetooth: hci0: command 0x1001 tx timeout [ 412.255689][T16259] Bluetooth: hci0: sending frame failed (-49) [ 412.808035][ T5] Bluetooth: hci1: command 0x1001 tx timeout [ 412.815486][T16259] Bluetooth: hci1: sending frame failed (-49) [ 414.328091][T11101] Bluetooth: hci0: command 0x1009 tx timeout [ 414.888169][T11101] Bluetooth: hci1: command 0x1009 tx timeout 16:01:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 16:01:47 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:01:47 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001840)='/dev/input/mouse#\x00', 0x2, 0x410000) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000001880)) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r1, 0x101, 0x0, 0x0, 0x0) 16:01:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0) write$P9_RCREATE(r1, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x40, 0x2}, 0x3}}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='net/mcfilter\x00', 0x0, r0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 16:01:47 executing program 0: syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)={[{@overriderock='overriderockperm'}]}) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @broadcast, [{[], {0x8100, 0x6, 0x0, 0x2}}], {@canfd={0xd, {{0x0, 0xfffffffffffffff7, 0x8, 0x7}, 0x3b, 0x1, 0x0, 0x0, "0b3fb8dc99d51e4f348d092c6be983b1028fec2c374a8970bfb39d3c2becbb7fb130886016e3832d534324c57939b423762adb1e759583440eb70596c4ba941e"}}}}, 0x0) 16:01:47 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x100000000, 0x30}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r1, 0x1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x1}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x200000000000009, 0x4, 0xffffffffffffffff, 0xffffffffffffffff}, 0x3c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r3, &(0x7f0000eed000), &(0x7f0000b88000)="03"}, 0x20) [ 418.286239][T16419] ISOFS: Unable to identify CD-ROM format. [ 418.331702][T13194] Bluetooth: hci0: Frame reassembly failed (-84) [ 418.417102][T16419] ISOFS: Unable to identify CD-ROM format. 16:01:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:01:48 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:01:48 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10040, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x26, "822efcf573f37b9fbd9ef8dd6635e197cdaaa041082f5ca3c89b5c93a924e20e6139b739b51f"}, &(0x7f0000000140)=0x2e) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x5, 0x1, 0x4, 0x6, r1}, &(0x7f00000001c0)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='\x05\x00\x00\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 16:01:48 executing program 5: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) bind$vsock_dgram(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @reserved}, 0x5) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000040)={0x1, 0x0, 0x6, 0x6, 0x6, 0x4}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 16:01:48 executing program 0: syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)={[{@overriderock='overriderockperm'}]}) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @broadcast, [{[], {0x8100, 0x6, 0x0, 0x2}}], {@canfd={0xd, {{0x0, 0xfffffffffffffff7, 0x8, 0x7}, 0x3b, 0x1, 0x0, 0x0, "0b3fb8dc99d51e4f348d092c6be983b1028fec2c374a8970bfb39d3c2becbb7fb130886016e3832d534324c57939b423762adb1e759583440eb70596c4ba941e"}}}}, 0x0) 16:01:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) fchdir(r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x60000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x2a7a1a9c, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}, 0x9c89, 0x7}, &(0x7f0000000100)=0x90) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000180)=0x1) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2b, 'rdma'}]}, 0x6) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x9, 0x6, 0x4, 0x9, 0x1}, 0x14) ioctl(r1, 0x800000000000937d, &(0x7f0000000040)) [ 418.957369][T16450] ISOFS: Unable to identify CD-ROM format. [ 418.984600][ T24] audit: type=1400 audit(1564243308.651:165): avc: denied { prog_run } for pid=16442 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 418.994018][ T25] Bluetooth: hci1: Frame reassembly failed (-84) [ 420.408097][T11105] Bluetooth: hci0: command 0x1003 tx timeout [ 420.414294][T16259] Bluetooth: hci0: sending frame failed (-49) [ 421.048109][T11105] Bluetooth: hci1: command 0x1003 tx timeout [ 421.054323][T16259] Bluetooth: hci1: sending frame failed (-49) [ 422.488123][T11105] Bluetooth: hci0: command 0x1001 tx timeout [ 422.494405][T16259] Bluetooth: hci0: sending frame failed (-49) [ 423.128117][T11105] Bluetooth: hci1: command 0x1001 tx timeout [ 423.134390][T16259] Bluetooth: hci1: sending frame failed (-49) [ 424.568090][ T17] Bluetooth: hci0: command 0x1009 tx timeout [ 425.208101][ T17] Bluetooth: hci1: command 0x1009 tx timeout 16:01:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="28aafb5e302c0518ae7d8005b7981b538cf5a66b7fce7be8429f9ed19606e3e924fafead1586020214e1d407b2696ace309feead3d69c0d9939435940d26508aa3ef", 0x42) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000001c0)={{0xffff, 0x8}, 'port1\x00', 0x13, 0xa1040, 0x3, 0x746a, 0x67e7, 0x3f, 0x9, 0x0, 0x2, 0xbe}) write$cgroup_subtree(r0, &(0x7f0000000600)=ANY=[@ANYBLOB='\t'], 0xffffffffffffff02) write$cgroup_pid(r1, &(0x7f0000000080), 0x55) 16:01:58 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0xffffffffffffff93, 0xfa00, @ib_path={&(0x7f00000003c0)=[{0x1, 0x0, [0x74bc, 0x1, 0x1, 0x3ff, 0x1, 0x600, 0x0, 0x7fff, 0x7, 0xfffffffffffffffd, 0x9, 0xfff, 0x10000, 0x6, 0x1, 0xfffffffffffffe00]}, {0x2, 0x0, [0x8, 0x4, 0x5, 0x7, 0x71ee, 0xfffffffeffffffff, 0x2, 0xf4, 0x5, 0xf95, 0x7f, 0x7, 0xff, 0x0, 0x6d72, 0x80000001]}, {0x8, 0x0, [0x1ff, 0x9, 0x6, 0x2, 0x7, 0x0, 0x80000000, 0xb7c8, 0x7, 0x6, 0x9, 0x0, 0x80, 0x0, 0xaf, 0x2]}, {0x8, 0x0, [0x497b, 0x80000001, 0x59, 0x7, 0x5, 0x4, 0xc9, 0x2, 0x2, 0x400, 0x80, 0x0, 0xce, 0x6, 0x0, 0x2]}, {0x0, 0x0, [0x109, 0xec5f, 0x6, 0x2e, 0xc8, 0xfff, 0x18ad, 0x1, 0x7, 0x5000, 0x3ff, 0xb3f2, 0x9, 0x1, 0x4, 0x3]}, {0x0, 0x0, [0x400, 0x100000001, 0x7ff, 0x5, 0x0, 0x8, 0xfffffffffffffffe, 0x2, 0x5, 0x10001, 0x1, 0x2, 0x61, 0xffffffff, 0x8000, 0xfffffffffffffff9]}], r1}}, 0xb2) 16:01:58 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:01:58 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x240440, 0x80) 16:01:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r1, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:hald_exec_t:s0\x00', 0x21, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x181000, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x400, 0x0) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f00000001c0), 0x4) renameat2(r3, &(0x7f0000000100)='./file0\x00', r4, &(0x7f0000000180)='./file0\x00', 0x3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6}]}, 0x10) sendto$inet6(r0, 0x0, 0x9ba009c2a02bb827, 0x20000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0xfffffffffffffffe}, 0xff94) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x1000001ff) fcntl$getown(r0, 0x9) [ 428.457998][ T24] audit: type=1400 audit(1564243318.121:166): avc: denied { relabelto } for pid=16469 comm="syz-executor.5" name="UNIX" dev="sockfs" ino=49631 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:hald_exec_t:s0 tclass=unix_stream_socket permissive=1 16:01:58 executing program 1: 16:01:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:01:58 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:01:58 executing program 0: 16:01:58 executing program 1: 16:01:58 executing program 5: 16:01:58 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX]) 16:01:58 executing program 5: memfd_create(0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x750, {0x2, 0x4e20, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32], 0x8) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) 16:01:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setpriority(0xfffffffffffffffc, 0x0, 0x0) [ 429.111391][T16499] hfsplus: invalid gid specified 16:01:58 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 429.158149][T16499] hfsplus: unable to parse mount options 16:01:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:01:58 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:01:58 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x3) [ 429.250191][T16499] hfsplus: invalid gid specified 16:01:59 executing program 1 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 429.296255][T16499] hfsplus: unable to parse mount options 16:01:59 executing program 5: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = socket(0x0, 0x803, 0x0) ioprio_get$pid(0x3, 0x0) mkdir(0x0, 0x0) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000780)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000540)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000009c0)) fstat(0xffffffffffffffff, &(0x7f0000000a80)) geteuid() sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005340)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7, @local, 0x2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)="815c50aa57162465d0d89d36a14f", 0xe}, {&(0x7f0000000240)="943ee552174c5045896fa87038ed06bd280bf8d39a42133e8b292a6029d5c6399f332b19288ca23317e7ace355e176238547611fd8a9dde78d0e1af8bebbc3843a5a5b950428ec5fc64fdac69f30b3c02ee6dd88ec5150a826400f4b7789ef499242ec5be23c5fd207a2d5fe3b7762128b7122", 0x73}], 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000000000000290000000b000000000000ff0000000040000000000000002900000037000000670400000000000001050000000000000100c910ff0200000000000000000000000000010401000502007f00000000001400000000000000290000110b0000000000040100000000"], 0x70}}, {{&(0x7f00000003c0)={0xa, 0x4e24, 0xcf2, @remote, 0x2}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000cc0)="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", 0x1000}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e22, 0x2, @local, 0x10000}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000480)="b53bdbb0afa27e26a5e8f25c0675c587f995c4514a4fcf5fd8a690f2e6bd852d826554fac5abe58367ef0188cb176f0a1a6017a9aa52fbd0e742203fe76c7cc953b3db309b05476e9c0ac0eaef591056a4", 0x51}, {&(0x7f0000000600)="271239c1f3697cdd2356787cd77f0361cf166ba3dace0eef30da7d40527f18a1e82e7d4001fc4515b3017d04518d0d1b249c76777e9056b9929487d9cb1a3d38f315ff999bf69577d44429b7c1a2cb7d0027c22de165675604639ee380d5ab173370de0e7294a9259b058bfad30c322936c7ea68c734590e378df65c63cab8bc24f832d84937b73e3ee6cd8fd47da50a8ee2f9e36c5a696651eb0b37eb8584438b7a4a609a639129", 0xa8}, {&(0x7f0000000500)="d4926c2c2b922493809a5bd6f65c24b22b", 0x11}, {&(0x7f0000000580)="98e0cf2b1290c79622db35b783bab6cd", 0x10}, {&(0x7f00000006c0)="6779b92eeff4a332dff6dfb27b292bc968d41cc35c5eb18271c2fb9169cd77e4d26d93657c2a9b5a8a0547c1e2c3a7add789cb07764e91df9567cf532f3207fbaf03052e6fd09d178ae3d32b6e4fd489b4a14d92a900ccf6d9990b18e8f0955a0b951759c37a177db60e50136d2282ea5ccdb0d7d50b756285d1af1e810d916a6013558a4134aa76e432b07d539b4848e3012d5af4", 0x95}, {&(0x7f0000000900)="428efa772401cdcde6244f68e3c5dbb0ae99dc355077749b759f9623ebf4168e5824ace9c381557a0165dd52cfa1560f253a0a316f2b2302e284e909f5b0b41cd6c776dc40969d1d20fba5a237bda241b03f6de7fea14cb3497ddd9acfb198c657", 0x61}, {&(0x7f0000000b00)="fb0ac6caaa298bd819c3e6235c00bd51f44e179a3366e6db9ac5bfc09b2863c25117bbeb7d9f021d1d01f2bbc3c5c9f95ee0894ae09e8befe932fce8ac40402372926625d47c71be647cc357678efc93a47a82d65b88aa9621568d23450c48272633fab90d1b904f1a75173c00f3fa22c29343902af3d73799aae694460ac12b440828ca59f8d870c2c46486b9298b60c6a820ca2b537cd168658a22f2bbb2b4de22b2b3ebbdd03b4a253344a1950d12190d2f4a0ee720957e97c758b4ff26ea517414eb13f32fecdd7d899d68243ee921b79655139c5c73", 0xd8}, {&(0x7f0000001cc0)="7fc6e7ddd5ae7052e62fc3ea5060f91352ff579d21f373077c2c93904fc8d3c32e3c844c9f113569361c10b237a9063f8f22bba9ce952003f9a3f460421757aab3b2307d625b8331107da0c14f42ebb1cbf786aee806dd92064c180394477b8803905531f624f1051cca7bfa61e64656af13641151bc52619137644308e03fb27bda2245ca950810e95014b6998bc5886d1925bec45151fd638e29dfecaeccf888fffc8564f03a7716fdbe585362350571998ecba4efebb6ff5324004ebf53a4f9ee887dba93cea4d0ce3182eca1067d1405c5e72003b3ac665539507a3c161b0cdeacadf603", 0xe6}], 0x8}}, {{&(0x7f0000000880)={0xa, 0x4e22, 0xffffffff, @mcast2}, 0x1c, &(0x7f0000002040)=[{&(0x7f0000001dc0)="bff7b222f76868279ea77419cbb277653071f6b936e75d1edfa9275a55e0f9cfc222c041eda07cfb7414a38371c719ba9c1785d0ded6b2339d2cbf9498b4cfa46d4f", 0x42}, {&(0x7f0000000980)="5f81472f", 0x4}, {&(0x7f0000000c00)}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000001e40)="97a4daff56332138f09302224b57871ffc6d2d24fda7af063a1c5a199ca603da36aead7a830ed26e4beed0dfd23df824897e4c0bb64597ceb69d6c4e7db76d839c117a9d0a", 0x45}, {&(0x7f0000001ec0)="33f88d269f7ae92150c111eb20f2e71e63648fcfdfe88af4515260252dc19d87c92dfbfcb32963984b0332d81a4e906cad358501a66dea3089c994ec8597c74f2360b9e307e0935d344560317e4f9fad395a05911f7ddc3348a8ebcd24d70e1190fcb9ae7b81109327757a51535a7c5192528f9a7c929675e4541c1ecdf9fb66dedc894ce026f00b6f2cf6c7acd2320b2224d05cf5da08813fa9686f47cd422713b8", 0xa2}, {&(0x7f0000001f80)="b674491ac44ab4b7a267018da2b11b2bf483f59cd82616bf79f9c17496601495cdbc1256f75e7cbbdfda3d83fc822fcdb129816f423ee765352c608b2959363ad9d53da1418d96e541f01f27c7c3db468f32b7a3551ea8a75bdb66a5be8b225c41167c", 0x63}, {&(0x7f0000002000)="d511d13ecc9259995f0b160b3c0261e7fe8d173221e357838012ed1dd7afac8a27069dd5301ade240630d7eae7", 0x2d}], 0x8, &(0x7f00000020c0)=[@dstopts_2292={{0x38, 0x29, 0x4, {0x2b, 0x3, [], [@pad1, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x1}]}}}, @hopopts={{0x50, 0x29, 0x36, {0x1d, 0x6, [], [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7f}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x7, 0x6, 0x9, 0x3, [0x3, 0x1, 0x0]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @dstopts={{0x90, 0x29, 0x37, {0x16, 0xe, [], [@pad1, @generic={0x64c8, 0x2d, "7aafce5f15c990c8a395e200073e7de8529647fa8407d7870590794a3033cf8c177426e0ee724878b68a20f23b"}, @generic={0x5, 0x16, "fdf0667ba9e24d7c67efee2f129a87cc5cf6da9ccc50"}, @calipso={0x7, 0x28, {0x8, 0x8, 0x800, 0x5, [0xbb, 0x54, 0x1, 0x281]}}]}}}], 0x130}}, {{&(0x7f0000002200)={0xa, 0x4e22, 0x401, @local, 0x4}, 0x1c, &(0x7f0000003480)=[{&(0x7f0000002240)="092e5f947be4b6933508aa3085e5a63d1e6c3d3d711f2616c753865c270d36d90b211febbef74329fb736549b9934d02e074", 0x32}, {&(0x7f0000002280)="8c858d9308997348ed92b5eaf185ada18eace8ec9599e93bc8b2a732d62685b43069345c009a1ee4b992b57e8da482eec4879df02c43d2be7e697b838edfa39e138066efcad2aa953d0cfaf0fdc8fb11819062bc490ff0f922e582ae409982", 0x5f}, {&(0x7f0000003340)="242ecdb0c2542a68885bc030893b92f6377415", 0x13}, {&(0x7f0000003380)="0ae59d43cd3a30d872e3088be144839a76dc49e345cb787cf2c177d7cc22d06479234f0ab346a61871fcd17d00e9d99bcc23932f0e8027c4ceab30521b00d6697173e6a2410ee980126dcff1b77e8654fb70669d55b4f6502ce26c60dda47fff4963e4708d2be2c44896df14a54be918eb1ad39daa969673acf8fc54699513f30d4f26f933e8e2c6048675e19fc884f161ef28698533da03bbcd9c0a3c97c7495abfd0817d4a1f0cada4b724eef681e8c8e0e4c8162da905c71e870c0bad2446eb5667e5996bc8881e9b", 0xca}], 0x4, &(0x7f00000034c0)=[@rthdr={{0x28, 0x29, 0x39, {0x87, 0x2, 0x3, 0x7fffffff, 0x0, [@remote]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x3f, 0x6, 0x0, 0x0, 0x0, [@mcast2, @loopback, @mcast2]}}}, @hopopts={{0x60, 0x29, 0x36, {0xbf, 0x8, [], [@ra={0x5, 0x2, 0x8000}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x28, {0xfff, 0x8, 0xfffffffffffffc01, 0xf4, [0x0, 0x135, 0x6, 0xffffffffffffffe0]}}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x2b, 0x1, [], [@jumbo={0xc2, 0x4, 0xae5b}, @ra={0x5, 0x2, 0x8000}, @enc_lim]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6a}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x3a, 0x4, [], [@enc_lim={0x4, 0x1, 0x4}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x2b}}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @generic={0x3}, @enc_lim={0x4, 0x1, 0xfffffffffffff000}, @pad1]}}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x7f, 0xc, [], [@jumbo={0xc2, 0x4, 0xa4f2}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x80000000}, @generic={0x20, 0x54, "492bbf244b528cc8ffe112c504c340d9c0ce1f7c668f05ff5005549ec92bdee5da9268d4327cc56289058429bfcc4897e4ea3694b5272c6f9c7dd9ff7af74cb6f6895cbea250246fba0dbe1945d8f7386ad37fd4"}]}}}, @hopopts={{0x130, 0x29, 0x36, {0xff, 0x22, [], [@ra={0x5, 0x2, 0x3ff}, @generic={0x8001, 0xdb, "02bbe7bac94631a455250409bbc4bb21efe34b1f3a04c808b4792084c7b8ac0d1f51588ee84bc9286a280a160a4f839a4d8817dd1ad39d7314f888d629922224af8a5e5ec14726a77c097258771dfbb44c04dbcd9e46ea5b1d220402b8514fcf0b850adeebf36d52a84dec6119005dc0580a5f6b9e61fc23231bc756d0375f071439b787c057585044a11b18e2c8e2f1599ac831ffecc4db26faf512f6d11f6931eeaabf6daf36fd552bc3d60d9aa2557e0bb837678163a3a9e69cc74ac228324f70a55be281a3be9572e74b2e46412936ac6e27f6a44f96f5cf58"}, @calipso={0x7, 0x30, {0xfee, 0xa, 0xae, 0x2, [0x81, 0x94d, 0x3, 0x1, 0x6]}}, @enc_lim={0x4, 0x1, 0x3}]}}}], 0x300}}, {{&(0x7f00000037c0)={0xa, 0x4e21, 0xfffffffffffffffa, @rand_addr="ab0965980a8ebfcd50182c304d93138d", 0x40}, 0x1c, &(0x7f00000049c0)=[{&(0x7f0000003800)="130d3ae312f085d9c4aa493cff9b57c63a6f4b14689938abd53b14e20e6d09e7b1b6ada8420d56d701d39bb5fd9b8190672d4c09279037a04b7025651dfcda44e628c185813614e0f9ca81b5b4c323beb264417fd002a2a9f0181125052792c4a6560b0b33a24a8dc231d277c41b67acc086e9ee1082a4ab607addb6a43d449fd3c86351f2c2db4fdcf6a05a96fe433a", 0x90}, {&(0x7f00000038c0)="ffbb60136dbf89cd908536f02e42435e2fe85d6b13b1e98533749696b6994890c59bdd81b3b29cf8a52a2086ffca318e07c250eb46ddbcf7a360972dd3fade5a7f1fcef7a8455ecc20ae170cbf4e2bbb0839c482fe7191e811c80adc76f68d6d1495a73466233b5ab32f885ed74576268b4bf7ba228e8a6ba887d179f6692f7a9418d6f78f49bad16bdcb83fbd6741de5ef06b5420659e82458664930df06c7a69c932f0a2f63bd764bdb115a1142fe5f81747e2902f34bcee8e8825e45af078451fcfbf2cbe139d1e29c8bbac94dcf663a4808c0007b16037cc8130051d1d7407c080a7255b6078bdd3e13d6cae79d839bd1b08ae894b", 0xf7}, {&(0x7f00000039c0)="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", 0x1000}], 0x3, &(0x7f0000004a00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xff}}], 0x18}}, {{&(0x7f0000004a40)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0xe}, 0xa511}, 0x1c, &(0x7f0000004b80)=[{&(0x7f0000004a80)="704e215cd348fd8741878644276dfa7113f95a59d31e2266dfc8cf3cea6384c602857a4db7e11ce3fe4d7c8662903934c87aea446a86bddf0d68318327544b366938b2534d801c504edced3b5d22203fecab364d823f9805027c5573a387e230b3565e5b62d5981683ccfc1fe496e2e20d24d02c74e23c63c1", 0x79}, {&(0x7f0000004b00)}, {&(0x7f0000004b40)="5f43e910251466810d61e5fcc6a3bda5d8fe2a3565c41b5f319a2f11a10341a9812a05dadf25a52e9196dd3d06246b8ef8611b29", 0x34}], 0x3, &(0x7f0000004bc0)=[@dstopts_2292={{0x58, 0x29, 0x4, {0x2f, 0x7, [], [@pad1, @calipso={0x7, 0x20, {0x5, 0x6, 0x4, 0x800, [0x5, 0x80000001, 0x7fffffff]}}, @pad1, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}}}], 0x58}}, {{&(0x7f0000004c40)={0xa, 0x4e20, 0x4, @mcast2, 0x8001}, 0x1c, &(0x7f0000004d80)=[{&(0x7f0000004c80)="8b32aadef3e4048d9fa355d6df05851c7a04902065bb7233644f6cb73a9fa54f0259e58d240b62474a08b2a4eca48da50c8200ca288df1e6dea4e0230ac5f4eface9bb052de268579f13898cf89599e5258c00fef1c523a95a927d30a789036e0d3dc64ca4bd081039bafff84af8d3b484a803bfcd9197dd081dc78c7d83b71c89a46806ff6fb502", 0x88}, {&(0x7f0000004d40)="bde09cbd070058ed7e9852987ed15e7d3eec663a80ffe8fc9ef4f9f720a1867c6d2ac3db585b94e34815be01fe5dfbfdd85f6c43", 0x34}], 0x2}}, {{&(0x7f0000004dc0)={0xa, 0x4e21, 0x5, @loopback, 0x8000}, 0x1c, &(0x7f0000004ec0)=[{&(0x7f0000004e00)="e268ad83930be090d6c2f6950ebb50ed1015568171c91de0db0dd3ca71e2a731d45ce706cddb8b44dc44c408ef8bf5dede11fc18e5939d911f925b6c40093a7ff078e2e8f7b9b15ee1500b3789c39918b39d789fb5be31683d3e83ac435ac5c3d94c8ca87a6c72b28f8f529c79c8ff4c4704f78d1754d183c8118f170c31c3d2d89525cc44", 0x85}], 0x1}}, {{&(0x7f0000004f00)={0xa, 0x4e22, 0xc03, @dev={0xfe, 0x80, [], 0xc}, 0x9d8000000}, 0x1c, &(0x7f0000005200)=[{&(0x7f0000004f40)="054547de4fbf2501c5dafa0919acc3d83081e9b42089d2a841251220e55b4c8f56b74ba5e5feeeafcb1ad9a298a21f28e8492a46795f398c7ee980367edf3ec4969f741964d4f61181a55c8b2706ac33acb06d2d698474fc8664c969a5e78a4dab27ca0563eb63760f6890d2844d", 0x6e}, {&(0x7f0000004fc0)="bf442014096f46f0b0836a2122858ffdcf4bc2ccd603ee7de40ae2b0b06a3d2523180e8d7918c86306a886d79edf1eda6bdfb1e2706928ffa4d0fdac50629dcc1d49faf15599adcd15988633a96b0935664cb284956bb80e3a595696f957ca59ac15609432a79fe168d9dc5db673ef83fb10be62752e6c04d1ca770a30f6ab6b2bbf4686465f0f545f5d7dcf83c295d3e5a84561e4e1000d824ebf414018d39693362dbcf39f480b8acfeab60268c80612e9405333125fa1d7bff845725c4a801cdaf4ff787c1e56541d48afd5696ccca5523b80345f32d677bd34bb27e3fe9128365122819b838f045c7915cb6eb2331c656f42", 0xf4}, {&(0x7f00000050c0)="dd2222d06afed508e6fdc049d7c169a16276a210d16c4a1a8eedb764c19b85dc71b38bdbc6b506cda5bbd04a1fc7d4dc4d", 0x31}, {&(0x7f0000005100)="ac024ff6da2618ba46263d09ceec7de6dcc5051dd8bab965934b1eecbc0a8461d36e46f7ab886d370a07ab1a1e96337962407c357a180e7e87e07c7186eac69e32dbbd60bae4a2f43ea52fc08574056afbef11df308d3690aedb571663be8328585a3c2d342ec5d8f924befec51391c5ba0d076ed82eab6c1fae71", 0x7b}, {&(0x7f0000005180)="f5014fd093b54c5f928375c1eb2c5f5f5b52b2c7927fd437d6bb19e959dfa3fc67eb5dd077cc97933ed2e757923cd684214824b78443b2cabc2e6add543df3efac7c4dc496e844d90686114782615d890e7525d8a49f341cd085f915dafa57ef43072cb68d2cc031a2a547c67034bb3c183ab3f1943264b934", 0x79}], 0x5, &(0x7f0000005280)=[@rthdr={{0x38, 0x29, 0x39, {0x87, 0x4, 0x2, 0x7, 0x0, [@dev={0xfe, 0x80, [], 0x13}, @loopback]}}}, @rthdr={{0x18, 0x29, 0x39, {0x3a, 0x0, 0x2, 0x5}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r2}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @hopopts={{0x20, 0x29, 0x36, {0xbf, 0x0, [], [@pad1]}}}], 0xb0}}], 0xa, 0x20000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c40), &(0x7f0000000c80)=0xc) fsetxattr$security_smack_transmute(r0, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x3) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x1ff, 0x4) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) socket$pptp(0x18, 0x1, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000000c0), 0x2ba) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r3, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 16:01:59 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0e00000000000000a5bc7fa97a00ffffff0000000000000000000000000000d39d12e468a6f137fc8129f6b4e139df38fceee085fc4eb5fc3b43e73f71aa3a177240fbd8fca5270d2fd61a9b7176a0d1b97f9d48b360cd46324580e97039a4f94692ccc6c401b8a82cf5461ba37634299615fc51dd12d9ef83456042eb0931a86add6c8132500a3cfc57994303c6aa8fb34db4f4fcf38207aee74a69c2797de0904a2855854e7611a5e23bd96073e0b309586bf7d36b8c0000"]}) r1 = accept(r0, 0xfffffffffffffffd, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x211, 0xffff}, &(0x7f00000000c0)=0x255) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e24, 0x0, @loopback, 0x3ff}}}, 0x84) 16:01:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 429.508999][ T25] Bluetooth: hci0: Frame reassembly failed (-84) [ 429.550891][T16532] FAULT_INJECTION: forcing a failure. [ 429.550891][T16532] name failslab, interval 1, probability 0, space 0, times 1 16:01:59 executing program 0: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000002580)={0x0, 0x0}, &(0x7f00000025c0)=0xc) setxattr$security_capability(&(0x7f0000000400)='./bus\x00', &(0x7f0000002540)='security.capability\x00', &(0x7f0000002600)=@v3={0x3000000, [{0x0, 0x1}, {0x7, 0x82}], r0}, 0x18, 0x1) r1 = socket$inet(0x10, 0x80000, 0x4000000009) recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r2, &(0x7f0000002940)=""/135, 0x4a) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000f00)={0x5, 0x10, 0xfa00, {&(0x7f0000000c80), r3, 0x3}}, 0x18) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xd, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000140)}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r4, 0x107, 0xd, &(0x7f0000002200)=""/190, &(0x7f0000000280)=0xbe) syz_mount_image$ceph(&(0x7f00000000c0)='ceph\x00', &(0x7f00000002c0)='./bus\x00', 0x1, 0x8, &(0x7f0000000bc0)=[{&(0x7f0000000700)="a4826631cc4177f1a20ca557f1eeb5f06d66c7d868894d9bb65b53c8da49048557f529a1192a567af42d7d770e3960d099c2727fca98838e3f8dad457519a633769a9a50e23052b395cd3cba1e357b10e6ff422ab28a16156738d3db908caaff2b76f232f7e5c1fd98f06e8dae009a7cef4fae412ef812356811a45c4b65fd61bfe19a1cb4a4c584bda27e29cfc2863cb42504a400d6d85a8328807c0ebb5f8111b1503969c6f86c2155dcc1a446876878f9a5eef1a138b1cf9dc552", 0xbc}, {&(0x7f0000000800)="e28c3dee5fd8d0060aeccff8225ba8419dcce45ebdd2805334a8adbdda4e90fd88124afc6d8f6acd732b8d604093128d8d0a707b6e76e6e5eb2dafca9daf4802a614fe2d127689b27800dd40afec2dd785eab09ad40a3f7d25739945af5816720690442322ba0690e1d207b4ee0809f8b88e4662a00364ed30144a644c8c1874a3082bae66126ce1f06a3b92e0e79a11c52b01a5e736d9dcf3c0b5fa36a504c8fec7f3eb67d7512e5c55ecd7f66b8f23f2f755b1dd73a9c4cc38e9f410156d91d6ec295643626d2a53d9cb6bb4fada3526125a104453388ac0c96d941c42980e289efe84ede1852a955ee3c311ea7c7f80d8", 0xf2, 0x9}, {&(0x7f0000000300)="56dada958fc88349de22feb43693cface75b492f0631f04518e86839a2b0e7b7c20050d63003b8deff101e54589365007ef88bcd5b4b83b6cdc4c2b6ae5b865edc20896eb565682a4566dc53d996604cda286b8c9e42c86f41315e24632108963f8ddd3516e6ffdf322f2ca7ced45f", 0x6f, 0x1}, {&(0x7f0000000900)="5292260c0c4d3599dcc485458090f8d4367354d189e2824e6057f3370752711f8b038fbc572c89f3f9fc8d0af837624ecbdd07a3f348f4db31cde275a5689d6cdc3087158fa2c32b1a09a55a712fec94303d1c4dd0a50bf020d30599ba8dd388ed5c6f6fb896d010b3a06c7fffe14e952b1857640da5128ff3a9f6447e7a1c85c2c1b2b414eb25b461bb2108e3ee87ddae77659a550d264570de6ff156c9e53d0ab242f158", 0xa5}, {&(0x7f00000009c0)="bd0810a04ea4eadd6d25dc20dab679483d05fb34a7b8b4d76ba17dd80f74bbdd7a9d7eab84ec7dc631e40c8a1d2ba5638801685b5459cb7d17acf19ee86cf87a154bfa902454ad2f9036f5692cf46538af38de5783cbc491ecfe27210908675e7b1f170d2d65dd23799bb7020c0851e58613a3866141e4cf4000c9673a8e07bed4b69b74c6a002bccfceb63b6bfad9cdbae5643ad4b58ea177fd887201a5662825fe7e0f736d75ab3749a8530cec1059487a39e44dbf837eedd40af921351d6ae646a6472bf6881dd6ca03b2011edbff60e67b605a561afd4c447fee83b35ef07a237fe4", 0xe4, 0x50000000000}, {&(0x7f0000000ac0)="fe4f7dabd0a5cc1778c8b6eb11a9c764026b377714f6dc9934bbd5ef2ec9e67d99b7e346c661fefa22c05e66e1a3240d64809d0a5c46b639c44c27a76d6d587eef651afe2c5d45f1fc08c73bfa73057ff917caeba5337cc9314d40c04bd0c842a91b7debd53c3d166932e6dc21eef5b60ee03c963583dce2e645928d218701f32cd76a9ac4fb2aa0da28f73d61e828db543c790bb0a6a7c12319962ab314b7724a72f863e407d160e132f0bfd1ab87b603d0cc631907e4ba4946d2e72ca34638af35a3d1a29a7a81f86ce28418923290ea404e7058a1900d616f236a50156c25bc5866314bbab2e04a5fbdfcae8e28d437c235473e61fa0d45", 0xf9, 0x2}, {&(0x7f00000003c0)="5817905b", 0x4, 0x6}, {&(0x7f00000005c0)="575db5111928ebe3aee8ecf39dbc83b8d6be164282f2", 0x16, 0x8000}], 0x6000, &(0x7f0000000640)='GPL\x00') r5 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x8000000000000000) getsockopt$nfc_llcp(r2, 0x118, 0x0, &(0x7f00000004c0)=""/225, 0xe1) close(r5) r6 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r5) write$P9_RREADLINK(r2, &(0x7f0000002a00)=ANY=[@ANYBLOB="0e00000017020005002e2f62757315f8a8297c2d62584cfeee0f557824f159f37e9cfa37b7ffe6aa63bb1cec023f98fd8c10de774d88ed36a84f2ac80dc0f3f91ff8a92465cc4c8a6e745b1980e22b8493734062cb72166495a1226b499be5f51040e53439848a9a0d530a65a6da74f35761114124634739e4030000003449da7b4e5597ccc9bda50eb9febad99f40154c7c56d5557f37f7647b53cd43a033fa819f89008fe24b30b7ff8c15091f6262cb98fee0942928c1bd250adec03fc71f5c7d6a73426c3dcdddaffa25538a2ab4a668b6cdf3e9a0fb04b1fd97d56432f8d5ca7966735d2b28ad87c88076f102f6ac744c663bd818eaf0dca96081eb320a635754596e0437319fc90e77198908b9455df594c8873135621065890b709b7ae47ef9f10262b917f861d73f462fce340ee1cd5f660b03e56c99250b08acc9f74ab67cd4a846fcd01990"], 0x14a) openat$dir(0xffffffffffffff9c, &(0x7f0000002900)='./bus\x00', 0x0, 0x30) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000000, 0x100000011, r5, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002800)=[{&(0x7f0000002440)="41e515042218ee3b5dc401296180820c8fbadcbfb68bfc5c54a2c0fa5286fa0957b55e815f3e2a47006b29e27266e9d80d3ed87bcb8d85c0c148f058a669d175cf8e6683ee58e917b03f98e514de56961f554290f8f0d3806232a570a9e5546ba01b3ebf84b7df73773bfd45ddb857871c2a20fa1ced8591f07a154d87134c5726d3ba06cf0f39ceecc2fe1a2b5e2524eab7b0245091f0cdafc7b4d08e3d8150c41105523e2527f9ee95f3256041e32819c56770eed54d396e48f5d2ae5ff1e0bbbe7eddc797f2844438c398314c9cc36f1018348baf40ec", 0xd8}], 0x1, 0x3) recvfrom$inet(r5, &(0x7f0000000680)=""/91, 0xfffffdd5, 0x3fba8a0c83e51971, 0x0, 0x101cd) [ 429.621730][T16532] CPU: 0 PID: 16532 Comm: syz-executor.1 Not tainted 5.3.0-rc1+ #78 [ 429.629780][T16532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.639868][T16532] Call Trace: [ 429.643260][T16532] dump_stack+0x172/0x1f0 [ 429.647740][T16532] should_fail.cold+0xa/0x15 [ 429.652720][T16532] ? fault_create_debugfs_attr+0x180/0x180 [ 429.658578][T16532] ? lock_downgrade+0x920/0x920 [ 429.663463][T16532] ? ___might_sleep+0x163/0x280 [ 429.668381][T16532] __should_failslab+0x121/0x190 [ 429.673344][T16532] should_failslab+0x9/0x14 [ 429.677878][T16532] __kmalloc+0x2e0/0x770 [ 429.682148][T16532] ? mark_held_locks+0xf0/0xf0 [ 429.687161][T16532] ? _parse_integer+0x190/0x190 [ 429.692042][T16532] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 429.697862][T16532] tomoyo_realpath_from_path+0xcd/0x7b0 [ 429.703517][T16532] ? tomoyo_path_number_perm+0x193/0x520 [ 429.709250][T16532] tomoyo_path_number_perm+0x1dd/0x520 [ 429.709267][T16532] ? tomoyo_path_number_perm+0x193/0x520 [ 429.709284][T16532] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 429.709326][T16532] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 429.720505][T16532] ? ___might_sleep+0x163/0x280 [ 429.720545][T16532] ? selinux_file_mprotect+0x620/0x620 [ 429.720565][T16532] ? __fget+0x384/0x560 [ 429.720580][T16532] ? ksys_dup3+0x3e0/0x3e0 [ 429.720602][T16532] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 429.720616][T16532] ? fput_many+0x12c/0x1a0 [ 429.720634][T16532] tomoyo_file_ioctl+0x23/0x30 [ 429.720659][T16532] security_file_ioctl+0x77/0xc0 [ 429.772905][T16532] ksys_ioctl+0x57/0xd0 [ 429.777068][T16532] __x64_sys_ioctl+0x73/0xb0 [ 429.781689][T16532] do_syscall_64+0xfd/0x6a0 [ 429.786222][T16532] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 429.792117][T16532] RIP: 0033:0x459829 [ 429.796018][T16532] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:01:59 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 16:01:59 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 429.817025][T16532] RSP: 002b:00007f7632cd8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.825451][T16532] RAX: ffffffffffffffda RBX: 00007f7632cd8c90 RCX: 0000000000459829 [ 429.833523][T16532] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 429.841860][T16532] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 429.849837][T16532] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7632cd96d4 [ 429.857822][T16532] R13: 00000000004c413b R14: 00000000004d8210 R15: 0000000000000004 16:01:59 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 16:01:59 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000040791090000000000062000000000000009500000000000000"], &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x200000000000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 429.926386][T16532] ERROR: Out of memory at tomoyo_realpath_from_path. [ 429.936934][T16532] Bluetooth: hci0: Frame reassembly failed (-84) 16:01:59 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 16:01:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xfffffffffffffc2e) 16:01:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 431.528073][T11105] Bluetooth: hci0: command 0x1003 tx timeout [ 431.534176][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 433.608147][T11105] Bluetooth: hci0: command 0x1001 tx timeout [ 433.614364][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 435.688195][T11101] Bluetooth: hci0: command 0x1009 tx timeout 16:02:09 executing program 1 (fault-call:3 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 16:02:09 executing program 0: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000002580)={0x0, 0x0}, &(0x7f00000025c0)=0xc) setxattr$security_capability(&(0x7f0000000400)='./bus\x00', &(0x7f0000002540)='security.capability\x00', &(0x7f0000002600)=@v3={0x3000000, [{0x0, 0x1}, {0x7, 0x82}], r0}, 0x18, 0x1) r1 = socket$inet(0x10, 0x80000, 0x4000000009) recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r2, &(0x7f0000002940)=""/135, 0x4a) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000f00)={0x5, 0x10, 0xfa00, {&(0x7f0000000c80), r3, 0x3}}, 0x18) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xd, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000140)}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r4, 0x107, 0xd, &(0x7f0000002200)=""/190, &(0x7f0000000280)=0xbe) syz_mount_image$ceph(&(0x7f00000000c0)='ceph\x00', &(0x7f00000002c0)='./bus\x00', 0x1, 0x8, &(0x7f0000000bc0)=[{&(0x7f0000000700)="a4826631cc4177f1a20ca557f1eeb5f06d66c7d868894d9bb65b53c8da49048557f529a1192a567af42d7d770e3960d099c2727fca98838e3f8dad457519a633769a9a50e23052b395cd3cba1e357b10e6ff422ab28a16156738d3db908caaff2b76f232f7e5c1fd98f06e8dae009a7cef4fae412ef812356811a45c4b65fd61bfe19a1cb4a4c584bda27e29cfc2863cb42504a400d6d85a8328807c0ebb5f8111b1503969c6f86c2155dcc1a446876878f9a5eef1a138b1cf9dc552", 0xbc}, {&(0x7f0000000800)="e28c3dee5fd8d0060aeccff8225ba8419dcce45ebdd2805334a8adbdda4e90fd88124afc6d8f6acd732b8d604093128d8d0a707b6e76e6e5eb2dafca9daf4802a614fe2d127689b27800dd40afec2dd785eab09ad40a3f7d25739945af5816720690442322ba0690e1d207b4ee0809f8b88e4662a00364ed30144a644c8c1874a3082bae66126ce1f06a3b92e0e79a11c52b01a5e736d9dcf3c0b5fa36a504c8fec7f3eb67d7512e5c55ecd7f66b8f23f2f755b1dd73a9c4cc38e9f410156d91d6ec295643626d2a53d9cb6bb4fada3526125a104453388ac0c96d941c42980e289efe84ede1852a955ee3c311ea7c7f80d8", 0xf2, 0x9}, {&(0x7f0000000300)="56dada958fc88349de22feb43693cface75b492f0631f04518e86839a2b0e7b7c20050d63003b8deff101e54589365007ef88bcd5b4b83b6cdc4c2b6ae5b865edc20896eb565682a4566dc53d996604cda286b8c9e42c86f41315e24632108963f8ddd3516e6ffdf322f2ca7ced45f", 0x6f, 0x1}, {&(0x7f0000000900)="5292260c0c4d3599dcc485458090f8d4367354d189e2824e6057f3370752711f8b038fbc572c89f3f9fc8d0af837624ecbdd07a3f348f4db31cde275a5689d6cdc3087158fa2c32b1a09a55a712fec94303d1c4dd0a50bf020d30599ba8dd388ed5c6f6fb896d010b3a06c7fffe14e952b1857640da5128ff3a9f6447e7a1c85c2c1b2b414eb25b461bb2108e3ee87ddae77659a550d264570de6ff156c9e53d0ab242f158", 0xa5}, {&(0x7f00000009c0)="bd0810a04ea4eadd6d25dc20dab679483d05fb34a7b8b4d76ba17dd80f74bbdd7a9d7eab84ec7dc631e40c8a1d2ba5638801685b5459cb7d17acf19ee86cf87a154bfa902454ad2f9036f5692cf46538af38de5783cbc491ecfe27210908675e7b1f170d2d65dd23799bb7020c0851e58613a3866141e4cf4000c9673a8e07bed4b69b74c6a002bccfceb63b6bfad9cdbae5643ad4b58ea177fd887201a5662825fe7e0f736d75ab3749a8530cec1059487a39e44dbf837eedd40af921351d6ae646a6472bf6881dd6ca03b2011edbff60e67b605a561afd4c447fee83b35ef07a237fe4", 0xe4, 0x50000000000}, {&(0x7f0000000ac0)="fe4f7dabd0a5cc1778c8b6eb11a9c764026b377714f6dc9934bbd5ef2ec9e67d99b7e346c661fefa22c05e66e1a3240d64809d0a5c46b639c44c27a76d6d587eef651afe2c5d45f1fc08c73bfa73057ff917caeba5337cc9314d40c04bd0c842a91b7debd53c3d166932e6dc21eef5b60ee03c963583dce2e645928d218701f32cd76a9ac4fb2aa0da28f73d61e828db543c790bb0a6a7c12319962ab314b7724a72f863e407d160e132f0bfd1ab87b603d0cc631907e4ba4946d2e72ca34638af35a3d1a29a7a81f86ce28418923290ea404e7058a1900d616f236a50156c25bc5866314bbab2e04a5fbdfcae8e28d437c235473e61fa0d45", 0xf9, 0x2}, {&(0x7f00000003c0)="5817905b", 0x4, 0x6}, {&(0x7f00000005c0)="575db5111928ebe3aee8ecf39dbc83b8d6be164282f2", 0x16, 0x8000}], 0x6000, &(0x7f0000000640)='GPL\x00') r5 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x8000000000000000) getsockopt$nfc_llcp(r2, 0x118, 0x0, &(0x7f00000004c0)=""/225, 0xe1) close(r5) r6 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r5) write$P9_RREADLINK(r2, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], 0x14a) openat$dir(0xffffffffffffff9c, &(0x7f0000002900)='./bus\x00', 0x0, 0x30) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000000, 0x100000011, r5, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002800)=[{&(0x7f0000002440)="41e515042218ee3b5dc401296180820c8fbadcbfb68bfc5c54a2c0fa5286fa0957b55e815f3e2a47006b29e27266e9d80d3ed87bcb8d85c0c148f058a669d175cf8e6683ee58e917b03f98e514de56961f554290f8f0d3806232a570a9e5546ba01b3ebf84b7df73773bfd45ddb857871c2a20fa1ced8591f07a154d87134c5726d3ba06cf0f39ceecc2fe1a2b5e2524eab7b0245091f0cdafc7b4d08e3d8150c41105523e2527f9ee95f3256041e32819c56770eed54d396e48f5d2ae5ff1e0bbbe7eddc797f2844438c398314c9cc36f1018348baf40ec", 0xd8}], 0x1, 0x3) recvfrom$inet(r5, &(0x7f0000000680)=""/91, 0xfffffdd5, 0x3fba8a0c83e51971, 0x0, 0x101cd) 16:02:09 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:02:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket(0x7, 0x8000b, 0x4) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x7) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0xe9ffffff, 0x0, 0x0, 0x0, 0x2000000000000000}) 16:02:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:02:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) fdatasync(0xffffffffffffffff) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup2(r0, r4) write$binfmt_elf32(r3, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x2724de17, 0xffffffff, 0x4, 0x2, 0xfff, 0x3, 0x6, 0x3, 0x2a5, 0x38, 0x1ef, 0x1, 0x9, 0x20, 0x1, 0x101, 0x7ff}, [{0x60000005, 0x5, 0x100, 0x3, 0x3, 0x870, 0x8001, 0x4}, {0x6474e551, 0x1, 0x1, 0x8, 0x1, 0x9e92, 0xfffffffffffffffe, 0x3}], "7a4c855461979cee4d9cef90cced886b3ab2f8aa711c22639d15bdd903f503c1ed8da42ccfc50723662eccd70369425de30d4bbc2008c35bd7b2121d77bc18ca51f4c9f74215782de684432dfe6904864511053e944445a1d8e092d7ce9003c6f903c0eaa9e4dac6eae2e77fdc1ab445f1f5d1c3e379545f3d958786acae6f4475fe00805f4af05169edbc3e4a3e21d8e9a457be05ccc5d010eba4149a4a9b37682a61215afa5bd08cb07e5f3171a627b7fe8a70b877f8e828131abb0c9dae556db22e94c1d84057836701ce3a68f182e56f333615ab849e6091f7533fa6660fecd01346b6216d28a1ada7f6acb00d", [[], [], [], [], [], [], []]}, 0x867) dup2(r4, r1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x4, 0x30, 0x3ae, 0x10040}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000002c0)={r5, 0x84, "d659dbb543febe501be58d0efe7c8365ddefec477f268c0a0e75e288d9760d13eb18773802455af25598a1876d0df9b000bb4bab22a97f9460102a95e55e92ba6121ee2700736ac88746e5cb2a7c3f381bf6f269534962bf903f86e991b0ac8df144ef29979576aecf2f2a51ab335d4eef5361bc3210a0092ccf505ca01a6645ca1db13a"}, &(0x7f0000000200)=0x8c) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1800170356ba34bb2778bbf7084a7e29b75794d18b135d9ac46f26163ded89677fc5f4cf8b16e7897a88e70c489b26a21efaa69bec6162c026b61d61cc95393cb80926b7157be5f639304755184667e79c3302f1cce74c58285b0f1d134bde62c042aeeebc65982d7c7b07c279b08f8deb0080000000000000000000000000006bf7b5ba99685add238a1af00b69190bb796b3f756c04f567dc709a1b57435d511faedffe69068bf20a36ff9af05ec97deba9724a3f75caea20ef9e6a60475d1641e04c0613f958f9ebe32a390b7b634bed9aef02246d6fc05eb5c9155"], 0x0) [ 440.110413][T13194] Bluetooth: hci0: Frame reassembly failed (-84) [ 440.126165][T16711] FAULT_INJECTION: forcing a failure. [ 440.126165][T16711] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 440.139455][T16711] CPU: 1 PID: 16711 Comm: syz-executor.1 Not tainted 5.3.0-rc1+ #78 [ 440.147441][T16711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.157506][T16711] Call Trace: [ 440.160818][T16711] dump_stack+0x172/0x1f0 [ 440.165299][T16711] should_fail.cold+0xa/0x15 [ 440.169998][T16711] ? fault_create_debugfs_attr+0x180/0x180 [ 440.176024][T16711] ? lock_downgrade+0x920/0x920 [ 440.180891][T16711] should_fail_alloc_page+0x50/0x60 [ 440.186099][T16711] __alloc_pages_nodemask+0x1a1/0x8f0 [ 440.191485][T16711] ? __alloc_pages_slowpath+0x2520/0x2520 [ 440.197238][T16711] ? avc_has_extended_perms+0x8e4/0x10f0 [ 440.202899][T16711] ? unwind_get_return_address+0x61/0xa0 [ 440.208550][T16711] ? profile_setup.cold+0xbb/0xbb [ 440.213589][T16711] ? fault_create_debugfs_attr+0x180/0x180 [ 440.219403][T16711] ? lock_downgrade+0x920/0x920 [ 440.224271][T16711] cache_grow_begin+0x90/0xd20 [ 440.229043][T16711] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 440.234796][T16711] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 440.241155][T16711] __kmalloc+0x6b2/0x770 [ 440.245418][T16711] ? mark_held_locks+0xf0/0xf0 [ 440.250307][T16711] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 440.256059][T16711] tomoyo_realpath_from_path+0xcd/0x7b0 [ 440.261631][T16711] ? tomoyo_path_number_perm+0x193/0x520 [ 440.267282][T16711] tomoyo_path_number_perm+0x1dd/0x520 [ 440.272751][T16711] ? tomoyo_path_number_perm+0x193/0x520 [ 440.278486][T16711] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 440.284404][T16711] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.290662][T16711] ? ___might_sleep+0x163/0x280 [ 440.295531][T16711] ? selinux_file_mprotect+0x620/0x620 [ 440.301002][T16711] ? __fget+0x384/0x560 [ 440.305167][T16711] ? ksys_dup3+0x3e0/0x3e0 [ 440.309625][T16711] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 440.315886][T16711] ? fput_many+0x12c/0x1a0 [ 440.320324][T16711] tomoyo_file_ioctl+0x23/0x30 [ 440.325124][T16711] security_file_ioctl+0x77/0xc0 [ 440.330257][T16711] ksys_ioctl+0x57/0xd0 [ 440.334427][T16711] __x64_sys_ioctl+0x73/0xb0 [ 440.339051][T16711] do_syscall_64+0xfd/0x6a0 [ 440.343568][T16711] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.349489][T16711] RIP: 0033:0x459829 [ 440.353400][T16711] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 440.373037][T16711] RSP: 002b:00007f7632cd8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.381469][T16711] RAX: ffffffffffffffda RBX: 00007f7632cd8c90 RCX: 0000000000459829 [ 440.389477][T16711] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 440.397549][T16711] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 16:02:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 440.405707][T16711] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7632cd96d4 [ 440.413787][T16711] R13: 00000000004c413b R14: 00000000004d8210 R15: 0000000000000004 16:02:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0xfffffffffffffd0c) syncfs(r0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0xa, 0xd3e) r2 = dup(r1) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e24, 0xfffffffffffffffd, @dev={0xfe, 0x80, [], 0x2a}, 0x1}, 0xfffffdc2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl(0xffffffffffffffff, 0x0, 0x0) r3 = open(0x0, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./file0\x00', 0xffffffdffffffffb) open$dir(0x0, 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e23, @broadcast}, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0xc4}) r5 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffa) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$unlink(0x9, 0x0, r5) write$cgroup_type(r4, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r3, 0x0, 0x6, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0xffffffffffffffff, 0x0, 0x401, 0x3}}) fallocate(r3, 0x11, 0x2000, 0x9000000) fcntl$setstatus(r2, 0x4, 0x2000) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) r6 = open(&(0x7f0000000140)='./file0\x00', 0x110000145042, 0x0) sendfile(r1, r6, 0x0, 0x88000fbfffffc) 16:02:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 440.534318][T16711] Bluetooth: hci0: Frame reassembly failed (-84) 16:02:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x2, &(0x7f0000001240)=ANY=[@ANYBLOB="00150edbb538000000001b8ed01db977c33a1a2b76cb00849c93b93c75c186c8027d51ac9f435c23958688b3db0c39b8be1843bd1bdb58f2725f74647b25af0ad3625b59a968b4afad01a2ce4fa6dc9cf963c4a36c089f11df7ac15ab4aea667"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xc32, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffcb0}, 0x70) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000012c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) name_to_handle_at(r0, &(0x7f0000001200)='./file0\x00', &(0x7f0000001380)={0x1008, 0x54e8, "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"}, &(0x7f00000023c0), 0x1400) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000002400)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000040)=0x104) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1, 0x8c21}, &(0x7f00000001c0)=0x8) 16:02:10 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x4040, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000180)={0x4}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xc3, 0x579, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x8, 0x2, 0x10000, 0x4, 0x101, 0x9a, 0x1, 0x8, 0x18}}) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) poll(&(0x7f00000000c0)=[{r2, 0x1080}, {r2, 0x8001}], 0x2, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) r3 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x8000, 0x8100) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) 16:02:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 440.721737][ T24] audit: type=1800 audit(1564243330.391:167): pid=16770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=17050 res=0 [ 440.922784][ T24] audit: type=1800 audit(1564243330.591:168): pid=16840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=17050 res=0 [ 442.168092][T11101] Bluetooth: hci0: command 0x1003 tx timeout [ 442.174202][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 444.248070][T11132] Bluetooth: hci0: command 0x1001 tx timeout [ 444.254259][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 446.328176][T11101] Bluetooth: hci0: command 0x1009 tx timeout 16:02:19 executing program 1 (fault-call:3 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 16:02:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0), 0x1, 0x801) socket$bt_cmtp(0x1f, 0x3, 0x5) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x10000, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x800, 0x0) 16:02:19 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:02:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:02:19 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='2000/L'], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) get_thread_area(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="805629cb7a81589005e756f9c1db4e3d2e00822c8eba3c6c2b775d9aac3409000000000000006120981c14edd1d8b445cc365cfe0b5f2b251e94ac0b8b0f9ca3000046"]) utime(&(0x7f0000001580)='./file0\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) 16:02:19 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x300, 0x17b, 0x0, 0x0, 0x0) 16:02:19 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) r2 = timerfd_create(0x4, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) io_uring_setup(0xd20, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x2, 0x173}) r3 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x10000000000, 0x40100) [ 450.223654][T16857] 9pnet: Insufficient options for proto=fd 16:02:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:02:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x80002, 0x101) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x10000000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ppoll(&(0x7f0000000040)=[{r1}], 0xdf, &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0, 0x0) [ 450.265898][T16857] 9pnet: Insufficient options for proto=fd [ 450.296088][T13194] Bluetooth: hci0: Frame reassembly failed (-84) [ 450.318576][T16858] Bluetooth: hci0: Frame reassembly failed (-84) 16:02:20 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x2, 0x9}, 'port1\x00', 0x4, 0x1002, 0x60d, 0x0, 0x5, 0x3, 0x3, 0x0, 0x1, 0xffffffffffffffe1}) perf_event_open(&(0x7f000001d000)={0x8, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:02:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:02:20 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdir(0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r2, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000002c0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000480)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, r2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) getpgid(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000600)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700), &(0x7f00000007c0)=0xc) r3 = getpgrp(0x0) r4 = syz_open_procfs(r3, &(0x7f0000000940)='attr/exec\x00') ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000680)) rename(&(0x7f00000003c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000980)=ANY=[@ANYBLOB="535c200c86bdf8a18355a8a6639b9105ab1072c24e2b98df1388f1adc95900b6cd000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x100000, 0x0) mount(&(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) [ 452.328080][T11132] Bluetooth: hci0: command 0x1003 tx timeout [ 452.334292][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 454.408191][ T17] Bluetooth: hci0: command 0x1001 tx timeout [ 454.414487][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 456.488101][T11132] Bluetooth: hci0: command 0x1009 tx timeout 16:02:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 16:02:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0x277, 0x0, 0x40000080], [0xc1]}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x0, 0x100000}) 16:02:30 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:02:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:02:30 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'team0\x00\x00\x01\x00', 0x9843}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0:\v\x01\xb89\xeb,\xf9\x00]\x00', 0x1b9}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x2000, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)={0x0, 0xc, 0x4, 0x0, {0x77359400}, {0x1, 0xf, 0x5, 0x3, 0x1, 0x2, "b4cee6e1"}, 0xa7ce, 0x7, @fd, 0x4}) 16:02:30 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x200, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000280)={0x1000, "6b305cec4b0691193299f74a53174b81a5266d0c33519d701cc109f524f43673", 0x1, 0x1, 0x5, 0xc00100, 0x4000000, 0xe}) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000300)={0x8, 0x3}) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000000)=""/106, 0x581) getdents64(r1, 0x0, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000200)={0xc05c, "2465ff895b083abb3134fc9cbfcd3e60dacde73c15c4a9aeb54c28710ce4f246", 0x0, 0x1}) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0/bus\x00', 0x20) socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffd) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x3ffc, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socket$inet(0x2, 0x3, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) fcntl$getownex(r4, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00'}, 0x18) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f00000000c0)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, 0x0, &(0x7f0000000080)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80046601, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0x8) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0xb7d, 0x4) times(&(0x7f0000000200)) sync() getsockopt$inet6_tcp_int(r4, 0x6, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007680)=[{{&(0x7f00000006c0)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000001a00)=""/14, 0xe}}], 0x1, 0xffc99a3b, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x0, 0x0) 16:02:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 460.465078][T16993] kvm [16990]: vcpu1, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 460.552455][T17005] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 [ 460.566609][T17002] Bluetooth: hci0: Frame reassembly failed (-84) 16:02:30 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:02:30 executing program 0: socketpair(0x1, 0xa, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000180)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = accept$alg(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 16:02:30 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'team0\x00\x00\x01\x00', 0x9843}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0:\v\x01\xb89\xeb,\xf9\x00]\x00', 0x1b9}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x2000, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)={0x0, 0xc, 0x4, 0x0, {0x77359400}, {0x1, 0xf, 0x5, 0x3, 0x1, 0x2, "b4cee6e1"}, 0xa7ce, 0x7, @fd, 0x4}) 16:02:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38f3c47ddbc4d5415a891b0f21795507fb073ac0a39dd8136d92cb6d92ee6ceb5e62e12a1268e94d068be2c63bdf7942cd1cee42efa68e386d682b08488fa00180000000000000e3"], 0x0, 0x48}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2) sendmsg$nl_route(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getmulticast={0x14, 0x3a, 0x800, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:02:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 462.568144][T11101] Bluetooth: hci0: command 0x1003 tx timeout [ 462.574243][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 464.648124][ T3014] Bluetooth: hci0: command 0x1001 tx timeout [ 464.654227][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 466.728208][T11101] Bluetooth: hci0: command 0x1009 tx timeout 16:02:40 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:02:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:02:40 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0xa9, 0x8202) write$FUSE_STATFS(r1, &(0x7f0000000200)={0x60, 0x0, 0x1, {{0x80000001, 0xfffffffffffffffa, 0x9, 0x7, 0xa5c5, 0xffff, 0x4, 0x495616c1}}}, 0x60) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x50}}, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x2c40) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000180)) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000080)) 16:02:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) getsockopt$inet6_int(r1, 0x29, 0xce, 0x0, 0x0) 16:02:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r0, &(0x7f0000000300)=""/245, 0xf5) fchdir(r0) r1 = inotify_init() r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008915, &(0x7f0000000000)="11dca5055e0bcfe47bf070") inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x1) getdents64(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0xf11, 0x5, 0x7fffffff, 0x20}, 'syz1\x00', 0x38}) 16:02:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x2, &(0x7f0000000000)) 16:02:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 16:02:40 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000240)={0xffff, 0x6, 0xfff, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}]}) connect$pppoe(r0, &(0x7f0000000300)={0x18, 0x0, {0x6, @dev={[], 0x2a}, 'bcsh\x00\x00\x19\x00'}}, 0x7d) name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)={0x65, 0x400000000, "05ff1ba26bf87012fba4c24274a47507d1479be5587306f13993e55e3ee411aa34cc5c23c5b38dc27b0b89147a8305225e5974380539025d1c595b4a73ca1e9df829779bfdd72e261a335264e26cc99f525c8f4efb37444051a7e471bb"}, &(0x7f0000000080), 0x400) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @link_local, 'rose0\x00'}}, 0x1e) lremovexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="73656375726974792e275e7d47504c00b9b52d41dad52ef5aab340bc20b7a674c760b304c577df495c38295fb35ff9b52d2fa1886292846544cf86f828f12b26c3badd954d5b9bb8514eebee374526edb6b2f86d690b1e530bd2902e07922701c77c75f9a25a2c054b6152d529effe09d6acb91230a008776b42502c70f598a9f74b2d595bd9c0868e6f6de4152835e28cec72167e31a2d7bb05eb7a9490f02ad6ae20388242a3612d3c86aa46a5777aa2fc20b4ef37e360ebb4c9e6ee11641ee75490517b8749c1a67e487c348cd8723c522169f425344e53b00e7e911ca3"]) syz_open_pts(r1, 0x40000) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000500)=""/221) [ 470.778933][ T25] Bluetooth: hci0: Frame reassembly failed (-84) 16:02:40 executing program 2: r0 = socket$kcm(0x10, 0x100000000002, 0x4) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000000)=""/190, &(0x7f00000000c0)=0xbe) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003a00), 0x0, 0x0, 0x0, 0xc00e}, 0x0) socket$kcm(0x29, 0x5, 0x0) 16:02:40 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:02:40 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000380)='/dev/bus/usb/00#/00#\x00', 0xffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0xcbf, 0xfffffffffffffffb, 0xd30, 0xe4, 0x9}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000004c0)={r1, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, @in6={0xa, 0x4e23, 0x3, @rand_addr="40973c43c10b1abb4570b9914c73f120", 0xaa6}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0x10001, @dev={0xfe, 0x80, [], 0xc}, 0x8}]}, &(0x7f0000000500)=0x10) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x100000000, 0x2000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x1f}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r4}, &(0x7f0000000280)=0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x5, 0x10000, 0x3ff, 0x9, 0x5}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000001900d927e65de087185082cf0124b0eba06ec4a86e8f32e00586f9835b3e00009148790000f8de84c5e2", 0x2e}], 0x1}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100), 0x1000000000000185) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0xc0a57bc0439524d8, 0xffffffffffffffff, 0x0) 16:02:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 16:02:40 executing program 0: r0 = socket(0x9, 0x4, 0xfffffffffffffffd) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'team0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000340)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f00003aefc8)={0x0, 0xfffffffffffffe88, 0x0}, 0x0) close(r0) 16:02:40 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) close(r0) r1 = socket$kcm(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000240)={'batadv0\x00\x80\x01\xa0\x00\x00\x00$\x00'}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x400080, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000200)=0x78) openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x2001, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000300)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1fffffe}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x410, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8040) 16:02:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) [ 471.077891][T17197] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 16:02:40 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:02:40 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000380)='/dev/bus/usb/00#/00#\x00', 0xffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0xcbf, 0xfffffffffffffffb, 0xd30, 0xe4, 0x9}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000004c0)={r1, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, @in6={0xa, 0x4e23, 0x3, @rand_addr="40973c43c10b1abb4570b9914c73f120", 0xaa6}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0x10001, @dev={0xfe, 0x80, [], 0xc}, 0x8}]}, &(0x7f0000000500)=0x10) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x100000000, 0x2000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x1f}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r4}, &(0x7f0000000280)=0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x5, 0x10000, 0x3ff, 0x9, 0x5}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000001900d927e65de087185082cf0124b0eba06ec4a86e8f32e00586f9835b3e00009148790000f8de84c5e2", 0x2e}], 0x1}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100), 0x1000000000000185) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0xc0a57bc0439524d8, 0xffffffffffffffff, 0x0) [ 471.295642][T17301] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 472.808093][ T3014] Bluetooth: hci0: command 0x1003 tx timeout [ 472.814188][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 474.888153][T11101] Bluetooth: hci0: command 0x1001 tx timeout [ 474.894291][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 476.968148][ T3014] Bluetooth: hci0: command 0x1009 tx timeout 16:02:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x4, &(0x7f0000000000)) 16:02:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 16:02:50 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x1, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x2) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x40002, 0x0) sendto$rose(r1, &(0x7f0000000040)="ced2bf992e92658f4d466915603248e0781e974f432567c823207932ef0b3373a283dd58c7c056335eb07f35948ca31af8da8b03a6bee3aa09a86c423af3ef46416729d28daba2eb", 0x48, 0x840, 0x0, 0x0) 16:02:50 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:02:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_newrule={0x34, 0x20, 0xc00, 0x70bd28, 0x25dfdbfd, {0xa, 0x14, 0x0, 0xb6, 0x2, 0x0, 0x0, 0x3, 0x10001}, [@FRA_SRC={0x14, 0x2, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x3b, &(0x7f0000000080), 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x9, 0xffffff89}]]}}}]}, 0x38}}, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080), &(0x7f0000000140)=0x8) 16:02:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000100)='\x00', 0x8, 0x9, &(0x7f0000001540)=[{&(0x7f00000002c0)="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", 0x1000, 0xc01}, {&(0x7f0000000140)="347fc7c9123107cc57cad2da78d5aef623d54b6b2b4c0d02c5e496c60b12a81d8d7ed1530470ff1367ff493c4c286db47fd7f1a831bed4026905", 0x3a, 0x1ff}, {&(0x7f0000000180)="d3e689a750fd226f02ac738f2f10", 0xe, 0x19}, {&(0x7f00000001c0)="d5892eda5b54aab10fa42b96a1a48fd57e371f07c0624c2bb93f5fc63b93eaa195", 0x21, 0xfffffffffffffffb}, {&(0x7f00000012c0)="52f9df2764c9914bf9a0c785c1fef5d93e2d2c9172a0ebed21cb10e8c8051ad08e86136ecb5eebdb36c77193b4392e9e8b0b7e74394d66bc1fb5ceda00e59b26683ad9275ae026442d10b5c37ed9a6def75508ea0abfc03884ad53ad698fff0f6518f43390ccbfc420348dd28f78e9cbb62340c59b218dd6720b6a2c7e9d6c88e30eab6c1f52584b4222a0", 0x8b, 0x4}, {&(0x7f0000000200)="7c5e8dbd5b", 0x5, 0x5}, {&(0x7f0000001380)="5396673f29659e120d890bd56a07221656fb21c301b93204d2b340a37608073c4d38e098552b233aed5ffd057a8831a5a223b74abfebf311f3eec3624baffdbcd70ce7002128c1aaaa2d2ea7c881da9067253afcba9f68b3761bbb53c285e8f6c12675de9bf4f5659276e8577ab8996fa7fe88e752e84eb6ec5b79a44bf8b27431aef85187ac759e70ddbab9", 0x8c, 0xd872}, {&(0x7f0000001440)="bf5372f47418ce79e440fbc98e501f7223d589db122b7c077eff5d4af5aacb1afbc32347bfd257647bb233774a462270e3f03fc242368c35e89cda1195cacfa3626f474eaa3f321cc9fa7897a643d0c92cadce9bb8aa9943dcfc977a", 0x5c, 0xfffffffffffffff9}, {&(0x7f00000014c0)="80aece6b1815e871451457e1b6f83a02ac607230b3666b7f26c3264aa962ae444d0dd02fe38e81690f480b4ae6e60d8318533b7facc853b33493f1a6ab47d2ab2d3eb5bdb06c6b35e8518b42bee3ce67991142d2", 0x54, 0x3c34}], 0x240000, &(0x7f0000000240)={[{@noquota='noquota'}, {@barrier='barrier'}], [{@obj_role={'obj_role', 0x3d, 'keyringsystem'}}]}) setsockopt$inet_udp_int(r1, 0x11, 0x68, &(0x7f0000000000)=0x84a, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvfrom(r1, 0x0, 0x0, 0x20, 0x0, 0x62) [ 480.944612][T17416] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 480.989671][T17423] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 16:02:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x29, 0x0, 0x0, {0x3}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="afefd574361a7266c67de19372b74b6e"}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0x44}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) 16:02:50 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8943, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x2761, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\x00;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddpr\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r2) close(r3) r4 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0xd9f, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x3, 0x1}, 0x0, 0x0, &(0x7f0000000340)={0x5, 0x9, 0x9, 0xff}, &(0x7f0000000380)=0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=0x8}}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r4, r3, 0x0, 0x1, &(0x7f0000000100)='\x00', r5}, 0x30) r6 = socket$kcm(0xa, 0x2, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000040)={r1}) sendmsg$kcm(r6, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[{0x18, 0x1, 0x1, "ec"}], 0x18}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)={&(0x7f0000000640)='./file0\x00', 0x0, 0x8}, 0x10) recvmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/134, 0x86}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) [ 481.031196][T17427] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 481.054710][ T2668] Bluetooth: hci1: Frame reassembly failed (-84) 16:02:50 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000840)=""/249) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r3 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000080)) sendto$inet6(r1, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:02:50 executing program 0: io_setup(0x1, &(0x7f0000000040)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x2000000000000111, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast1}}, r1}}, 0x48) [ 481.140544][T17432] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 481.167201][T17432] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 481.199102][T17432] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 481.231564][T17436] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 481.282003][ T24] audit: type=1400 audit(1564243370.951:169): avc: denied { getopt } for pid=17431 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 481.282570][T17436] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 16:02:51 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000840)=""/249) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r3 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000080)) sendto$inet6(r1, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 481.350357][T17436] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 16:02:51 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x117, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), r1, 0xfaa}}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f0000000280)=""/241, 0x2e, 0xf1, 0x1}, 0x20) [ 482.968051][ T17] Bluetooth: hci0: command 0x1003 tx timeout [ 482.974295][T16259] Bluetooth: hci0: sending frame failed (-49) [ 483.128052][ T17] Bluetooth: hci1: command 0x1003 tx timeout [ 483.134130][T16259] Bluetooth: hci1: sending frame failed (-49) [ 485.048116][T11105] Bluetooth: hci0: command 0x1001 tx timeout [ 485.054442][T16259] Bluetooth: hci0: sending frame failed (-49) [ 485.208106][T11105] Bluetooth: hci1: command 0x1001 tx timeout [ 485.214349][T16259] Bluetooth: hci1: sending frame failed (-49) [ 487.128069][ T17] Bluetooth: hci0: command 0x1009 tx timeout [ 487.288206][ T17] Bluetooth: hci1: command 0x1009 tx timeout 16:03:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5, &(0x7f0000000000)) 16:03:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 16:03:00 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x100, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000001440)={0x2}) 16:03:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="0affefff7f000000001e6ea64aa8e1c9", 0x10) timerfd_create(0xf, 0x80800) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xcbcfe1b2d23230d4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000f2abd7000fbdbdf2552e955252131094dcf063608e332020000000c3afefc920003000400"], 0x2c}}, 0x10) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x28}}, 0x0) 16:03:00 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000001580)='h', 0x1}], 0x1, 0x63) 16:03:00 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000840)=""/249) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r3 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000080)) sendto$inet6(r1, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:03:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xffffffffffbffff8) recvmmsg(r2, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x16) 16:03:00 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x50000}]}) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, 0x0}, 0x0) getsockname$unix(r0, 0x0, 0x0) [ 491.276337][ T2668] Bluetooth: hci0: Frame reassembly failed (-84) 16:03:01 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:03:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x1}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}]}, &(0x7f0000000180)=0x10) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={r1}, 0x8) 16:03:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x1}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r1}, &(0x7f0000000340)=0x98) 16:03:01 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 493.288066][T11101] Bluetooth: hci0: command 0x1003 tx timeout [ 493.294159][T16259] Bluetooth: hci0: sending frame failed (-49) [ 493.368031][T11101] Bluetooth: hci1: command 0x1003 tx timeout [ 493.374306][T16259] Bluetooth: hci1: sending frame failed (-49) [ 495.368229][T11132] Bluetooth: hci0: command 0x1001 tx timeout [ 495.374338][T16259] Bluetooth: hci0: sending frame failed (-49) [ 495.448071][T11132] Bluetooth: hci1: command 0x1001 tx timeout [ 495.454190][T16259] Bluetooth: hci1: sending frame failed (-49) [ 497.448049][T11101] Bluetooth: hci0: command 0x1009 tx timeout [ 497.528132][T11101] Bluetooth: hci1: command 0x1009 tx timeout 16:03:11 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 16:03:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x1}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x7d, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x8) 16:03:11 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:03:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x10, &(0x7f0000000000)) 16:03:11 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) 16:03:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 16:03:11 executing program 2: 16:03:11 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) getpeername(r0, 0x0, &(0x7f0000001840)) [ 501.477343][ T21] Bluetooth: hci0: Frame reassembly failed (-84) [ 501.530785][ T21] Bluetooth: hci1: Frame reassembly failed (-84) 16:03:11 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:03:11 executing program 2: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4d1bccd3d2bb03000000148c0f34"], 0xe}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:03:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x1}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x76, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x8) [ 501.637309][T17838] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 501.663114][T17838] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 16:03:11 executing program 5: r0 = socket$packet(0x11, 0x20000000000002, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xb1}, {0x80000006}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x40001b5, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x100000001, 0x1, 0x7ff, 0x6, 0x81, 0x1ff, 0x3, 0x7fffffff}, &(0x7f0000000100)={0x9}, 0x0, 0x0, 0x0) 16:03:11 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x800000000050000}]}) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) [ 501.732619][T17848] ptrace attach of "/root/syz-executor.2"[17846] was attempted by "/root/syz-executor.2"[17848] 16:03:11 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8000008001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2008000) sendfile(r0, r1, 0x0, 0xf70) 16:03:11 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 502.000655][ T24] audit: type=1800 audit(1564243391.671:170): pid=17963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17041 res=0 [ 502.010320][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 502.032874][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 503.528132][ T22] Bluetooth: hci0: command 0x1003 tx timeout [ 503.534348][T16259] Bluetooth: hci0: sending frame failed (-49) [ 503.608084][ T22] Bluetooth: hci1: command 0x1003 tx timeout [ 503.614194][T16259] Bluetooth: hci1: sending frame failed (-49) [ 505.608060][T11132] Bluetooth: hci0: command 0x1001 tx timeout [ 505.614231][T16259] Bluetooth: hci0: sending frame failed (-49) [ 505.688041][T11132] Bluetooth: hci1: command 0x1001 tx timeout [ 505.694154][T16259] Bluetooth: hci1: sending frame failed (-49) [ 507.688050][ T22] Bluetooth: hci0: command 0x1009 tx timeout [ 507.768103][ T22] Bluetooth: hci1: command 0x1009 tx timeout 16:03:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x929, &(0x7f0000000000)) 16:03:21 executing program 0: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x23aaaac) unlink(&(0x7f0000000080)='./file0\x00') clone(0x1100108, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000440)='./file1\x00'}, 0x10) ptrace$setopts(0x4206, r1, 0x0, 0x0) ftruncate(r0, 0x0) 16:03:21 executing program 2: symlink(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000340)={0x80, @time, 0xffffffffffff2ad0, {0x0, 0xc4}, 0x0, 0x1}) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x7, 0x7, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000280)={0x0}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x323de62f, 0x0) write$binfmt_elf64(r3, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180), &(0x7f00009b1ffc)) gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000013) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) quotactl(0x0, 0x0, 0x0, 0x0) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) 16:03:21 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:03:21 executing program 5: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000740)=ANY=[], 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffff}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) 16:03:21 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x800000000050000}]}) r0 = socket$inet(0x2, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x0) 16:03:21 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000840)=""/249) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r3 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000080)) sendto$inet6(r1, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 511.759022][ T2668] Bluetooth: hci0: Frame reassembly failed (-84) 16:03:21 executing program 2 (fault-call:2 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:03:21 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:03:21 executing program 5: r0 = socket$inet(0x11, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x16e, 0x4) sendmsg(r0, &(0x7f000087dfc8)={&(0x7f000005e000)=@nfc={0x27, 0x7}, 0x80, 0x0}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) recvmsg(r0, &(0x7f0000001e00)={0x0, 0x0, 0x0}, 0x2000) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x400000) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x24f5, 0x0, 0x3}}) 16:03:21 executing program 4: fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="968d9b8d9f5e40e3aad3eba0965c2ee983bd4274ff01c4524a613042bb8aa8a6373edda3bfaa2b7f9609af27e1c28f8a39a8440143ff2b65b2be3b25c0a844b2c88f55773fe990b6a1a214033b4378caaa2bd5980123588a3243809d1f2db5e3dc1de46bb3d7a4c660125c5322c5715ea40745404f5ac262054c05641d", 0x7d, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x28000003, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) write(r3, &(0x7f0000000280)="a2", 0x1) r4 = accept(r2, 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='net/snmp6\x00') ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f0000000440)) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x48000) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000000)=@hopopts={0x99, 0xa, [], [@hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x100000001}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x100}, @hao={0xc9, 0x10, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, @hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @remote}]}, 0x60) r6 = semget(0x3, 0x4, 0x200) semctl$GETVAL(r6, 0x4, 0xc, &(0x7f0000000080)=""/235) [ 512.048909][T18104] FAULT_INJECTION: forcing a failure. [ 512.048909][T18104] name failslab, interval 1, probability 0, space 0, times 0 [ 512.089343][T18138] encrypted_key: master key parameter '¯'áŠ9¨DCÿ+e²¾;%À¨D²ÈUw?鶡¢;Cxʪ+Õ˜#XŠ2C€-µãÜäk³×¤Æ`\S"Åq^¤E@OZÂbLd' is invalid [ 512.116793][T18104] CPU: 1 PID: 18104 Comm: syz-executor.2 Not tainted 5.3.0-rc1+ #78 [ 512.124838][T18104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.134937][T18104] Call Trace: [ 512.138257][T18104] dump_stack+0x172/0x1f0 [ 512.142612][T18104] should_fail.cold+0xa/0x15 [ 512.147233][T18104] ? fault_create_debugfs_attr+0x180/0x180 [ 512.153051][T18104] ? lock_downgrade+0x920/0x920 [ 512.157914][T18104] ? ___might_sleep+0x163/0x280 [ 512.162784][T18104] __should_failslab+0x121/0x190 [ 512.167741][T18104] should_failslab+0x9/0x14 [ 512.172350][T18104] __kmalloc+0x2e0/0x770 [ 512.173975][ T24] audit: type=1400 audit(1564243401.781:171): avc: denied { create } for pid=18143 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 512.176614][T18104] ? mark_held_locks+0xf0/0xf0 [ 512.176633][T18104] ? _parse_integer+0x190/0x190 [ 512.176656][T18104] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 512.205201][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 512.206177][T18104] tomoyo_realpath_from_path+0xcd/0x7b0 [ 512.206196][T18104] ? tomoyo_path_number_perm+0x193/0x520 [ 512.206218][T18104] tomoyo_path_number_perm+0x1dd/0x520 [ 512.244443][T18104] ? tomoyo_path_number_perm+0x193/0x520 [ 512.250180][T18104] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 512.255998][T18104] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 512.262259][T18104] ? ___might_sleep+0x163/0x280 [ 512.267133][T18104] ? selinux_file_mprotect+0x620/0x620 [ 512.272619][T18104] ? __fget+0x384/0x560 [ 512.276783][T18104] ? ksys_dup3+0x3e0/0x3e0 [ 512.281218][T18104] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 512.287475][T18104] ? fput_many+0x12c/0x1a0 [ 512.292129][T18104] tomoyo_file_ioctl+0x23/0x30 [ 512.296905][T18104] security_file_ioctl+0x77/0xc0 [ 512.301853][T18104] ksys_ioctl+0x57/0xd0 [ 512.306004][T18104] __x64_sys_ioctl+0x73/0xb0 [ 512.310627][T18104] do_syscall_64+0xfd/0x6a0 [ 512.315131][T18104] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 512.321028][T18104] RIP: 0033:0x459829 [ 512.324931][T18104] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 512.344547][T18104] RSP: 002b:00007fd79d65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 512.352969][T18104] RAX: ffffffffffffffda RBX: 00007fd79d65bc90 RCX: 0000000000459829 [ 512.360941][T18104] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 512.369113][T18104] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 512.377122][T18104] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd79d65c6d4 16:03:21 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x20121db75e, 0x200000000000) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)=""/22, 0x16}], 0x8}}], 0x1, 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f00000003c0)=""/226) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000000)={[{0x8, 0x79ca, 0xc687, 0x7ff, 0x76, 0xfb3b, 0x5, 0x4, 0x3, 0xe36, 0x10000, 0x8, 0x7}, {0x20, 0x7, 0x7, 0x3, 0x7f, 0x6, 0x8, 0x8, 0x3ff, 0xffffffff, 0xffff, 0x3}, {0x7, 0x80, 0x4, 0x80000001, 0x0, 0xfffffffffffffff8, 0x9, 0x3, 0xb1e4, 0x1, 0x100000001, 0x7fff, 0x8793}], 0x6}) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f00000000c0)={0x5, "8609299540d87349c32ec2403591e9964587e45799a9749a547378568ae7be93", 0x2, 0x1}) [ 512.385096][T18104] R13: 00000000004c250e R14: 00000000004d5930 R15: 0000000000000004 [ 512.466879][T18138] encrypted_key: master key parameter '¯'áŠ9¨DCÿ+e²¾;%À¨D²ÈUw?鶡¢;Cxʪ+Õ˜#XŠ2C€-µãÜäk³×¤Æ`\S"Åq^¤E@OZÂbLd' is invalid [ 512.513896][T18104] ERROR: Out of memory at tomoyo_realpath_from_path. [ 512.547339][T13194] Bluetooth: hci1: Frame reassembly failed (-84) [ 513.768101][ T3219] Bluetooth: hci0: command 0x1003 tx timeout [ 513.774238][T16259] Bluetooth: hci0: sending frame failed (-49) [ 514.568120][ T3219] Bluetooth: hci1: command 0x1003 tx timeout [ 514.574261][T16259] Bluetooth: hci1: sending frame failed (-49) [ 515.848138][ T3219] Bluetooth: hci0: command 0x1001 tx timeout [ 515.854264][T16259] Bluetooth: hci0: sending frame failed (-49) [ 516.648197][ T3219] Bluetooth: hci1: command 0x1001 tx timeout [ 516.654650][T16259] Bluetooth: hci1: sending frame failed (-49) [ 517.928166][T11105] Bluetooth: hci0: command 0x1009 tx timeout [ 518.728146][T11105] Bluetooth: hci1: command 0x1009 tx timeout 16:03:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x1277, &(0x7f0000000000)) 16:03:31 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:03:31 executing program 0: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @dev}, &(0x7f00000000c0)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newtclass={0x2c, 0x28, 0x302, 0x70bd2c, 0x25dfdbfc, {0x0, r3, {0x10, 0xd}, {0xf, 0x9}, {0x0, 0xfffd}}, [@TCA_RATE={0x8, 0x5, {0xcb8d, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x20040010) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000000)) splice(r0, 0x0, r5, 0x0, 0x1ffffd, 0x0) 16:03:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x1f9) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 16:03:31 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x101001) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) syz_emit_ethernet(0xfffffec6, &(0x7f0000000000)={@local, @local, [], {@canfd={0xd, {{0x2, 0x8, 0xc308, 0x16e}, 0x40, 0x3, 0x0, 0x0, "300081740289809e3cdc0cf7332940741ac757ad5c0affe02ad22a82d01f1d817bd3f38466a0837f1f53871a7cd89d3433ecb8c30ae2fd5fb13b27d8d63619be"}}}}, 0x0) 16:03:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000840)="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", 0x1000, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="adc9cdf22a2f049f6b9a85ef44b6c1f0610783f5170372ef2b8eecbe0399ec42f84db83a5af5ce332a959b6866e45611db298f3d1cf922cb75af94a1285f157b57d00ff107272302cbe26f21bfeb4b901c1bdbf1251a86863551a8021ab0d3cc0bc99e98676212ee2b04eef4ce23488995826ba6c492c00b3d667679af752f0344cbb7a6df3c60504639d0742a6c942b60efbfc460112064714708e66a1de53e", 0xa0, 0xfffffffffffffffb) socket$rxrpc(0x21, 0x2, 0x2) r2 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000440)="517905adffb72a515dcf4f800c7648a7f6e58b6758c3e671725e0fb5d5b07d0f1a9ccf6aeb2d259d4aa9e69bb95cf2a308c851b774d53056036ad09136740bf81f513a285960cadeecc62eea10f73433eab7fd8d1956c0d75786af1403b58a372f3c3f751d4a0d", 0x67, 0x0) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r0, r1, r2}, &(0x7f0000000500)=""/117, 0x75, &(0x7f0000000640)={&(0x7f0000000600)={'sha224-generic\x00'}, &(0x7f0000001840)="c77123483659ccd521ca058a1e97417c27c317295df48c19b70755c0f9541a263f9da2668986873ffff2745f5b1c30ff52aeb65373a9ed4efb526d5f7e96896c35ef57209c1d4c8f20cb878fc696897a52ac7bfd0a23504387d93a3831aeef4eb5b89efc3ecf0db82dc9f2945d80940b92448ff79d3ae079b5636e333719fd8f43b11754628a82f1514fc3596384bf699cd870164da6f01acc236faab419c4654d3c58b7204f9e4bb2bc9b84e251b8eca07a5685eef26700107bc77f5b1a1cb4a203526bf1c58a1c458e1578", 0xcc}) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8000, 0x100) r4 = add_key$user(&(0x7f0000003f40)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000580)={r4, r3, r3}, &(0x7f0000000740)=""/243, 0x34b, &(0x7f0000000700)={&(0x7f00000001c0)={'sm3\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfe\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, &(0x7f0000000700)}) [ 521.951926][ T2668] Bluetooth: hci0: Frame reassembly failed (-84) [ 521.960807][ T2668] Bluetooth: hci0: Frame reassembly failed (-84) 16:03:31 executing program 4: setresuid(0x0, 0xee01, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/attr/fscreate\x00\xf7\xa5\xf7l\x8f\xd4U5(\xaf\xcc\x10\xae\x8e\xf3J$\x00p\rO\'w\xad\xb1\x7f\x9b\x9d,t\xd1\x80BD\x83\xbbC\x89\xe2\xee\ak\x9f\x17[\xb4\t.\xf6\\\xb6\x06\x1f1Z`\xa1\x01', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@empty, @in6=@dev}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) r3 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x80001) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000280)=""/117) ioctl$void(r3, 0xc0045c79) [ 522.234276][ T24] audit: type=1400 audit(1564243411.901:172): avc: denied { setattr } for pid=18248 comm="syz-executor.4" name="fscreate" dev="proc" ino=51736 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 16:03:32 executing program 2 (fault-call:2 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:03:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000840)="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", 0x1000, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="adc9cdf22a2f049f6b9a85ef44b6c1f0610783f5170372ef2b8eecbe0399ec42f84db83a5af5ce332a959b6866e45611db298f3d1cf922cb75af94a1285f157b57d00ff107272302cbe26f21bfeb4b901c1bdbf1251a86863551a8021ab0d3cc0bc99e98676212ee2b04eef4ce23488995826ba6c492c00b3d667679af752f0344cbb7a6df3c60504639d0742a6c942b60efbfc460112064714708e66a1de53e", 0xa0, 0xfffffffffffffffb) socket$rxrpc(0x21, 0x2, 0x2) r2 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000440)="517905adffb72a515dcf4f800c7648a7f6e58b6758c3e671725e0fb5d5b07d0f1a9ccf6aeb2d259d4aa9e69bb95cf2a308c851b774d53056036ad09136740bf81f513a285960cadeecc62eea10f73433eab7fd8d1956c0d75786af1403b58a372f3c3f751d4a0d", 0x67, 0x0) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r0, r1, r2}, &(0x7f0000000500)=""/117, 0x75, &(0x7f0000000640)={&(0x7f0000000600)={'sha224-generic\x00'}, &(0x7f0000001840)="c77123483659ccd521ca058a1e97417c27c317295df48c19b70755c0f9541a263f9da2668986873ffff2745f5b1c30ff52aeb65373a9ed4efb526d5f7e96896c35ef57209c1d4c8f20cb878fc696897a52ac7bfd0a23504387d93a3831aeef4eb5b89efc3ecf0db82dc9f2945d80940b92448ff79d3ae079b5636e333719fd8f43b11754628a82f1514fc3596384bf699cd870164da6f01acc236faab419c4654d3c58b7204f9e4bb2bc9b84e251b8eca07a5685eef26700107bc77f5b1a1cb4a203526bf1c58a1c458e1578", 0xcc}) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8000, 0x100) r4 = add_key$user(&(0x7f0000003f40)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000580)={r4, r3, r3}, &(0x7f0000000740)=""/243, 0x34b, &(0x7f0000000700)={&(0x7f00000001c0)={'sm3\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfe\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, &(0x7f0000000700)}) 16:03:32 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:03:32 executing program 4: r0 = msgget(0x0, 0x2) msgsnd(r0, &(0x7f0000000080)={0x1}, 0x8, 0x0) modify_ldt$read(0x0, &(0x7f0000000040), 0x0) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/43}, 0x33, 0xfffffffffffffffd, 0x0) 16:03:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x8c, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x21, 0x401, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) [ 523.261184][T18265] FAULT_INJECTION: forcing a failure. [ 523.261184][T18265] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 523.274448][T18265] CPU: 0 PID: 18265 Comm: syz-executor.2 Not tainted 5.3.0-rc1+ #78 [ 523.282522][T18265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.292580][T18265] Call Trace: [ 523.295887][T18265] dump_stack+0x172/0x1f0 [ 523.300231][T18265] should_fail.cold+0xa/0x15 [ 523.304833][T18265] ? fault_create_debugfs_attr+0x180/0x180 [ 523.310658][T18265] ? lock_downgrade+0x920/0x920 [ 523.315520][T18265] should_fail_alloc_page+0x50/0x60 [ 523.320718][T18265] __alloc_pages_nodemask+0x1a1/0x8f0 [ 523.320733][T18265] ? __alloc_pages_slowpath+0x2520/0x2520 [ 523.320747][T18265] ? avc_has_extended_perms+0x8e4/0x10f0 [ 523.320764][T18265] ? unwind_get_return_address+0x61/0xa0 [ 523.320777][T18265] ? profile_setup.cold+0xbb/0xbb [ 523.320793][T18265] ? fault_create_debugfs_attr+0x180/0x180 [ 523.320808][T18265] ? lock_downgrade+0x920/0x920 [ 523.320823][T18265] cache_grow_begin+0x90/0xd20 [ 523.320844][T18265] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 523.369471][T18265] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 523.375727][T18265] __kmalloc+0x6b2/0x770 [ 523.380031][T18265] ? mark_held_locks+0xf0/0xf0 [ 523.384790][T18265] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 523.390499][T18265] tomoyo_realpath_from_path+0xcd/0x7b0 [ 523.396067][T18265] ? tomoyo_path_number_perm+0x193/0x520 [ 523.401715][T18265] tomoyo_path_number_perm+0x1dd/0x520 [ 523.407171][T18265] ? tomoyo_path_number_perm+0x193/0x520 [ 523.412805][T18265] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 523.418619][T18265] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 523.424884][T18265] ? ___might_sleep+0x163/0x280 [ 523.429726][T18265] ? selinux_file_mprotect+0x620/0x620 [ 523.435169][T18265] ? __fget+0x384/0x560 [ 523.439322][T18265] ? ksys_dup3+0x3e0/0x3e0 [ 523.443740][T18265] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 523.450050][T18265] ? fput_many+0x12c/0x1a0 [ 523.454475][T18265] tomoyo_file_ioctl+0x23/0x30 [ 523.459925][T18265] security_file_ioctl+0x77/0xc0 [ 523.464857][T18265] ksys_ioctl+0x57/0xd0 [ 523.469009][T18265] __x64_sys_ioctl+0x73/0xb0 [ 523.473598][T18265] do_syscall_64+0xfd/0x6a0 [ 523.478104][T18265] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 523.483997][T18265] RIP: 0033:0x459829 [ 523.487879][T18265] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 523.507493][T18265] RSP: 002b:00007fd79d65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 523.515932][T18265] RAX: ffffffffffffffda RBX: 00007fd79d65bc90 RCX: 0000000000459829 [ 523.523915][T18265] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 523.531894][T18265] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 523.540750][T18265] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd79d65c6d4 [ 523.548715][T18265] R13: 00000000004c250e R14: 00000000004d5930 R15: 0000000000000004 [ 523.569086][ T2668] Bluetooth: hci1: Frame reassembly failed (-84) [ 524.008287][T11105] Bluetooth: hci0: command 0x1003 tx timeout [ 524.014584][T16259] Bluetooth: hci0: sending frame failed (-49) [ 525.608106][T11105] Bluetooth: hci1: command 0x1003 tx timeout [ 525.614524][T16259] Bluetooth: hci1: sending frame failed (-49) [ 526.088220][T11105] Bluetooth: hci0: command 0x1001 tx timeout [ 526.094855][T16259] Bluetooth: hci0: sending frame failed (-49) [ 527.688137][T11105] Bluetooth: hci1: command 0x1001 tx timeout [ 527.694400][T16259] Bluetooth: hci1: sending frame failed (-49) [ 528.168090][ T3219] Bluetooth: hci0: command 0x1009 tx timeout [ 529.768038][ T3219] Bluetooth: hci1: command 0x1009 tx timeout 16:03:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x4b45, &(0x7f0000000000)) 16:03:41 executing program 0: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x9c27, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlink(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) write$selinux_create(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="baf1bc9104cf8c6968a96488d112018b9d7bf156ab27070b9d48e4047aab13514ec024c147aee52c65f778deb2350a8314f0649570afa51dbe47e1adb36f2ea22b65b68b9d6721d578d578f692c8677ed8d62247d1a8e86e2d14fc1c80a0bdcd4f49dccf64a24c01d13cd6c2634bc8c1f2f4029ef1ad400391ae6ed01836ce190eabb1f7351fd92a93df8ee9e6b06c1483278b8a99459c01de2bfc1170cb06945c53c50a3f8be45136f31d6fdc417f083f0a4a8e8f61859594345de5932ebc39121f02f6120fc63af48c2522870a22ef1dccffdce89293078c87bd85daaa3f9784a50195d2240d50ec5161688ab8f7791d0d3d316a05aba728"], 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000280)='TRUE', 0x4, 0x0) syz_emit_ethernet(0x100000270, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x7, 0x3}}}}}, &(0x7f0000000040)) 16:03:41 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x0, 0x50323234, 0xf00, 0x870}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x59) 16:03:41 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:03:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\x00\x00') getdents(r0, &(0x7f00000000c0)=""/89, 0xf5a266a37811fa08) getdents(r0, 0x0, 0x0) r1 = getgid() setgid(r1) 16:03:41 executing program 4: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000180)=@default) r2 = socket$inet(0x2, 0x4000020000000001, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x164, 0x20000801, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x51) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r2, &(0x7f0000000000), 0x11528767ca1ebb5, 0xc0, 0x0, 0xfeffffff00000000) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x1f, r4}, 0x14) openat$cgroup_int(r3, &(0x7f00000008c0)='cgroup.clone_children\x00', 0x2, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{&(0x7f0000000240)=@caif=@util, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/204, 0xcc}, {&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/6, 0x6}], 0x3}, 0x400}, {{&(0x7f0000000500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/186, 0xba}, {&(0x7f0000000640)=""/145, 0x91}, {&(0x7f0000000700)=""/178, 0xb2}], 0x3}, 0x8}], 0x2, 0x2, &(0x7f0000000880)={0x0, 0x1c9c380}) 16:03:41 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x0, 0x50323234, 0xf00, 0x870}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x59) [ 532.164854][ T21] Bluetooth: hci0: Frame reassembly failed (-84) 16:03:43 executing program 2 (fault-call:2 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:03:43 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:03:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5452, &(0x7f00003b9fdc)={0x9}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) 16:03:43 executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 16:03:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x41, 0x0, &(0x7f0000001000)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x200000, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)={@empty, @rand_addr=0x3, 0x1, 0x6, [@local, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @loopback, @loopback, @loopback]}, 0x28) r2 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, 0x0, 0xf8) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000040)=""/219) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000140)={0xb, @sliced={0x6, [0x4, 0x0, 0x3, 0xfffffffffffffffd, 0x1000, 0x0, 0xffffffff, 0xfffffffffffffffe, 0x6e05, 0x1f, 0x7, 0x8000, 0x5, 0x9, 0x1, 0x8, 0x100000000, 0x6, 0xfffffffffffffffa, 0x259, 0xffffffff, 0xffffffffffffff48, 0xba3, 0x0, 0x1ff, 0xfffffffffffffff8, 0x0, 0x4, 0xfffffffeffffffff, 0x2, 0x5, 0x1, 0x5, 0xfffffffffffffbff, 0x3, 0xfffffffffffffff8, 0x8, 0x2, 0x0, 0x7, 0x6, 0x4, 0x5, 0x1ac2, 0x7, 0x185b, 0x5b8, 0x8], 0xfff}}) [ 534.127699][T18416] FAULT_INJECTION: forcing a failure. [ 534.127699][T18416] name failslab, interval 1, probability 0, space 0, times 0 [ 534.167475][T18416] CPU: 0 PID: 18416 Comm: syz-executor.2 Not tainted 5.3.0-rc1+ #78 [ 534.175495][T18416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.185557][T18416] Call Trace: [ 534.188864][T18416] dump_stack+0x172/0x1f0 [ 534.193220][T18416] should_fail.cold+0xa/0x15 [ 534.197826][T18416] ? fault_create_debugfs_attr+0x180/0x180 [ 534.203648][T18416] ? page_to_nid.part.0+0x20/0x20 [ 534.208687][T18416] ? ___might_sleep+0x163/0x280 [ 534.213556][T18416] __should_failslab+0x121/0x190 [ 534.218506][T18416] should_failslab+0x9/0x14 [ 534.223016][T18416] kmem_cache_alloc_trace+0x2d3/0x790 [ 534.228405][T18416] ? rwlock_bug.part.0+0x90/0x90 [ 534.233358][T18416] ? ___might_sleep+0x163/0x280 [ 534.238268][T18416] hci_alloc_dev+0x43/0x1d80 [ 534.242983][T18416] hci_uart_tty_ioctl+0x306/0xc00 [ 534.248098][T18416] tty_ioctl+0xaf9/0x14f0 [ 534.252450][T18416] ? hci_uart_init_work+0x180/0x180 [ 534.257701][T18416] ? do_tty_hangup+0x30/0x30 [ 534.262310][T18416] ? tomoyo_path_number_perm+0x459/0x520 [ 534.268018][T18416] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 534.274277][T18416] ? tomoyo_path_number_perm+0x263/0x520 [ 534.279920][T18416] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 534.285736][T18416] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 534.291993][T18416] ? ___might_sleep+0x163/0x280 [ 534.296948][T18416] ? do_tty_hangup+0x30/0x30 [ 534.301548][T18416] do_vfs_ioctl+0xdb6/0x13e0 [ 534.306275][T18416] ? ioctl_preallocate+0x210/0x210 [ 534.311397][T18416] ? selinux_file_mprotect+0x620/0x620 [ 534.316878][T18416] ? __fget+0x384/0x560 [ 534.321047][T18416] ? ksys_dup3+0x3e0/0x3e0 [ 534.325476][T18416] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 534.331725][T18416] ? fput_many+0x12c/0x1a0 [ 534.336168][T18416] ? tomoyo_file_ioctl+0x23/0x30 [ 534.341120][T18416] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 534.347378][T18416] ? security_file_ioctl+0x8d/0xc0 [ 534.352589][T18416] ksys_ioctl+0xab/0xd0 [ 534.356756][T18416] __x64_sys_ioctl+0x73/0xb0 [ 534.361360][T18416] do_syscall_64+0xfd/0x6a0 [ 534.365875][T18416] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 534.371880][T18416] RIP: 0033:0x459829 [ 534.375783][T18416] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 534.395679][T18416] RSP: 002b:00007fd79d65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 534.404105][T18416] RAX: ffffffffffffffda RBX: 00007fd79d65bc90 RCX: 0000000000459829 [ 534.412087][T18416] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 534.420064][T18416] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 534.428038][T18416] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd79d65c6d4 [ 534.436045][T18416] R13: 00000000004c250e R14: 00000000004d5930 R15: 0000000000000004 [ 534.456853][ T3014] Bluetooth: hci0: command 0x1003 tx timeout [ 534.472476][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 534.479446][T18416] Bluetooth: Can't allocate HCI device [ 536.488046][ T17] Bluetooth: hci0: command 0x1001 tx timeout [ 536.494139][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 538.568300][ T3014] Bluetooth: hci0: command 0x1009 tx timeout 16:03:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x4b47, &(0x7f0000000000)) 16:03:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x80000000) close(r0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f0000000000)="a200005c", 0x4) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) r2 = memfd_create(&(0x7f0000000100)='\x00\x00:\xc23/\x8c^\x00s\xda\xb8\x8c\xfb\x99\xcb\x83s\x96\x1d_\x9d\x9eg\x05\x8bb\x04=\xb1#8\xfc\xf1\xf5\xe5D-5\xf1\xd2\xb2\xc8\xcc\xd03\xad\xf1\xb2\xd5\x97\xf4w\xb4\x0e', 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000000)={0x14}, 0x14) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x2000000000011, r2, 0x0) write(r2, &(0x7f0000002040)="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", 0x274) futex(0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getpeername$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x200) ftruncate(r4, 0x88001) sendfile(r0, r4, 0x0, 0x800000000024) 16:03:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000002480)={0x4, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff}, [], "f9ee9bf4721052ca89b1730eb8f79bd37a1d0049657162c7a8884ab4e83bdaf11dffca6864929ffc011759f93edea358016808b70cedfb8ba297730be56340f0171bdfd16ca850b76bc787f6869e61823c4b8ef974681d6e330b1df540e7392cb0a86b87a4ad2781279566d8199b8cd228dea5bef4308f300e020586b5f691b8d4d93c6ba7bfb9367b203d575bc1da9d32c5b800ccf450f9a670dddcd25ff6dd8286deea8ac1a58f7ce0082df6d6a51bfcf15bd3a70abe7bdfab11b4426645ec2167539b3ddafdc94592cd2eda041fc7406fff75fcdb4cb60f9d04b762bc8510be733c55fafbd9d5be53fabfb41dddab38f75675c3f2e435aa8f413a30c1aeef04b097e1b83635202ae89e68c6571192ead7f88556aa2d2c19f8eba5b3d7935ed5470b5c7e299b8a9bb8f0989ead4ab21c75aaeb3fd3164b3a873f7819a5bddfbd3a038f0624e38d1b5f2b67b01347a6df3ab24a0555ad970bd341761dc251969cab76eae25652459451c61d56e974b73d4bfa0e586292912260f79b0311f32a9756a93adf14d48976f8812f2fc3a0076b143281196b0db316223456a2cfa04997f75eb79561c94f5d17d1d5bba3eee85944ca9e2c48e768f1cf6fcb0ef6a04529837db8be39b066d442a95e12d613c88ef3cbf9fd3e0f18080f38ada7169324d8f1c8faf6567a4f19c59ad7c363bc15dedf3f0b0c5a73b7a46baca86bfb77a8f7d5a68551e0fd8d7967ff87dbf46533ffed0056f8459db82317012b2a0a6552ace622bbbebe456a66eed6c33107c494d512369177318d2955d5b764a22c66cf1c4e3e655beb78074c5dc41aeae9a172f16eb5b17063d6f1ad4523f613704c40957a2e255a582037487fe1f96db995ccb49df4db5b451dfbcede05af5931db91b707b35ea1f75e94a87b59367aa669f4939f0db528dba07721ea04669370b4b7234be59e2a6a23797a9d19baf40352dd9526f0d320b3cffd5b7a0c11bcf5d09f90c5cb6e4b53ca0efe58a789669bc9c824ce4272e84e6abe69d9c95e55a48ee7a2cb5f73b9b6758b394566946e81b3c5ea90f294ef465020c0f7a26c37b9413e9cbcc9caccb2eaef97ac98a27f1016739a53a94d8f105cdc398a1b42ee21e1869a53893e31f50ee24af146dc304ad2a5c1ac5b1e960a7454076aa63980b71883081268308c51064c7c50946b827fd89ec673c301573f2022978d98f5dc99d9a52388506ee7a68400d94badea4e240237188d0085cf88853930332594d101186a14bff97205f7d0b9b3bf76a45da4e3f70761f3f232b742981be7f473db3886262e962f14da0b69bbd64d51b57adb1793f2d695ebf4d8012e4cbb13377c459aef880c11d32972f9634f229863fb31ac0dea8bd323d1dee5ed6ff5f4aa9a59c5601ecd082186bcd7e0b7ea09f922f6acfafbd54c78dfc7698bae6d9c08630fcb4abd484888f6b996ad3791cc5e1026a29a82665af513b31bdcbe0778a79920563ff7170b67873f76301fe2e92e1801e96f79664d867d400e17f2839eedf2c36eaa968aa65175105a8d1aa242699c3cccf662481d758b0009abb728f8ff66f928cf736cf815e254cd9a8a961573e941cdd89323de48b3855ea818db77d8f4b376af1d3a48bf4315f2eb2806f7579c9596ed7d4a5170a49320258e6b2418d0c373ff4545c74edeaabf8ff5e002df5d7daa7895e448a077b0fc1600f9446425c61cac0e20fcf044140f4aad2db580f012114e8c7ce76c19476ec74154d2f294d7c263159de9751b2f728e68c82c6e51044e58002c8330fd2634f9cabc519c69d6aecf45e17477e30240e428c828900cb5ec6170ae1c683bc5b6f12844a38953e0c5335f4ed5a649dec219346690de4262e87b0e3989f3b5f1fee009e9403ed2a7e88b3ad8d9063df2cb475d59170d6fa588593b891e9698c5311b84bc0f7a23dd7b68b32c12e92776f0a15850cb78107d6dc2231dba87253e310725a5d90394cac8672b1c62103ec268a9995eb7a722c658385b7959dfcab869fa56ce40770eb5199effe57adec2abdf9c7522d6a698a8613a7209471e8efecc561c8dd5de783622ce00e5522f46fcb1d662aee4928928fe34390ea5cb79c94e407dd3c28682087d250e85efed63e9002287b8f92f9678cfcac508901b2c5dc78e765d3b08a6d82a7def2f405d3b66e10a471b71cb78816aa0a6dbcd684fe5308ca03cffa5d6a6a5746d818145db35290614c1a89eba00eeb0be3372a6842fcb310f28102b3708c20748165b10b08dd1b5ca12e263357fa1e4618751b8cda77d79b5f9617b1c3bef46a18311154f2e7369ac511b1fa0c578fecf0d22269d4252afa8d0f7649866bd64da2e8441c79c6e51e90ed4f1047d3a41ce79a3df504cd95a2c384caa6a9070efc202cacef02445849c9938ddb4dbab7ce61d5b06decb5697c56e223da0c078d5a66b1e29735c9956ed3201bf20450eb5f2df2e05b5a5a5c9b1d986d84500d71b6e82cde9e06bb57747752a5f1c18f6fb705ff69381840f8f8dabd1c9f30a78140f8c576fc5ececbd6e783d98855150c06137d0b80d387de2048b809692942d79c0a2cb117d5f2fdeba55bdf0b7e8f431f155ee9b8d49fd6b5be6b33c757d64034ea8a88dd6f7bd34f93b97622f8561c334cc475836e4879c711baf4c39e34ee7c6d5fe35bb0e8ca641de8a6e31099c60f4bdec4dda05209bad4fdb6e0066f9d84da4b46c04605c871539ae39c781e1cb9d64223a33c57c783a2a4da799ed09751aa77fe1d11c9437b34446bb4ff3eaac78e19863932140ca41ab135cba30435ea9f907827cce6caee790e732ba0d839bf261f24368a563befcc7359589e8ad3ad254ef6dc71d4f3f286981a99f9d383394c76197a14a650b4687ed381435b6f6e1ea3db83e612085b1645269725444ea1e57abe56e9243094b4457b5cea71f50a6b36717b5bf0ee091e81d09bf90c86787666e44dbcc9fadb17ddc3ff9350e02b6e04352848d6c8424541549b44447290bdfc3d5eb9d85339135443d3a5a0250f3752983bf18eeceb8e3e728cda483f5c2933e4e1bec9a2ce341836014d67d09e27603c783040b345c55ee956fee16b70bbf4b399bd0916cb02665e6418a892ae2f974d2c8057a478a1d8d83263bd26afc6c604d884f964a3015bf63f63f3a8b2f8af6e791068aec1c5ccbb322332f136ccb20a4c5cf7d157edef57f9978715dca77a2bae0d6f74ccdd0b93a13c42a7bb3753340baa1777b777413ec39108dfb365f9652bce7ce02a57f64a213c0b29d143cf11b8395f8e6f4d4a1f22aeb2aea563c811e4107e8313b4c0377fbdd5d1130d5b81cbc5a88bfb918c1630996ab37e955504eb09143e623dbdcf857f0307e62ad74c4d6941cfa2ff51d09532c5957b5624e89c2d85bf4accecec98e8a1b6388c32d37bb3dfbf35a387a79bcfa1d44978ea5bcad4aca5582a0323b4809076f5ed11190118070671a0f926312d3f2645fb44c213058048ba84788946ba24dbdf62951abb750a1ec633a69c76675229840fba11c5b14f6d828ba83f06c92a02e491cd8d1edb1a2383bf7cacc191b0b7cb8203725052256934e2d18bd017b440fc1ecb2d67f5c4e32771b7852281d3945233356055c4ed82bc0be2f62df24bc05ddcfc22973fcb20faeb8db1fd2571e5b971bbe6deaf043e076db075cffad871d4c497fe9c4a4c5e5f871e28d60a9182f661f4280390c99b0293bc1600142ca40ff4bedf299169d8a6e1014f12e0ee611699f66b326f719ce5e815f905e971777ae6048bc1c05e1a63904849d70aedbc116efdae3f6c91d8cdb7742390a8562a5ab05d381884df87cd25edf2b70570cbe50a124961e7e0494bb305947a85afcfe44238a37bfb58c96c1ec85c3ef6ef3403220ac11c3a61f5ad04b62366ce96ae42c7e49bd08f641d919ac1b98c7ea9c83a54de35bd6f9e6ff8d298d3abb30d2173b0359d2f5978e06b9b3135a478aa5260835bf7bdbfaa4d94f049e9e8dfa8836b18481df54f29809407f2126a219b0ec90d4b65430fee9ce6b796bfd52016a8b26b8c0843d6805c2be6c5ba1d4700a5194ee035fc0bbf193b6b1acf6518a25cca5995ffc22b18811243c27fb708e3e00a0959eaad968184209d3b227b1e0abfa4d5abbe9481edd0da3ff74897b88826db3307f89c405361df33d7b807acebf0b97cf0c973d7f89d7a49dda4bd0b5bc4cfbfb548312cc341b57af57361ba1d56e6cc466fb2b3b783489d839ac7402b1b16192ad4c101ba938648fb5134e0ad27b046058684ebf9979934ac41f31892d0172d13af707d24bc3794be764a1ce59fa54b7def5dc4660010f208da00dad9532cc88258a2bf922364e42487ffd95479c505ae077cb7ce60814b8cc0414b093c83253a0dcf44bcac1c4c3708eb94248fa0868a5a406d33624c6364685185e7e22ac5eddc5a693fb54f0d7295c1c1980cc3e47c482bc0fed68ae2e03d5148bcf49fffb9fbb4bfadc48d0549f071f2d931bcf62be11a78c78c7fae4f2857fd03c43160cc8a5da8cff54e9aa5c733702a5cfb73319432e8aea2f8fd6cadc2a92fe262bd95046a3d730b21265fddc8e9af6bb98e8edee9aaf56a22c6ca0854402b23e0ed2778cf3440ad6b6e96997448b7a6012a94fc952f1c1e33ce92c26c229cce96bde434e316b4b75f1d583cfa4932fd9074552c244004e1d22597758bbae8da99c794efd73e0da1b31686736fa09abd95556bfe53fb890e422d30638eef0d67abdfd6ba41dead7b65376ef38ee7e94bf467c10a9d33524e46ddf5b377855c5ee47ecc47c9decd2c44e537001b5eb76b9260631d25c359ab508033171e7c23f8801fec2a07c61e93d6d4dcd91cf9cc180cd80dbf4aee4041cc7f27a4120cf1924f086b7ef0f905be44166e14587e95c62fbd690050edf4fbec1444b31e441543abdba93dafe201da0e03ccc1c664f5fa3bf8bd672f72be955ef39606e6acc9b96503692c756b2f16075de945266f0fd0099c9bcc0abd152add62a72e420c7f92e90913313ce890fb520b86aa7f4813563b9777581cebb42f012cc20538560e02ad45bc9658f781ca6cd798f93fa901cf96e03747938ec1564f46b15db39abbb0c6c03a2cf00e9f0f573d8e75442c06cdada1565b964b7646a00189520c11c8007908173187b1ef99e305543fd05d2501aa526e1a0c2feede2e4dbf37eae4b1d42414c905dcc7f6be9f850832e062f5f90e2e2758d1d636afdf53951e1416364f3d46e5dcf3f79a5c8e03880338369c9218c962abdc346b5211b87ecfaa4050c08c1d99c37990a343f95eba0684a640d9281823c50eaec88cccee411e1a736985e9f5f47216cd473b9a98e407f9cfee86af90f483a53ce7aec4468641323a234140c616f964caa263b58329da9e7c696b062aad4629eb8b89f8cea94943af2a8613d09bd1858fe6e555610a8afee7b1c7812c2496314e61b48126efed496accf2bcbe58f68be43c3cb4d5e035a67b30bcdb6bbccf5c1c2cc2ddea0fea97e0faad7b81d639724b02c553f84e73ab4f1f5874de344b818ca3c1bf7a7aeffab937bec93f42355819d1a1f4a4b12ed875a2473980131d0155d638ebcfe89711fdca91c8d4d879278f419be74e4713f5fd622ab6fe4173004635d13a83c6ff9894958100d5112c8aa960a03758c88a2e51abf330ef3acf86c34bf3c42c75d882a8aed0f914323b9b2d329f6199c75e17d68b766df7a53f50571f03bac24cf614eb522d8f1b0ff57caafb3bb5226aeebfd80052fea9c677e769b68e780a46482eb3b0054", "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"}) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000000)=""/158) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)={0x1}) 16:03:52 executing program 4: r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @remote, @bcast, 0x0, [@remote, @netrom, @rose, @netrom, @remote, @bcast]}, &(0x7f0000000080)=0x40, 0x800) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f00000000c0), 0x4}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c0045009, &(0x7f0000003ff8)) 16:03:52 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:03:52 executing program 2 (fault-call:2 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:03:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VT_RELDISP(r1, 0x5605) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5d, 0x280) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000040)={0x3, "dc465b965808675f77acc8a34374689995d48edaf696306eed21225ce179f5be", 0x2, 0x1}) getsockopt$packet_buf(r0, 0x107, 0x400000000006, 0x0, &(0x7f0000000340)) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) [ 542.382618][T18537] FAULT_INJECTION: forcing a failure. [ 542.382618][T18537] name failslab, interval 1, probability 0, space 0, times 0 [ 542.401150][ T24] audit: type=1400 audit(1564243432.051:173): avc: denied { map } for pid=18532 comm="syz-executor.0" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=52059 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 [ 542.497590][T18537] CPU: 0 PID: 18537 Comm: syz-executor.2 Not tainted 5.3.0-rc1+ #78 [ 542.505623][T18537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 542.515683][T18537] Call Trace: [ 542.519007][T18537] dump_stack+0x172/0x1f0 [ 542.523345][T18537] should_fail.cold+0xa/0x15 [ 542.527959][T18537] ? fault_create_debugfs_attr+0x180/0x180 [ 542.533767][T18537] ? page_to_nid.part.0+0x20/0x20 [ 542.538793][T18537] ? ___might_sleep+0x163/0x280 [ 542.543654][T18537] __should_failslab+0x121/0x190 [ 542.548593][T18537] should_failslab+0x9/0x14 [ 542.553096][T18537] kmem_cache_alloc_trace+0x2d3/0x790 [ 542.558478][T18537] ? rwlock_bug.part.0+0x90/0x90 [ 542.563419][T18537] ? ___might_sleep+0x163/0x280 [ 542.568271][T18537] hci_alloc_dev+0x43/0x1d80 [ 542.572862][T18537] hci_uart_tty_ioctl+0x306/0xc00 [ 542.577885][T18537] tty_ioctl+0xaf9/0x14f0 [ 542.582219][T18537] ? hci_uart_init_work+0x180/0x180 [ 542.587416][T18537] ? do_tty_hangup+0x30/0x30 [ 542.592009][T18537] ? tomoyo_path_number_perm+0x459/0x520 [ 542.597646][T18537] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 542.603895][T18537] ? tomoyo_path_number_perm+0x263/0x520 [ 542.609529][T18537] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 542.615604][T18537] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 542.621936][T18537] ? ___might_sleep+0x163/0x280 [ 542.626786][T18537] ? do_tty_hangup+0x30/0x30 [ 542.631387][T18537] do_vfs_ioctl+0xdb6/0x13e0 [ 542.635978][T18537] ? ioctl_preallocate+0x210/0x210 [ 542.641105][T18537] ? selinux_file_mprotect+0x620/0x620 [ 542.646579][T18537] ? __fget+0x384/0x560 [ 542.650739][T18537] ? ksys_dup3+0x3e0/0x3e0 [ 542.655329][T18537] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 542.661566][T18537] ? fput_many+0x12c/0x1a0 [ 542.665981][T18537] ? tomoyo_file_ioctl+0x23/0x30 [ 542.670936][T18537] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 542.677463][T18537] ? security_file_ioctl+0x8d/0xc0 [ 542.682600][T18537] ksys_ioctl+0xab/0xd0 [ 542.686756][T18537] __x64_sys_ioctl+0x73/0xb0 [ 542.691349][T18537] do_syscall_64+0xfd/0x6a0 [ 542.695856][T18537] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 542.701741][T18537] RIP: 0033:0x459829 [ 542.705640][T18537] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 542.725257][T18537] RSP: 002b:00007fd79d65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 542.733775][T18537] RAX: ffffffffffffffda RBX: 00007fd79d65bc90 RCX: 0000000000459829 [ 542.742032][T18537] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 542.750006][T18537] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 542.757982][T18537] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd79d65c6d4 [ 542.766046][T18537] R13: 00000000004c250e R14: 00000000004d5930 R15: 0000000000000004 16:03:52 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x77) 16:03:52 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000cab000)) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:03:52 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x10000200, 0x0) clock_adjtime(0x0, &(0x7f0000000400)={0xfbdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf26dca88ffffffff, 0x0, 0x0, 0x0, 0x0, 0xe646}) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x4) 16:03:52 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x401, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0xae64, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0xae71, &(0x7f0000000100)) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x28, 0x4, 0x3, "eef05417b713b61626d5b06de877a6c5", "cfd917f6f3c326eecc0d5bf20d4931c96719fa"}, 0x28, 0x1) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) [ 542.852093][T18537] Bluetooth: Can't allocate HCI device 16:03:52 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) open(&(0x7f0000000100)='\x00', 0x4000, 0x140) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fe) r1 = socket(0x10, 0x4008000000803, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000000c0)=0x81a, 0x4) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=""/234, 0xea}}, {{0x0, 0x0, &(0x7f0000002c40)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) [ 544.488032][ T3014] Bluetooth: hci0: command 0x1003 tx timeout [ 544.494197][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 546.568094][ T3014] Bluetooth: hci0: command 0x1001 tx timeout [ 546.574371][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 548.648082][ T17] Bluetooth: hci0: command 0x1009 tx timeout 16:04:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x4b49, &(0x7f0000000000)) 16:04:02 executing program 5: r0 = userfaultfd(0x808800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc018aa3f, 0x0) dup3(r0, r0, 0x80000) 16:04:02 executing program 2 (fault-call:2 fault-nth:4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:04:02 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000cab000)) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:04:02 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x11, 0x6, 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000000)={@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0xf}}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d96927940000fffffff820004000000000ed08691ff9dc0100df772655010000000000000000005f"], 0x3c) 16:04:02 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x5, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00\x06\xa0\x02\x00\x01\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, &(0x7f0000000140)=0x54) [ 552.617432][T18688] SELinux: ebitmap: truncated map [ 552.645416][T18692] FAULT_INJECTION: forcing a failure. [ 552.645416][T18692] name failslab, interval 1, probability 0, space 0, times 0 [ 552.659734][T18688] SELinux: failed to load policy [ 552.664961][T18692] CPU: 1 PID: 18692 Comm: syz-executor.2 Not tainted 5.3.0-rc1+ #78 [ 552.672943][T18692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 552.683003][T18692] Call Trace: [ 552.686322][T18692] dump_stack+0x172/0x1f0 [ 552.690711][T18692] should_fail.cold+0xa/0x15 [ 552.695314][T18692] ? fault_create_debugfs_attr+0x180/0x180 [ 552.701219][T18692] ? page_to_nid.part.0+0x20/0x20 [ 552.706337][T18692] ? ___might_sleep+0x163/0x280 [ 552.706364][T18692] __should_failslab+0x121/0x190 [ 552.706392][T18692] should_failslab+0x9/0x14 [ 552.716624][T18692] kmem_cache_alloc_trace+0x2d3/0x790 [ 552.716670][T18692] ? pm_runtime_init+0x311/0x3b0 [ 552.716693][T18692] ? device_initialize+0x1a3/0x440 [ 552.736903][T18692] ll_open+0x46/0x380 [ 552.740898][T18692] hci_uart_tty_ioctl+0x748/0xc00 [ 552.745939][T18692] tty_ioctl+0xaf9/0x14f0 [ 552.750281][T18692] ? hci_uart_init_work+0x180/0x180 [ 552.756014][T18692] ? do_tty_hangup+0x30/0x30 [ 552.756035][T18692] ? tomoyo_path_number_perm+0x459/0x520 [ 552.756061][T18692] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 552.772541][T18692] ? tomoyo_path_number_perm+0x263/0x520 [ 552.772564][T18692] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 552.784090][T18692] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 552.791164][T18692] ? ___might_sleep+0x163/0x280 [ 552.796034][T18692] ? do_tty_hangup+0x30/0x30 [ 552.796052][T18692] do_vfs_ioctl+0xdb6/0x13e0 [ 552.796071][T18692] ? ioctl_preallocate+0x210/0x210 [ 552.810357][T18692] ? selinux_file_mprotect+0x620/0x620 [ 552.815839][T18692] ? __fget+0x384/0x560 [ 552.820101][T18692] ? ksys_dup3+0x3e0/0x3e0 [ 552.824528][T18692] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 552.830950][T18692] ? fput_many+0x12c/0x1a0 [ 552.830970][T18692] ? tomoyo_file_ioctl+0x23/0x30 [ 552.830992][T18692] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 552.835517][T18690] IPVS: ftp: loaded support on port[0] = 21 [ 552.840463][T18692] ? security_file_ioctl+0x8d/0xc0 [ 552.840479][T18692] ksys_ioctl+0xab/0xd0 [ 552.840492][T18692] __x64_sys_ioctl+0x73/0xb0 [ 552.840512][T18692] do_syscall_64+0xfd/0x6a0 [ 552.840534][T18692] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 552.852730][T18692] RIP: 0033:0x459829 16:04:02 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000cab000)) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 552.852747][T18692] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 552.852762][T18692] RSP: 002b:00007fd79d65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 552.867105][T18692] RAX: ffffffffffffffda RBX: 00007fd79d65bc90 RCX: 0000000000459829 [ 552.867114][T18692] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 552.867121][T18692] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 552.867136][T18692] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd79d65c6d4 16:04:02 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x400000000000002, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RREADDIR(r0, 0x0, 0xffffff65) [ 552.877589][T18692] R13: 00000000004c250e R14: 00000000004d5930 R15: 0000000000000004 16:04:02 executing program 2 (fault-call:2 fault-nth:5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:04:02 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x102c3) recvmsg(r0, &(0x7f0000000140)={0x0, 0x3a, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000014c0)={0x1000}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000001480)='TIPC\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) 16:04:02 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000000)) [ 553.171202][T18818] FAULT_INJECTION: forcing a failure. [ 553.171202][T18818] name failslab, interval 1, probability 0, space 0, times 0 [ 553.191892][T18818] CPU: 1 PID: 18818 Comm: syz-executor.2 Not tainted 5.3.0-rc1+ #78 [ 553.199913][T18818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 553.210103][T18818] Call Trace: [ 553.214301][T18818] dump_stack+0x172/0x1f0 16:04:02 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 553.218658][T18818] should_fail.cold+0xa/0x15 [ 553.223349][T18818] ? fault_create_debugfs_attr+0x180/0x180 [ 553.229273][T18818] ? page_to_nid.part.0+0x20/0x20 [ 553.234312][T18818] ? ___might_sleep+0x163/0x280 [ 553.239181][T18818] __should_failslab+0x121/0x190 [ 553.244135][T18818] should_failslab+0x9/0x14 [ 553.248741][T18818] __kmalloc+0x2e0/0x770 [ 553.252998][T18818] ? alloc_workqueue+0x166/0xf40 [ 553.258035][T18818] alloc_workqueue+0x166/0xf40 [ 553.262823][T18818] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 553.268557][T18818] ? scnprintf+0x140/0x140 [ 553.272987][T18818] ? kasan_kmalloc+0x9/0x10 [ 553.277500][T18818] ? kmem_cache_alloc_trace+0x346/0x790 [ 553.283147][T18818] hci_register_dev+0x1b8/0x8f0 [ 553.288029][T18818] ? __raw_spin_lock_init+0x2d/0x100 [ 553.293417][T18818] hci_uart_tty_ioctl+0x87e/0xc00 [ 553.298465][T18818] tty_ioctl+0xaf9/0x14f0 [ 553.302837][T18818] ? hci_uart_init_work+0x180/0x180 [ 553.308401][T18818] ? do_tty_hangup+0x30/0x30 [ 553.313019][T18818] ? tomoyo_path_number_perm+0x459/0x520 [ 553.318665][T18818] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 553.318690][T18818] ? tomoyo_path_number_perm+0x263/0x520 [ 553.318706][T18818] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 553.318719][T18818] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 553.318737][T18818] ? ___might_sleep+0x163/0x280 [ 553.318754][T18818] ? do_tty_hangup+0x30/0x30 [ 553.318770][T18818] do_vfs_ioctl+0xdb6/0x13e0 [ 553.318789][T18818] ? ioctl_preallocate+0x210/0x210 [ 553.342710][T18818] ? selinux_file_mprotect+0x620/0x620 [ 553.342725][T18818] ? __fget+0x384/0x560 [ 553.342740][T18818] ? ksys_dup3+0x3e0/0x3e0 [ 553.342756][T18818] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 553.342769][T18818] ? fput_many+0x12c/0x1a0 [ 553.342790][T18818] ? tomoyo_file_ioctl+0x23/0x30 [ 553.352310][T18818] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 553.352327][T18818] ? security_file_ioctl+0x8d/0xc0 [ 553.352349][T18818] ksys_ioctl+0xab/0xd0 [ 553.362030][T18818] __x64_sys_ioctl+0x73/0xb0 [ 553.362048][T18818] do_syscall_64+0xfd/0x6a0 [ 553.362067][T18818] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 553.362078][T18818] RIP: 0033:0x459829 [ 553.362096][T18818] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 553.362111][T18818] RSP: 002b:00007fd79d65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 553.371700][T18818] RAX: ffffffffffffffda RBX: 00007fd79d65bc90 RCX: 0000000000459829 [ 553.371708][T18818] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 553.371716][T18818] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 553.371725][T18818] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd79d65c6d4 [ 553.371732][T18818] R13: 00000000004c250e R14: 00000000004d5930 R15: 0000000000000004 [ 553.382005][T18818] Bluetooth: Can't register HCI device [ 553.662344][T18699] IPVS: ftp: loaded support on port[0] = 21 [ 554.968067][T11105] Bluetooth: hci0: command 0x1003 tx timeout [ 554.974169][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 557.048121][ T22] Bluetooth: hci0: command 0x1001 tx timeout [ 557.054279][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 559.128071][T11105] Bluetooth: hci0: command 0x1009 tx timeout 16:04:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x4c00, &(0x7f0000000000)) 16:04:13 executing program 5: mkdir(&(0x7f0000000480)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xaf}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000400)={&(0x7f0000000280)}, 0x18) r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x6, 0x20000) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000200)={0x7fffffff, 0xe2bb, 0x81, 0x1f}, 0x10) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x200) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x5, 0x1}}, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x5d1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='system.sockprotoname\x00', &(0x7f0000000140)='/dev/vcsa#\x00', 0xb, 0x1) recvmmsg(r2, &(0x7f0000008880), 0x75d, 0x44000122, 0x0) 16:04:13 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) readv(r0, &(0x7f0000000d80)=[{&(0x7f0000000940)=""/87, 0x57}], 0x1) 16:04:13 executing program 2 (fault-call:2 fault-nth:6): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:04:13 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:04:13 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='nfs4\x00', 0x0, &(0x7f0000000300)='rdma') 16:04:13 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc7724e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507daea1c09fc1fe6c"}, 0x20) unlink(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xa7) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000c00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x4}]}, 0x90ad) [ 563.519863][T18947] FAULT_INJECTION: forcing a failure. [ 563.519863][T18947] name failslab, interval 1, probability 0, space 0, times 0 [ 563.580148][ T2668] Bluetooth: hci1: Frame reassembly failed (-84) [ 563.581030][T18942] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 563.616247][T18947] CPU: 1 PID: 18947 Comm: syz-executor.2 Not tainted 5.3.0-rc1+ #78 [ 563.625724][T18947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.636919][T18947] Call Trace: [ 563.640257][T18947] dump_stack+0x172/0x1f0 [ 563.644733][T18947] should_fail.cold+0xa/0x15 [ 563.644752][T18947] ? fault_create_debugfs_attr+0x180/0x180 [ 563.644777][T18947] ? page_to_nid.part.0+0x20/0x20 [ 563.660546][T18947] ? ___might_sleep+0x163/0x280 [ 563.665509][T18947] __should_failslab+0x121/0x190 [ 563.670460][T18947] should_failslab+0x9/0x14 [ 563.674970][T18947] __kmalloc+0x2e0/0x770 [ 563.674991][T18947] ? alloc_workqueue+0x166/0xf40 [ 563.675011][T18947] alloc_workqueue+0x166/0xf40 [ 563.689469][T18947] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 563.695290][T18947] ? scnprintf+0x140/0x140 [ 563.699729][T18947] ? kasan_kmalloc+0x9/0x10 [ 563.704482][T18947] ? kmem_cache_alloc_trace+0x346/0x790 [ 563.710041][T18947] hci_register_dev+0x1b8/0x8f0 [ 563.715161][T18947] ? __raw_spin_lock_init+0x2d/0x100 [ 563.721806][T18947] hci_uart_tty_ioctl+0x87e/0xc00 [ 563.721831][T18947] tty_ioctl+0xaf9/0x14f0 [ 563.735126][T18947] ? hci_uart_init_work+0x180/0x180 [ 563.735142][T18947] ? do_tty_hangup+0x30/0x30 [ 563.735160][T18947] ? tomoyo_path_number_perm+0x459/0x520 [ 563.735185][T18947] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 563.745487][T18947] ? tomoyo_path_number_perm+0x263/0x520 [ 563.745506][T18947] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 563.745529][T18947] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 563.760174][T18947] ? ___might_sleep+0x163/0x280 [ 563.760193][T18947] ? do_tty_hangup+0x30/0x30 [ 563.760209][T18947] do_vfs_ioctl+0xdb6/0x13e0 [ 563.760229][T18947] ? ioctl_preallocate+0x210/0x210 [ 563.771841][T18947] ? selinux_file_mprotect+0x620/0x620 [ 563.771856][T18947] ? __fget+0x384/0x560 [ 563.771875][T18947] ? ksys_dup3+0x3e0/0x3e0 [ 563.786013][T18947] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 563.786031][T18947] ? fput_many+0x12c/0x1a0 [ 563.786054][T18947] ? tomoyo_file_ioctl+0x23/0x30 [ 563.799915][T18947] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 563.799933][T18947] ? security_file_ioctl+0x8d/0xc0 [ 563.799949][T18947] ksys_ioctl+0xab/0xd0 [ 563.799967][T18947] __x64_sys_ioctl+0x73/0xb0 [ 563.811233][T18947] do_syscall_64+0xfd/0x6a0 [ 563.811250][T18947] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 563.811261][T18947] RIP: 0033:0x459829 16:04:13 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:04:13 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x888b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 563.811277][T18947] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 563.811292][T18947] RSP: 002b:00007fd79d65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.820948][T18947] RAX: ffffffffffffffda RBX: 00007fd79d65bc90 RCX: 0000000000459829 [ 563.820956][T18947] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 16:04:13 executing program 2 (fault-call:2 fault-nth:7): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 563.820963][T18947] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 563.820970][T18947] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd79d65c6d4 [ 563.820979][T18947] R13: 00000000004c250e R14: 00000000004d5930 R15: 0000000000000004 [ 563.936172][T18947] Bluetooth: Can't register HCI device 16:04:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x11, 0x2, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000040)=@l2={0x1f, 0xffffa888}, 0x80, 0x0}}, {{&(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "f5b4c9f15a535b0c146bbf700c2fa3fb1d638bd08f2e6cd0f1da2c0109bb1555d389d9b2101852b19aab162726cfcc5b9a7aef107c7134cfd1ca9de09441f6"}, 0x80, 0x0}}], 0x2, 0x0) [ 564.021730][T19059] device nr0 entered promiscuous mode [ 564.082564][T19089] FAULT_INJECTION: forcing a failure. [ 564.082564][T19089] name failslab, interval 1, probability 0, space 0, times 0 [ 564.114401][T19089] CPU: 1 PID: 19089 Comm: syz-executor.2 Not tainted 5.3.0-rc1+ #78 16:04:13 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(0x0, r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 564.125162][T19089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.135585][T19089] Call Trace: [ 564.138982][T19089] dump_stack+0x172/0x1f0 [ 564.145256][T19089] should_fail.cold+0xa/0x15 [ 564.150304][T19089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 564.157534][T19089] ? fault_create_debugfs_attr+0x180/0x180 [ 564.164103][T19089] ? page_to_nid.part.0+0x20/0x20 [ 564.169418][T19089] ? ___might_sleep+0x163/0x280 [ 564.174383][T19089] __should_failslab+0x121/0x190 [ 564.179310][T19089] should_failslab+0x9/0x14 [ 564.184438][T19089] kmem_cache_alloc_trace+0x2d3/0x790 [ 564.190877][T19089] ? kasan_kmalloc+0x9/0x10 [ 564.195385][T19089] ? __kmalloc+0x351/0x770 [ 564.200217][T19089] alloc_workqueue_attrs+0x3d/0xc0 [ 564.205328][T19089] alloc_workqueue+0x18b/0xf40 [ 564.210249][T19089] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 564.224682][T19089] ? scnprintf+0x140/0x140 [ 564.229720][T19089] ? kasan_kmalloc+0x9/0x10 [ 564.235170][T19089] ? kmem_cache_alloc_trace+0x346/0x790 [ 564.243004][T19089] hci_register_dev+0x1b8/0x8f0 [ 564.251930][T19089] ? __raw_spin_lock_init+0x2d/0x100 [ 564.257730][T19089] hci_uart_tty_ioctl+0x87e/0xc00 [ 564.263356][T19089] tty_ioctl+0xaf9/0x14f0 [ 564.267946][T19089] ? hci_uart_init_work+0x180/0x180 [ 564.273936][T19089] ? do_tty_hangup+0x30/0x30 [ 564.279478][T19089] ? tomoyo_path_number_perm+0x459/0x520 [ 564.287568][T19089] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 564.295123][T19089] ? tomoyo_path_number_perm+0x263/0x520 [ 564.301478][T19089] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 564.307279][T19089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 564.314251][T19089] ? ___might_sleep+0x163/0x280 [ 564.319181][T19089] ? do_tty_hangup+0x30/0x30 [ 564.323863][T19089] do_vfs_ioctl+0xdb6/0x13e0 [ 564.328993][T19089] ? ioctl_preallocate+0x210/0x210 [ 564.335229][T19089] ? selinux_file_mprotect+0x620/0x620 [ 564.341660][T19089] ? __fget+0x384/0x560 [ 564.345802][T19089] ? ksys_dup3+0x3e0/0x3e0 [ 564.351519][T19089] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 564.360460][T19089] ? fput_many+0x12c/0x1a0 [ 564.364894][T19089] ? tomoyo_file_ioctl+0x23/0x30 [ 564.369910][T19089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 564.376573][T19089] ? security_file_ioctl+0x8d/0xc0 [ 564.383362][T19089] ksys_ioctl+0xab/0xd0 [ 564.388301][T19089] __x64_sys_ioctl+0x73/0xb0 [ 564.393935][T19089] do_syscall_64+0xfd/0x6a0 [ 564.399414][T19089] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 564.405424][T19089] RIP: 0033:0x459829 [ 564.411817][T19089] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 564.436087][T19089] RSP: 002b:00007fd79d65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.447730][T19089] RAX: ffffffffffffffda RBX: 00007fd79d65bc90 RCX: 0000000000459829 [ 564.456053][T19089] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 564.464187][T19089] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 564.475820][T19089] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd79d65c6d4 [ 564.488930][T19089] R13: 00000000004c250e R14: 00000000004d5930 R15: 0000000000000004 [ 564.498380][T19089] Bluetooth: Can't register HCI device [ 564.683183][T19057] device nr0 entered promiscuous mode [ 565.608117][ T22] Bluetooth: hci1: command 0x1003 tx timeout [ 565.614216][ T1517] Bluetooth: hci1: sending frame failed (-49) [ 567.688473][T11105] Bluetooth: hci1: command 0x1001 tx timeout [ 567.696063][ T1517] Bluetooth: hci1: sending frame failed (-49) [ 569.768137][ T22] Bluetooth: hci1: command 0x1009 tx timeout 16:04:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x4c01, &(0x7f0000000000)) 16:04:23 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 16:04:23 executing program 2 (fault-call:2 fault-nth:8): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:04:23 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2000000000000003, 0x300) write(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0xfffffffffffffe25) getsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000180), &(0x7f0000000300)=0x4) r2 = open(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085) lstat(0x0, &(0x7f00000005c0)) getresgid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000007c0)) renameat(r2, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) dup(r0) 16:04:23 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(0x0, r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:04:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f000000a700)=[{{&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0}}], 0x1, 0x0) [ 573.739933][T19194] FAULT_INJECTION: forcing a failure. [ 573.739933][T19194] name failslab, interval 1, probability 0, space 0, times 0 [ 573.775968][T19194] CPU: 1 PID: 19194 Comm: syz-executor.2 Not tainted 5.3.0-rc1+ #78 16:04:23 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x80) ioctl$KVM_SMI(r0, 0xaeb7) r1 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r1, 0x0) [ 573.783987][T19194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.794129][T19194] Call Trace: [ 573.797463][T19194] dump_stack+0x172/0x1f0 [ 573.801917][T19194] should_fail.cold+0xa/0x15 [ 573.806514][T19194] ? fault_create_debugfs_attr+0x180/0x180 [ 573.812322][T19194] ? page_to_nid.part.0+0x20/0x20 [ 573.812338][T19194] ? ___might_sleep+0x163/0x280 [ 573.812362][T19194] __should_failslab+0x121/0x190 [ 573.812384][T19194] should_failslab+0x9/0x14 [ 573.831662][T19194] __kmalloc+0x2e0/0x770 [ 573.835919][T19194] ? mutex_lock_io_nested+0x11d0/0x11d0 [ 573.841472][T19194] ? mark_held_locks+0xf0/0xf0 [ 573.846250][T19194] ? preempt_count_add+0x7a/0x160 [ 573.851280][T19194] ? apply_wqattrs_prepare+0xae/0x960 [ 573.856659][T19194] apply_wqattrs_prepare+0xae/0x960 [ 573.861867][T19194] ? lock_acquire+0x190/0x410 [ 573.866559][T19194] ? alloc_workqueue+0x8d8/0xf40 [ 573.871509][T19194] apply_workqueue_attrs_locked+0xcf/0x120 [ 573.877325][T19194] alloc_workqueue+0x8f1/0xf40 [ 573.882808][T19194] ? workqueue_sysfs_register+0x3e0/0x3e0 16:04:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) setxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x1) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x20000, 0x0) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0xc018643a, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140), 0x4) [ 573.888547][T19194] ? kasan_kmalloc+0x9/0x10 [ 573.893059][T19194] ? kmem_cache_alloc_trace+0x346/0x790 [ 573.898618][T19194] hci_register_dev+0x1b8/0x8f0 [ 573.903475][T19194] ? __raw_spin_lock_init+0x2d/0x100 [ 573.908765][T19194] hci_uart_tty_ioctl+0x87e/0xc00 [ 573.908782][T19194] tty_ioctl+0xaf9/0x14f0 [ 573.908802][T19194] ? hci_uart_init_work+0x180/0x180 [ 573.918138][T19194] ? do_tty_hangup+0x30/0x30 [ 573.918156][T19194] ? tomoyo_path_number_perm+0x459/0x520 [ 573.918177][T19194] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 573.918198][T19194] ? tomoyo_path_number_perm+0x263/0x520 [ 573.945539][T19194] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 573.951351][T19194] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 573.957603][T19194] ? ___might_sleep+0x163/0x280 [ 573.962468][T19194] ? do_tty_hangup+0x30/0x30 [ 573.967064][T19194] do_vfs_ioctl+0xdb6/0x13e0 [ 573.971660][T19194] ? ioctl_preallocate+0x210/0x210 [ 573.976779][T19194] ? selinux_file_mprotect+0x620/0x620 [ 573.982250][T19194] ? __fget+0x384/0x560 [ 573.986483][T19194] ? ksys_dup3+0x3e0/0x3e0 16:04:23 executing program 4: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x161, 0x11, 0x9c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xff55, &(0x7f0000001200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x1, 0x0) sigaltstack(&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0x100000000}) [ 573.990910][T19194] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 573.997151][T19194] ? fput_many+0x12c/0x1a0 [ 574.001577][T19194] ? tomoyo_file_ioctl+0x23/0x30 [ 574.006524][T19194] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 574.019807][T19194] ? security_file_ioctl+0x8d/0xc0 [ 574.019822][T19194] ksys_ioctl+0xab/0xd0 [ 574.019836][T19194] __x64_sys_ioctl+0x73/0xb0 [ 574.019853][T19194] do_syscall_64+0xfd/0x6a0 [ 574.019870][T19194] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 574.019896][T19194] RIP: 0033:0x459829 [ 574.047968][T19194] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 574.067707][T19194] RSP: 002b:00007fd79d65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 574.076123][T19194] RAX: ffffffffffffffda RBX: 00007fd79d65bc90 RCX: 0000000000459829 [ 574.084275][T19194] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 574.092237][T19194] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 574.100204][T19194] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd79d65c6d4 [ 574.108166][T19194] R13: 00000000004c250e R14: 00000000004d5930 R15: 0000000000000004 [ 574.119770][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 574.125888][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 574.133076][ T25] Bluetooth: hci1: Frame reassembly failed (-84) 16:04:23 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:atchdog_device_t:s0 us\x00\x00\x00\x00'], 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {r1, 0x4, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}, @ib={0x1b, 0x7, 0x9, {"68736d9a9fdca40c5b2245ebdff87b45"}, 0x80, 0x1, 0x10000}}}, 0x118) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000080)={0x3, &(0x7f0000000200)=[{}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @broadcast}]}) fchdir(0xffffffffffffffff) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000300)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000400)='./file0\x00', 0x4) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x800) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000700)={0x0, r2, 0x7fffffff, 0xcf, 0x10000, 0x8c8}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvfrom(r2, &(0x7f0000000140)=""/62, 0x3e, 0x0, &(0x7f0000000280)=@vsock={0x28, 0x0, 0xffffffff, @reserved}, 0x80) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8022020}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x94, r3, 0x900, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2d}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x94}}, 0x40001) [ 574.178133][T19194] Bluetooth: Can't register HCI device 16:04:23 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(0x0, r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:04:23 executing program 2 (fault-call:2 fault-nth:9): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 574.390947][T19228] FAULT_INJECTION: forcing a failure. [ 574.390947][T19228] name failslab, interval 1, probability 0, space 0, times 0 [ 574.413548][T19228] CPU: 1 PID: 19228 Comm: syz-executor.2 Not tainted 5.3.0-rc1+ #78 [ 574.421555][T19228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.431693][T19228] Call Trace: [ 574.431724][T19228] dump_stack+0x172/0x1f0 [ 574.431750][T19228] should_fail.cold+0xa/0x15 [ 574.431778][T19228] ? fault_create_debugfs_attr+0x180/0x180 [ 574.449836][T19228] ? page_to_nid.part.0+0x20/0x20 [ 574.454868][T19228] ? ___might_sleep+0x163/0x280 [ 574.459734][T19228] __should_failslab+0x121/0x190 [ 574.464681][T19228] should_failslab+0x9/0x14 [ 574.469199][T19228] __kmalloc+0x2e0/0x770 [ 574.473444][T19228] ? mutex_lock_io_nested+0x11d0/0x11d0 [ 574.473462][T19228] ? mark_held_locks+0xf0/0xf0 [ 574.473483][T19228] ? preempt_count_add+0x7a/0x160 [ 574.488779][T19228] ? apply_wqattrs_prepare+0xae/0x960 [ 574.494154][T19228] apply_wqattrs_prepare+0xae/0x960 [ 574.499355][T19228] ? lock_acquire+0x190/0x410 [ 574.504127][T19228] ? alloc_workqueue+0x8d8/0xf40 [ 574.509097][T19228] apply_workqueue_attrs_locked+0xcf/0x120 [ 574.516256][T19228] alloc_workqueue+0x8f1/0xf40 [ 574.521335][T19228] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 574.527092][T19228] ? kasan_kmalloc+0x9/0x10 [ 574.532421][T19228] ? kmem_cache_alloc_trace+0x346/0x790 [ 574.537996][T19228] hci_register_dev+0x1b8/0x8f0 [ 574.542870][T19228] ? __raw_spin_lock_init+0x2d/0x100 [ 574.548303][T19228] hci_uart_tty_ioctl+0x87e/0xc00 [ 574.553371][T19228] tty_ioctl+0xaf9/0x14f0 [ 574.557918][T19228] ? hci_uart_init_work+0x180/0x180 [ 574.563141][T19228] ? do_tty_hangup+0x30/0x30 [ 574.567758][T19228] ? tomoyo_path_number_perm+0x459/0x520 [ 574.573443][T19228] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 574.579701][T19228] ? tomoyo_path_number_perm+0x263/0x520 [ 574.585471][T19228] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 574.591291][T19228] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 574.597552][T19228] ? ___might_sleep+0x163/0x280 [ 574.602417][T19228] ? do_tty_hangup+0x30/0x30 [ 574.607015][T19228] do_vfs_ioctl+0xdb6/0x13e0 [ 574.611614][T19228] ? ioctl_preallocate+0x210/0x210 [ 574.616744][T19228] ? selinux_file_mprotect+0x620/0x620 [ 574.622213][T19228] ? __fget+0x384/0x560 [ 574.626468][T19228] ? ksys_dup3+0x3e0/0x3e0 [ 574.630902][T19228] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 574.637150][T19228] ? fput_many+0x12c/0x1a0 [ 574.641578][T19228] ? tomoyo_file_ioctl+0x23/0x30 [ 574.646548][T19228] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 574.652904][T19228] ? security_file_ioctl+0x8d/0xc0 [ 574.658028][T19228] ksys_ioctl+0xab/0xd0 [ 574.662213][T19228] __x64_sys_ioctl+0x73/0xb0 [ 574.666809][T19228] do_syscall_64+0xfd/0x6a0 [ 574.671316][T19228] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 574.677311][T19228] RIP: 0033:0x459829 [ 574.681213][T19228] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 574.700967][T19228] RSP: 002b:00007fd79d65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 574.709398][T19228] RAX: ffffffffffffffda RBX: 00007fd79d65bc90 RCX: 0000000000459829 [ 574.717465][T19228] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 574.725463][T19228] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 574.733644][T19228] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd79d65c6d4 [ 574.741716][T19228] R13: 00000000004c250e R14: 00000000004d5930 R15: 0000000000000004 [ 574.819003][T19228] Bluetooth: Can't register HCI device [ 576.168134][ T17] Bluetooth: hci1: command 0x1003 tx timeout [ 576.174231][ T1517] Bluetooth: hci1: sending frame failed (-49) [ 578.248416][T11105] Bluetooth: hci1: command 0x1001 tx timeout [ 578.254556][ T1517] Bluetooth: hci1: sending frame failed (-49) [ 580.328207][ T17] Bluetooth: hci1: command 0x1009 tx timeout 16:04:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x4c04, &(0x7f0000000000)) 16:04:34 executing program 4: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)=0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x58, 0x400000000000) setresuid(0x0, 0x0, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)={0x1b, 0x7, 0x2, {{0xe, 'net/protocols\x00'}, 0x8}}, 0x1b) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000380)={0xbd, 0x7f, 0x5, "0091e6d45bbf0bffa1ecac4bf2bbea11be3338b3ec1fccf4ec10346304ca3fdcd96831a2a3a56eb13c85d2c21b801b54bb9ff09e69a86391d03adeceb5e2e5733fd66e1d1c31a9cb732635d850d09ce2c35afb58d9ba1605a142f47284c025ca35fc733139f935bbdc779bbb849aa3691e9768a1e429d80289b95f6e7a548b70e968a63267ab4047dcbd5facd702fa60d0fb7ed1c50037b19f4919b5d310893887bd818298ae41756604b28c0ff604c5e26289bee87250b98f2a8e760d"}) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = gettid() read$alg(r0, &(0x7f0000000300)=""/99, 0x63) write$P9_RGETLOCK(r0, &(0x7f0000000240)={0x2c, 0x37, 0x2, {0x0, 0x8, 0xff, r1, 0xe, 'net/protocols\x00'}}, 0x2c) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="3bbd4a4b6a8c1f93d5ff1c75f22ec98aaf0721ab8e8a96a27e94", @ANYRES16=r2, @ANYBLOB="050428bd7000fedbdf2503000000080008000000000408000a004e22000008000800e000000104000500080001004e200000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) timer_settime(0x0, 0x253a8b8fe6e299f0, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200)) 16:04:34 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x5, 0x8000000000000400) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x1ff, 0x0, 0x10001, 0x8}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000240)={r1, 0x2}) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x51}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x7ff) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="2b637075202b6d656d6f64cf95a9f1c1ed0cc140d083876e72d57351d03556036e206d656d6f7279202f6370b0bbcfe5807c0d7896a74f7c2989e7b564d22a00755432da9d422533f0300e2091111d7c849d546a225573fa71"], 0x2c) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x1, 0x3}) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) 16:04:34 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:04:34 executing program 5: clock_adjtime(0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x2, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x800}) sysinfo(&(0x7f0000000240)) 16:04:34 executing program 2 (fault-call:2 fault-nth:10): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:04:34 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8f, 0x101000) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x3f}) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000040), 0x4) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/context\x00', 0x2, 0x0) [ 584.652670][T19253] FAULT_INJECTION: forcing a failure. [ 584.652670][T19253] name failslab, interval 1, probability 0, space 0, times 0 [ 584.704805][T19253] CPU: 1 PID: 19253 Comm: syz-executor.2 Not tainted 5.3.0-rc1+ #78 [ 584.712846][T19253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 584.722919][T19253] Call Trace: [ 584.726225][T19253] dump_stack+0x172/0x1f0 [ 584.730581][T19253] should_fail.cold+0xa/0x15 [ 584.735192][T19253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 584.741447][T19253] ? fault_create_debugfs_attr+0x180/0x180 [ 584.747266][T19253] ? page_to_nid.part.0+0x20/0x20 16:04:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x6, &(0x7f0000000780)=[{&(0x7f0000000440)="d5e76d6731dd9d8c5213ad4745bef8ac95fb967fe116fd086834bbd6366a0bc8f117f862866489e1f94097ad2921dcd06b9db8cd51206d25959cba70fd80358f9bbcca67f7a342edd74008efac19412b3def454303e961e94b0c08162d87633f0c1c6eba07ec94231e577299ac2345f3a63c7f61808d251723be80c2cf5e7dcb7e3d56b2f8", 0x85, 0x20}, {&(0x7f0000000500)="1e065176cd4d0524a0741a2b9b7a11015703c68c864f6e09643acbd906f4df143957d1c549bee9d320ac915728def013ec0743a89b808b3ab26b6b438b79a3ff15b9c00f4c8c25ca70f8f23778cb15d5c058fb6b0ceb6f69d52de8628b3d12ac84276e7c4a13251a662c8c272df6f78b802f3dc1d904d3dd70639026b878e7fd2caf3b5f1700a1fce172d69d05db4752c7b40586e6bde9281daac63c746ba55da269510f9f4a181f2e456a2b115ba3bea110209c8786907d70b869081354", 0xbe, 0x5}, {&(0x7f0000000180)="6ce450ed0fbeaa5d7542c36a687eb9300292156ac83c06ddaf1696373a", 0x1d, 0x1000}, {&(0x7f00000005c0)="79f1fdd4bb302c6be09eadd3848c9091dd1b2ac6151a85bb0d1e2590ae3abf42fb9da5905b6dedb1a248ae3d5b49f3f26b691b85bd2216464898fc2f75d55ed8699c078d1304fa98cde194d0049e5f0bce4312bd44d60c254291043fb67ae866df2b389e356a033a8c5803c0fbe64411a406b66f6325c4183308bea3091d5b1855f4ebdef12d4b28836d349280b4762cf005d145d56b3239b26ec27298ed82559d4f7375d05edbbb3a738ab04f", 0xad, 0x80000000}, {&(0x7f00000001c0)="f10245a6ccd692bdea41d88ab9317dfd96b40da79eb32e1ad17632b83fbfb72e9581cb", 0x23, 0xfffffffffffffff8}, {&(0x7f0000000680)="e05862b97c35b5a75a4f4a81dc40226bf2a3333a6f0064153912188f1ed2fcf7dd131a215e2852db2f6c826ea8708145261a1eb08c9cc923aef0ce41a9222c4c4d18aafca5b541867515c9d29b11ff4bea49bfd187abddf6e64c979e4594fffa8296a2e8fc2f32b5039fe8c499f3b64a02492ad306ab37182e6122f51bc21e8c9112713b0f544a7cf58aa605cffdfaad2341f7bc3cbc7907da5e286070016fac1e18b8c666eb519f8377c70844e9351f49d3ff1849fe1172425608b22d45cd55cef6e531dd", 0xc5, 0x677}], 0x8, &(0x7f0000000840)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}, {@balloc_hashed_reloc='block-allocator=hashed_relocation'}, {@balloc_border='block-allocator=border'}, {@grpjquota='grpjquota'}], [{@obj_type={'obj_type', 0x3d, 'bdev'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x77, 0x37, 0x7b, 0x38, 0x66, 0x37], 0x2d, [0x7f, 0x7f, 0x0, 0x39], 0x2d, [0x66, 0x61, 0x62, 0x35], 0x2d, [0x77, 0x0, 0x32, 0x39], 0x2d, [0x38, 0x7f, 0x7f, 0xbabde0e24acea78, 0x0, 0x75, 0x63, 0x3f]}}}, {@pcr={'pcr', 0x3d, 0x3c}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x1f0c3624, 0xaf7, &(0x7f0000000300)=[{&(0x7f0000000080)="fc587f2285e4749e77bc1c38b40f3907ec44dc", 0x13, 0x3281}, {&(0x7f0000000380)="6c6c9efe5782c942c3b3b57588c617d157aca117531b874db4987850fe48a9f8e9a151f747287a126f9d2963f5910bde5144a75c31996d7a4518d05f60408d1156c049d7b748b08a2a15f32a41beaa4f83bc845396f42bc467be4fcf88ff578d1bfd169084fd2e6a5c1c1acecd685a8285a8b0739f9f1c0fb81fb1b6892f9339ca04d54a4af12eff0c09bc58f1ea266a4607adbdd43fafce27385e881e8752b598cabb8832d0c4f5957f345030e9cdc22b4f4a4473779a4bf9df98aa", 0xbc, 0x100}, {&(0x7f0000000200)="1c6c52175126537b41bc4e12816752bbd1a7ff68afd6a4bfc9af2abf8bac8a5b9a8b3a0f0ce6783a612e7204fe6a7aba5ca90345bb07f08ee1ceddb598f82a778b5e4b46aecfaa51d2e1ef5524527e513d800aab21be42810c75e006ccf99d9dc3009934f0c141fb1c4a111acb3f5e3debe9df53c2201efee968be2b3f35fb74e8ad24916bed80cc49b734d61cd318b1cf3ea34d5003c0379db1b899b486eb6c915fa1df80c60115f0ea7e5b9910ff63dea34edee0b20a74ace96dc40f12f20c29bafde961ae0cfe1473afae1b7f301a8aaaaa", 0xd3, 0xffff}], 0x8, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 584.752400][T19253] ? ___might_sleep+0x163/0x280 [ 584.757286][T19253] __should_failslab+0x121/0x190 [ 584.762236][T19253] should_failslab+0x9/0x14 [ 584.766744][T19253] kmem_cache_alloc_trace+0x2d3/0x790 [ 584.772126][T19253] ? kasan_kmalloc+0x9/0x10 [ 584.776631][T19253] ? __kmalloc+0x351/0x770 [ 584.781260][T19253] ? mutex_lock_io_nested+0x11d0/0x11d0 [ 584.786816][T19253] ? mark_held_locks+0xf0/0xf0 [ 584.791595][T19253] alloc_workqueue_attrs+0x3d/0xc0 [ 584.796721][T19253] apply_wqattrs_prepare+0xb6/0x960 [ 584.801932][T19253] ? lock_acquire+0x190/0x410 [ 584.806627][T19253] ? alloc_workqueue+0x8d8/0xf40 [ 584.811582][T19253] apply_workqueue_attrs_locked+0xcf/0x120 [ 584.817439][T19253] alloc_workqueue+0x8f1/0xf40 [ 584.822218][T19253] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 584.827951][T19253] ? kasan_kmalloc+0x9/0x10 [ 584.832468][T19253] ? kmem_cache_alloc_trace+0x346/0x790 [ 584.838027][T19253] hci_register_dev+0x1b8/0x8f0 [ 584.842886][T19253] ? __raw_spin_lock_init+0x2d/0x100 [ 584.848190][T19253] hci_uart_tty_ioctl+0x87e/0xc00 [ 584.853224][T19253] tty_ioctl+0xaf9/0x14f0 [ 584.857561][T19253] ? hci_uart_init_work+0x180/0x180 [ 584.862764][T19253] ? do_tty_hangup+0x30/0x30 [ 584.867371][T19253] ? tomoyo_path_number_perm+0x459/0x520 [ 584.873023][T19253] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 584.879271][T19253] ? tomoyo_path_number_perm+0x263/0x520 [ 584.884949][T19253] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 584.890784][T19253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 584.890806][T19253] ? ___might_sleep+0x163/0x280 [ 584.890824][T19253] ? do_tty_hangup+0x30/0x30 [ 584.890840][T19253] do_vfs_ioctl+0xdb6/0x13e0 [ 584.890855][T19253] ? ioctl_preallocate+0x210/0x210 [ 584.890881][T19253] ? selinux_file_mprotect+0x620/0x620 [ 584.901955][T19253] ? __fget+0x384/0x560 [ 584.901972][T19253] ? ksys_dup3+0x3e0/0x3e0 [ 584.901987][T19253] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 584.902002][T19253] ? fput_many+0x12c/0x1a0 [ 584.902022][T19253] ? tomoyo_file_ioctl+0x23/0x30 [ 584.945966][T19253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 16:04:34 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x3, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e24}, 0x1c) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={[], [], @loopback}}, 0x1b) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x5, 0x4) sendmmsg(r1, &(0x7f0000000240), 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x2, 0x1) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000240)={0x400, "a07449544a0437f865e096f4d5c2a2c7024ad40f85ce152358e7e180ff78d3b1", 0x804, 0xfffffffffffffffa, 0xe11a, 0xc, 0x7}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 584.952243][T19253] ? security_file_ioctl+0x8d/0xc0 [ 584.957365][T19253] ksys_ioctl+0xab/0xd0 [ 584.961521][T19253] __x64_sys_ioctl+0x73/0xb0 [ 584.961540][T19253] do_syscall_64+0xfd/0x6a0 [ 584.961557][T19253] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 584.961567][T19253] RIP: 0033:0x459829 [ 584.961587][T19253] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:04:34 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 585.000015][T19253] RSP: 002b:00007fd79d65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.008453][T19253] RAX: ffffffffffffffda RBX: 00007fd79d65bc90 RCX: 0000000000459829 [ 585.016896][T19253] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 585.024879][T19253] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 585.032859][T19253] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd79d65c6d4 [ 585.040855][T19253] R13: 00000000004c250e R14: 00000000004d5930 R15: 0000000000000004 [ 585.079614][ T21] Bluetooth: hci1: Frame reassembly failed (-84) [ 585.108150][T19253] Bluetooth: Can't register HCI device 16:04:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000180)=0x400000001, 0xc9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xd}, 0x1c) [ 585.136681][T19263] REISERFS warning (device loop4): super-6504 reiserfs_getopt: the option "grpjquota" requires an argument [ 585.136681][T19263] 16:04:34 executing program 2 (fault-call:2 fault-nth:11): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 585.365085][T19388] FAULT_INJECTION: forcing a failure. [ 585.365085][T19388] name failslab, interval 1, probability 0, space 0, times 0 [ 585.379645][T19388] CPU: 1 PID: 19388 Comm: syz-executor.2 Not tainted 5.3.0-rc1+ #78 [ 585.387911][T19388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.397971][T19388] Call Trace: [ 585.401283][T19388] dump_stack+0x172/0x1f0 [ 585.405633][T19388] should_fail.cold+0xa/0x15 [ 585.410337][T19388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 585.416673][T19388] ? fault_create_debugfs_attr+0x180/0x180 [ 585.422493][T19388] ? page_to_nid.part.0+0x20/0x20 [ 585.427791][T19388] ? ___might_sleep+0x163/0x280 [ 585.432655][T19388] __should_failslab+0x121/0x190 [ 585.437694][T19388] should_failslab+0x9/0x14 [ 585.442285][T19388] kmem_cache_alloc_trace+0x2d3/0x790 [ 585.447879][T19388] ? kasan_kmalloc+0x9/0x10 [ 585.452486][T19388] ? __kmalloc+0x351/0x770 [ 585.456913][T19388] ? mutex_lock_io_nested+0x11d0/0x11d0 [ 585.462493][T19388] alloc_workqueue_attrs+0x3d/0xc0 [ 585.467613][T19388] apply_wqattrs_prepare+0xbe/0x960 [ 585.472838][T19388] ? lock_acquire+0x190/0x410 [ 585.477639][T19388] ? alloc_workqueue+0x8d8/0xf40 [ 585.482589][T19388] apply_workqueue_attrs_locked+0xcf/0x120 [ 585.488412][T19388] alloc_workqueue+0x8f1/0xf40 [ 585.493188][T19388] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 585.498918][T19388] ? kasan_kmalloc+0x9/0x10 [ 585.498932][T19388] ? kmem_cache_alloc_trace+0x346/0x790 [ 585.498950][T19388] hci_register_dev+0x1b8/0x8f0 [ 585.498972][T19388] ? __raw_spin_lock_init+0x2d/0x100 [ 585.509123][T19388] hci_uart_tty_ioctl+0x87e/0xc00 [ 585.509142][T19388] tty_ioctl+0xaf9/0x14f0 [ 585.509155][T19388] ? hci_uart_init_work+0x180/0x180 [ 585.509167][T19388] ? do_tty_hangup+0x30/0x30 [ 585.509184][T19388] ? tomoyo_path_number_perm+0x459/0x520 [ 585.509203][T19388] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 585.509218][T19388] ? tomoyo_path_number_perm+0x263/0x520 [ 585.509239][T19388] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 585.561817][T19388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 585.568084][T19388] ? ___might_sleep+0x163/0x280 [ 585.572934][T19388] ? do_tty_hangup+0x30/0x30 [ 585.577519][T19388] do_vfs_ioctl+0xdb6/0x13e0 [ 585.582112][T19388] ? ioctl_preallocate+0x210/0x210 [ 585.587212][T19388] ? selinux_file_mprotect+0x620/0x620 [ 585.592652][T19388] ? __fget+0x384/0x560 [ 585.597447][T19388] ? ksys_dup3+0x3e0/0x3e0 [ 585.601877][T19388] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 585.608137][T19388] ? fput_many+0x12c/0x1a0 [ 585.612564][T19388] ? tomoyo_file_ioctl+0x23/0x30 [ 585.617495][T19388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 585.623746][T19388] ? security_file_ioctl+0x8d/0xc0 [ 585.628855][T19388] ksys_ioctl+0xab/0xd0 [ 585.633022][T19388] __x64_sys_ioctl+0x73/0xb0 [ 585.637618][T19388] do_syscall_64+0xfd/0x6a0 [ 585.642298][T19388] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 585.648298][T19388] RIP: 0033:0x459829 [ 585.652186][T19388] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 585.671773][T19388] RSP: 002b:00007fd79d65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.680275][T19388] RAX: ffffffffffffffda RBX: 00007fd79d65bc90 RCX: 0000000000459829 [ 585.688239][T19388] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 585.696532][T19388] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 585.704488][T19388] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd79d65c6d4 [ 585.712469][T19388] R13: 00000000004c250e R14: 00000000004d5930 R15: 0000000000000004 [ 585.758489][T19388] Bluetooth: Can't register HCI device [ 587.128054][ T3014] Bluetooth: hci1: command 0x1003 tx timeout [ 587.136863][ T1517] Bluetooth: hci1: sending frame failed (-49) [ 589.208121][ T3014] Bluetooth: hci1: command 0x1001 tx timeout [ 589.215961][ T1517] Bluetooth: hci1: sending frame failed (-49) [ 591.288237][ T17] Bluetooth: hci1: command 0x1009 tx timeout 16:04:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x4c05, &(0x7f0000000000)) 16:04:45 executing program 4: syz_emit_ethernet(0x9d, &(0x7f0000000100)={@broadcast, @local, [{[], {0x8100, 0x2, 0x20, 0x5}}], {@generic={0x88e5, "c0cb6168a18538e0c511f99753b39c65aaed5ec2b617b97154626dd9c8a3d5dadcad34e99cb2ec9d661c52d226d7e70412e2cbf206135aa711381410678b3abb3e03f26cd971b0760d6a38f119b528dd8ec5ab430b86943a6559ae9fd12a9faa0b1d5365cdd41e5308d8fb41b8f38e9302ceef8033b34d6d8f8797fe756d853672201dc51c4258aa41fcc8"}}}, 0x0) 16:04:45 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:04:45 executing program 2 (fault-call:2 fault-nth:12): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:04:45 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$RTC_PIE_OFF(r0, 0x7006) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @ipv4={[], [], @broadcast}, 0x3ff}}, 0x80, 0x0, 0x1000, 0x8, 0x1}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000400)={r1, 0xfffffffffffffff9}, &(0x7f0000000440)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'t\xc83\xd6\xc6m\xcd\xa8\t\x00', 0x9d01}) ioctl$RTC_PIE_OFF(r0, 0x7006) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'b\x00\x00\x00\x00\x00\x00\x00\x00\xee+\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'hwsim0\x00', 0x0}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000004c0)={r3, 0x5, 0x1, 0x3, 0xfffffffffffffff7, 0x4, 0x3e06}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x7, 0x4) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000080)=0xf359) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x8a, @ipv4={[], [], @multicast2}, 0x8}}}, &(0x7f0000000200)=0x84) r5 = request_key(&(0x7f0000000540)='rxrpc_s\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='/dev/radio#\x00', 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r5, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYBLOB="7f018000009e0008"], 0xc) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000500)={0x3, 0x3, 0x0, 0x11ca, 0xffffffffffffffa8, 0x7f, 0x3}) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000280)) 16:04:45 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x70, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0005000000e0000000001b000000000008000a009ed20000"], 0x30}}, 0x0) 16:04:45 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000100)) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000080)={0xffffffffffffa021, 0x9, 0x3, 0x1, 0x8, 0x1f, 0xd, "0275bc2b8456560ed0868c94c3668791f7c9953a", "90d1b1f9ee526055cc410151d67e6b58d4f2c55c"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000a08cb0bf040c000000dcff0f000000000000002004000000000000"], 0x0, 0x100318}, 0x20) [ 595.515432][T19405] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 595.537443][T19408] FAULT_INJECTION: forcing a failure. [ 595.537443][T19408] name failslab, interval 1, probability 0, space 0, times 0 [ 595.559763][ T25] Bluetooth: hci1: Frame reassembly failed (-84) [ 595.596940][T19408] CPU: 1 PID: 19408 Comm: syz-executor.2 Not tainted 5.3.0-rc1+ #78 [ 595.605790][T19408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.617040][T19408] Call Trace: [ 595.621289][T19408] dump_stack+0x172/0x1f0 [ 595.626706][T19408] should_fail.cold+0xa/0x15 [ 595.632491][T19408] ? lock_downgrade+0x920/0x920 [ 595.638438][T19408] ? fault_create_debugfs_attr+0x180/0x180 [ 595.644696][T19408] ? page_to_nid.part.0+0x20/0x20 [ 595.650010][T19408] ? ___might_sleep+0x163/0x280 [ 595.655244][T19408] __should_failslab+0x121/0x190 [ 595.660801][T19408] should_failslab+0x9/0x14 [ 595.665747][T19408] __kmalloc+0x2e0/0x770 [ 595.670395][T19408] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 595.676506][T19408] ? pwq_adjust_max_active+0x3b6/0x5c0 [ 595.682772][T19408] ? alloc_workqueue+0x166/0xf40 [ 595.687887][T19408] alloc_workqueue+0x166/0xf40 [ 595.692907][T19408] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 595.699376][T19408] ? kasan_kmalloc+0x9/0x10 [ 595.704182][T19408] ? kmem_cache_alloc_trace+0x346/0x790 [ 595.710228][T19408] hci_register_dev+0x209/0x8f0 [ 595.710247][T19408] hci_uart_tty_ioctl+0x87e/0xc00 [ 595.710263][T19408] tty_ioctl+0xaf9/0x14f0 [ 595.710276][T19408] ? hci_uart_init_work+0x180/0x180 [ 595.710289][T19408] ? do_tty_hangup+0x30/0x30 [ 595.710314][T19408] ? tomoyo_path_number_perm+0x459/0x520 [ 595.742837][T19408] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 595.749282][T19408] ? tomoyo_path_number_perm+0x263/0x520 [ 595.755919][T19408] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 595.763013][T19408] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 595.769663][T19408] ? ___might_sleep+0x163/0x280 [ 595.775112][T19408] ? do_tty_hangup+0x30/0x30 [ 595.779863][T19408] do_vfs_ioctl+0xdb6/0x13e0 [ 595.784633][T19408] ? ioctl_preallocate+0x210/0x210 [ 595.789996][T19408] ? selinux_file_mprotect+0x620/0x620 [ 595.795743][T19408] ? __fget+0x384/0x560 [ 595.799922][T19408] ? ksys_dup3+0x3e0/0x3e0 [ 595.804542][T19408] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 595.811061][T19408] ? fput_many+0x12c/0x1a0 [ 595.815600][T19408] ? tomoyo_file_ioctl+0x23/0x30 [ 595.820973][T19408] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 595.827540][T19408] ? security_file_ioctl+0x8d/0xc0 [ 595.833293][T19408] ksys_ioctl+0xab/0xd0 [ 595.837753][T19408] __x64_sys_ioctl+0x73/0xb0 [ 595.842384][T19408] do_syscall_64+0xfd/0x6a0 [ 595.847237][T19408] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 595.853420][T19408] RIP: 0033:0x459829 [ 595.857971][T19408] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 595.880155][T19408] RSP: 002b:00007fd79d65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.889920][T19408] RAX: ffffffffffffffda RBX: 00007fd79d65bc90 RCX: 0000000000459829 16:04:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x80, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x450400, 0x102) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x8008000) socket$alg(0x26, 0x5, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000580)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba6c88d52d8efb5037d7886150cdf3daa064f1b72715c51a3bf92c91774d868e78b371891bfe56d62d0668ef9e0e9f7fc1f028749e0346f9bf9a82983bfe47501eb0be45f550000a30b5213ab0bb361b317ff5cbbe0d4b180d328a4172daedef5b7ba0fc0a0cde35995b2e3488c74c1340ee86b63a4b881ccba48e9021956e273b235bdd987c7ab7a8c588a7712c40fed996ddd5ca4f60142e7510a9ca0a2a2ec3d434d138155aab9d663280cb164046e1a66927f221d1ff37a28fe5cc106d9bc4853fe434ff8bacb2db4aab93b86c6cd93d327798a8435046c5f88f3f6f85aa58c04001dda4b4ffe49a6c57a8dc7da68a8f2985e86f9c69bd6febe904b5d39c15042b6ede65d9c6dab9f9a61b27be42df351e5a79185ecf3081287585273de56349f7e448099efcede983ee60f0fb71943efb599b58dc7443df04b234de2e8c75c4ce7514eae64da1c3197f366f4a880b2e5f83ca48c9f7ed529f070f24b7677508aab9fa97b8956c277efc5a98094276ccc2544e265feb087b24630422cb7a4c2ce7de8841d64d1b2ac2431d121f43cd8fec56e120f196df241907c3e29f2be681aa0f6b69d44ba6cf12f80bd3ab3a217aea557d288169f7a64656c126c4a77b403db365efa87c1cab42333059852f7ee963e20999a5d47a7c26c14e2006bb673afb033a54b40914b6c4c22fb6ffce6ffb749a1194537c12434e3691527d7071af70661f310fe6e0bf377b4ee3e6647f38a24c9568f759e64041b20d643900fc579512c8707324410e5abfbe1bd328d918cd47dd6abc90dc9d145a690121542e8105a4b6c0fc7cf3b95f495d8384263acb9d5eb70d0d00c3b3828eeb23d505f493048c12c59901cf75b4efd403fe58cb67c0d1cfc0b2f48f98d2ba163d99cfa00f2e32edba28560f00b8f649e12781f5e856de53a4fc8df1716ac271a3a28c6a74a086e1cf3b96e79dc3fd4265623ef48cd5e1a6e22a214b005fc9c2fafdd0abdc4c681cb681e27d311085d3f9c307b6c177f4625b5d1bc525dacf1d0d3a059502f777feee0b7320ab3b64c89f80c1", 0xfffffffffffffd69, 0x50, 0x0, 0xffffffef) 16:04:45 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:04:45 executing program 0: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) bind$rds(r0, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="580000000000000014010000080000000000000000000000e3163da87187724a92e79cb7130c4a3136c77d5f32c638e965a1fb399123b8fdb37786689734f928268561663f26b18e07701020ed1d49bf45387431dda6d1a7159c729c397b47439188386628379c7b8c81b4ef778b308e288fa5fd257c32f0b68ea66ddba1148a8c", @ANYPTR=&(0x7f0000000800)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="008000"/48], 0x58}, 0x0) 16:04:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$kcm(0x10, 0x0, 0x4) socket$kcm(0x11, 0xa, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)={@loopback, @rand_addr, 0x0}, &(0x7f0000000540)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000580)={@empty, @mcast2, @rand_addr="49caa1f24281b2d92570a3f26b4ff48c", 0x3, 0x10000, 0x6, 0x0, 0x2, 0x0, r0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001140)='/dev/hwrng\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000001180)='hugetlb.2MB.usage_in_bytes\x00', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00mo'], 0xfdef) [ 595.898199][T19408] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 595.906852][T19408] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 595.915899][T19408] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd79d65c6d4 [ 595.924236][T19408] R13: 00000000004c250e R14: 00000000004d5930 R15: 0000000000000004 [ 595.941696][T19408] Bluetooth: Can't register HCI device 16:04:45 executing program 2 (fault-call:2 fault-nth:13): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 596.219529][T19586] FAULT_INJECTION: forcing a failure. [ 596.219529][T19586] name failslab, interval 1, probability 0, space 0, times 0 [ 596.234879][T19586] CPU: 0 PID: 19586 Comm: syz-executor.2 Not tainted 5.3.0-rc1+ #78 [ 596.243526][T19586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.244459][T19533] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 596.254460][T19586] Call Trace: [ 596.254496][T19586] dump_stack+0x172/0x1f0 [ 596.254519][T19586] should_fail.cold+0xa/0x15 [ 596.254540][T19586] ? lock_downgrade+0x920/0x920 [ 596.254560][T19586] ? fault_create_debugfs_attr+0x180/0x180 [ 596.254580][T19586] ? page_to_nid.part.0+0x20/0x20 [ 596.254597][T19586] ? ___might_sleep+0x163/0x280 [ 596.254619][T19586] __should_failslab+0x121/0x190 [ 596.254638][T19586] should_failslab+0x9/0x14 [ 596.254663][T19586] __kmalloc+0x2e0/0x770 [ 596.319755][T19586] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 596.326163][T19586] ? pwq_adjust_max_active+0x3b6/0x5c0 [ 596.333529][T19586] ? alloc_workqueue+0x166/0xf40 [ 596.339056][T19586] alloc_workqueue+0x166/0xf40 [ 596.345225][T19586] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 596.352427][T19586] ? kasan_kmalloc+0x9/0x10 [ 596.357121][T19586] ? kmem_cache_alloc_trace+0x346/0x790 [ 596.363450][T19586] hci_register_dev+0x209/0x8f0 [ 596.368323][T19586] hci_uart_tty_ioctl+0x87e/0xc00 [ 596.374348][T19586] tty_ioctl+0xaf9/0x14f0 [ 596.379127][T19586] ? hci_uart_init_work+0x180/0x180 [ 596.386197][T19586] ? do_tty_hangup+0x30/0x30 [ 596.391494][T19586] ? tomoyo_path_number_perm+0x459/0x520 [ 596.397968][T19586] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 596.404916][T19586] ? tomoyo_path_number_perm+0x263/0x520 [ 596.411189][T19586] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 596.418051][T19586] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.424946][T19586] ? ___might_sleep+0x163/0x280 [ 596.430419][T19586] ? do_tty_hangup+0x30/0x30 [ 596.435257][T19586] do_vfs_ioctl+0xdb6/0x13e0 [ 596.440339][T19586] ? ioctl_preallocate+0x210/0x210 [ 596.445699][T19586] ? selinux_file_mprotect+0x620/0x620 [ 596.451708][T19586] ? __fget+0x384/0x560 [ 596.456087][T19586] ? ksys_dup3+0x3e0/0x3e0 [ 596.461000][T19586] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 596.470432][T19586] ? fput_many+0x12c/0x1a0 [ 596.475512][T19586] ? tomoyo_file_ioctl+0x23/0x30 [ 596.480715][T19586] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.488163][T19586] ? security_file_ioctl+0x8d/0xc0 [ 596.495907][T19586] ksys_ioctl+0xab/0xd0 [ 596.500683][T19586] __x64_sys_ioctl+0x73/0xb0 [ 596.505692][T19586] do_syscall_64+0xfd/0x6a0 [ 596.511494][T19586] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 596.520022][T19586] RIP: 0033:0x459829 [ 596.524482][T19586] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 596.548094][T19586] RSP: 002b:00007fd79d65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.557368][T19586] RAX: ffffffffffffffda RBX: 00007fd79d65bc90 RCX: 0000000000459829 [ 596.565442][T19586] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 596.574357][T19586] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 596.583199][T19586] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd79d65c6d4 [ 596.593005][T19586] R13: 00000000004c250e R14: 00000000004d5930 R15: 0000000000000004 [ 596.604619][T19586] Bluetooth: Can't register HCI device [ 597.608013][ T3014] Bluetooth: hci1: command 0x1003 tx timeout [ 597.615617][ T1517] Bluetooth: hci1: sending frame failed (-49) [ 599.688129][ T3014] Bluetooth: hci1: command 0x1001 tx timeout [ 599.694249][ T1517] Bluetooth: hci1: sending frame failed (-49) [ 601.768125][ T3219] Bluetooth: hci1: command 0x1009 tx timeout 16:04:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5406, &(0x7f0000000000)) 16:04:55 executing program 0: personality(0x400000a) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x161040, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) 16:04:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x80, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x450400, 0x102) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x8008000) socket$alg(0x26, 0x5, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000580)="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", 0xfffffffffffffd69, 0x50, 0x0, 0xffffffef) 16:04:55 executing program 2 (fault-call:2 fault-nth:14): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:04:55 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:04:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$kcm(0x10, 0x0, 0x4) socket$kcm(0x11, 0xa, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)={@loopback, @rand_addr, 0x0}, &(0x7f0000000540)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000580)={@empty, @mcast2, @rand_addr="49caa1f24281b2d92570a3f26b4ff48c", 0x3, 0x10000, 0x6, 0x0, 0x2, 0x0, r0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001140)='/dev/hwrng\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000001180)='hugetlb.2MB.usage_in_bytes\x00', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00mo'], 0xfdef) [ 605.738199][ T24] audit: type=1400 audit(1564243495.400:174): avc: denied { map } for pid=19646 comm="syz-executor.0" path="/dev/nbd0" dev="devtmpfs" ino=394 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1 [ 605.741195][T19651] FAULT_INJECTION: forcing a failure. [ 605.741195][T19651] name failslab, interval 1, probability 0, space 0, times 0 [ 605.828515][T19651] CPU: 0 PID: 19651 Comm: syz-executor.2 Not tainted 5.3.0-rc1+ #78 [ 605.836544][T19651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 605.846787][T19651] Call Trace: [ 605.850092][T19651] dump_stack+0x172/0x1f0 [ 605.854444][T19651] should_fail.cold+0xa/0x15 [ 605.859765][T19651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 605.866021][T19651] ? fault_create_debugfs_attr+0x180/0x180 [ 605.871839][T19651] ? page_to_nid.part.0+0x20/0x20 [ 605.876874][T19651] ? ___might_sleep+0x163/0x280 [ 605.879282][T19657] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 605.883238][T19651] __should_failslab+0x121/0x190 [ 605.883257][T19651] should_failslab+0x9/0x14 [ 605.883271][T19651] kmem_cache_alloc_trace+0x2d3/0x790 [ 605.883298][T19651] ? kasan_kmalloc+0x9/0x10 [ 605.913109][T19651] ? __kmalloc+0x351/0x770 [ 605.917554][T19651] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 605.923313][T19651] alloc_workqueue_attrs+0x3d/0xc0 16:04:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x80, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x450400, 0x102) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x8008000) socket$alg(0x26, 0x5, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000580)="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", 0xfffffffffffffd69, 0x50, 0x0, 0xffffffef) [ 605.923327][T19651] alloc_workqueue+0x18b/0xf40 [ 605.923343][T19651] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 605.923361][T19651] ? kasan_kmalloc+0x9/0x10 [ 605.923372][T19651] ? kmem_cache_alloc_trace+0x346/0x790 [ 605.923389][T19651] hci_register_dev+0x209/0x8f0 [ 605.923413][T19651] hci_uart_tty_ioctl+0x87e/0xc00 [ 605.923430][T19651] tty_ioctl+0xaf9/0x14f0 [ 605.923443][T19651] ? hci_uart_init_work+0x180/0x180 [ 605.923462][T19651] ? do_tty_hangup+0x30/0x30 [ 605.960321][T19651] ? tomoyo_path_number_perm+0x459/0x520 [ 605.960343][T19651] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 605.960358][T19651] ? tomoyo_path_number_perm+0x263/0x520 [ 605.960374][T19651] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 605.960388][T19651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 605.960416][T19651] ? ___might_sleep+0x163/0x280 [ 605.974502][T19651] ? do_tty_hangup+0x30/0x30 [ 605.974520][T19651] do_vfs_ioctl+0xdb6/0x13e0 [ 605.974540][T19651] ? ioctl_preallocate+0x210/0x210 [ 605.986392][T19651] ? selinux_file_mprotect+0x620/0x620 [ 605.986414][T19651] ? __fget+0x384/0x560 [ 605.986433][T19651] ? ksys_dup3+0x3e0/0x3e0 [ 605.998653][T19651] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 605.998670][T19651] ? fput_many+0x12c/0x1a0 [ 605.998691][T19651] ? tomoyo_file_ioctl+0x23/0x30 [ 606.019185][T19651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 606.019203][T19651] ? security_file_ioctl+0x8d/0xc0 [ 606.019219][T19651] ksys_ioctl+0xab/0xd0 [ 606.019232][T19651] __x64_sys_ioctl+0x73/0xb0 [ 606.019251][T19651] do_syscall_64+0xfd/0x6a0 [ 606.019274][T19651] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 606.025037][T13194] Bluetooth: hci1: Frame reassembly failed (-84) [ 606.028961][T19651] RIP: 0033:0x459829 [ 606.028978][T19651] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 606.028984][T19651] RSP: 002b:00007fd79d65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 16:04:55 executing program 0: chroot(0x0) chdir(0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') readlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)=""/176, 0xb0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10000, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) inotify_init1(0x807fb) 16:04:55 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 606.028998][T19651] RAX: ffffffffffffffda RBX: 00007fd79d65bc90 RCX: 0000000000459829 [ 606.029006][T19651] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 606.029013][T19651] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 606.029020][T19651] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd79d65c6d4 [ 606.029027][T19651] R13: 00000000004c250e R14: 00000000004d5930 R15: 0000000000000004 [ 606.171179][T19651] Bluetooth: Can't register HCI device 16:04:55 executing program 2 (fault-call:2 fault-nth:15): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:04:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$kcm(0x10, 0x0, 0x4) socket$kcm(0x11, 0xa, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)={@loopback, @rand_addr, 0x0}, &(0x7f0000000540)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000580)={@empty, @mcast2, @rand_addr="49caa1f24281b2d92570a3f26b4ff48c", 0x3, 0x10000, 0x6, 0x0, 0x2, 0x0, r0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001140)='/dev/hwrng\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000001180)='hugetlb.2MB.usage_in_bytes\x00', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00mo'], 0xfdef) 16:04:56 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x0) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000000040)={0x3, 0x2}) [ 606.488106][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 606.493953][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 606.579924][T19817] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 608.088018][ T22] Bluetooth: hci1: command 0x1003 tx timeout [ 608.094150][ T1517] Bluetooth: hci1: sending frame failed (-49) [ 610.168170][ T3014] Bluetooth: hci1: command 0x1001 tx timeout [ 610.174345][ T1517] Bluetooth: hci1: sending frame failed (-49) [ 612.248161][ T22] Bluetooth: hci1: command 0x1009 tx timeout 16:05:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5409, &(0x7f0000000000)) 16:05:06 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:05:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 16:05:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x80, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x450400, 0x102) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x8008000) socket$alg(0x26, 0x5, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000580)="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", 0xfffffffffffffd69, 0x50, 0x0, 0xffffffef) 16:05:06 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x202000, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000040)=0x200) r1 = getpgid(0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f00000002c0)={0x0, 0x0}) kcmp(r1, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 16:05:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") openat$usbmon(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon0\x00', 0x8400, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x9bf24fa437782893, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f00000001c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0xffffff9c}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xe7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x100000002000000, 0x2d328a45860d7df, 0x0, &(0x7f0000000180)="b0ea1f4d6bb01ebbbbc60e391933", 0x0, 0x8000}, 0xfffffffffffffd49) 16:05:06 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000080)=""/120, 0x78}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x2, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) pwritev(r0, &(0x7f00000003c0), 0x273, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x2000002000000011, r0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) getgroups(0x1, &(0x7f0000001640)=[0x0]) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) 16:05:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000280)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x4, @remote}, 0x10) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 616.698797][ T25] Bluetooth: hci0: Frame reassembly failed (-84) [ 616.739401][ T2668] Bluetooth: hci1: Frame reassembly failed (-84) 16:05:06 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:05:06 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x5, 0x0) vmsplice(r1, &(0x7f0000001780)=[{&(0x7f0000001580)="9a", 0x1}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x103fffffd, 0xc) sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}, {&(0x7f00000017c0)="06", 0x1}], 0x2}, 0x0) 16:05:06 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x1}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x10, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x8) 16:05:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000280)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x4, @remote}, 0x10) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) [ 617.062573][T20022] sctp: [Deprecated]: syz-executor.5 (pid 20022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 617.062573][T20022] Use struct sctp_sack_info instead [ 617.117289][T20094] sctp: [Deprecated]: syz-executor.5 (pid 20094) Use of struct sctp_assoc_value in delayed_ack socket option. [ 617.117289][T20094] Use struct sctp_sack_info instead [ 618.728036][ T3014] Bluetooth: hci0: command 0x1003 tx timeout [ 618.734175][T16259] Bluetooth: hci0: sending frame failed (-49) [ 618.808193][ T3014] Bluetooth: hci1: command 0x1003 tx timeout [ 618.814298][T16259] Bluetooth: hci1: sending frame failed (-49) [ 620.808101][ T3014] Bluetooth: hci0: command 0x1001 tx timeout [ 620.814398][T16259] Bluetooth: hci0: sending frame failed (-49) [ 620.888250][ T3014] Bluetooth: hci1: command 0x1001 tx timeout [ 620.894710][T16259] Bluetooth: hci1: sending frame failed (-49) [ 622.888159][ T22] Bluetooth: hci0: command 0x1009 tx timeout [ 622.968254][ T22] Bluetooth: hci1: command 0x1009 tx timeout 16:05:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x540b, &(0x7f0000000000)) 16:05:16 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:05:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x2, 0x4) 16:05:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000840)='ns/mnt\x00') 16:05:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000280)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x4, @remote}, 0x10) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) 16:05:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r0, &(0x7f0000000300)=""/245, 0xf5) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) getdents64(r0, 0x0, 0x0) 16:05:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe0000010000000008001a000a000008"], 0x24}}, 0x0) 16:05:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x10, 0x4) [ 626.962900][ T25] Bluetooth: hci0: Frame reassembly failed (-84) 16:05:16 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f00000004c0)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, 0x0, 0xeefffdef) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000000)={0x0, 0x5, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f4727544"}, 0x0, 0x0, @userptr, 0x4}) [ 627.034859][T20238] netlink: 'syz-executor.5': attribute type 26 has an invalid length. 16:05:16 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x1}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0xd, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x8) 16:05:16 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[], 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:05:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5e, 0x4) [ 628.968011][T11105] Bluetooth: hci0: command 0x1003 tx timeout [ 628.974122][T15101] Bluetooth: hci0: sending frame failed (-49) [ 631.048138][T11105] Bluetooth: hci0: command 0x1001 tx timeout [ 631.054330][T15101] Bluetooth: hci0: sending frame failed (-49) [ 633.128158][ T17] Bluetooth: hci0: command 0x1009 tx timeout 16:05:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x540c, &(0x7f0000000000)) 16:05:26 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 16:05:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x4b47, 0x4) 16:05:26 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[], 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:05:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x1}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x71, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x8) 16:05:26 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc0585611, &(0x7f0000000000)={0x0, 0x5, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f4727544"}, 0x0, 0x0, @userptr, 0x4}) 16:05:26 executing program 5: 16:05:26 executing program 0: 16:05:26 executing program 4: [ 637.189807][ T21] Bluetooth: hci0: Frame reassembly failed (-84) 16:05:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x4b49, 0x4) 16:05:26 executing program 5: 16:05:26 executing program 0: [ 639.208174][ T3014] Bluetooth: hci0: command 0x1003 tx timeout [ 639.214387][T15101] Bluetooth: hci0: sending frame failed (-49) [ 641.288203][ T3014] Bluetooth: hci0: command 0x1001 tx timeout [ 641.294327][T15101] Bluetooth: hci0: sending frame failed (-49) [ 643.368241][ T17] Bluetooth: hci0: command 0x1009 tx timeout 16:05:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x540d, &(0x7f0000000000)) 16:05:36 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[], 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:05:36 executing program 4: 16:05:36 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) faccessat(0xffffffffffffff9c, 0x0, 0xa, 0x800) 16:05:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x4c00, 0x4) 16:05:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x113d, 0x0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = gettid() r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pwrite64(r2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) clone(0x2122005ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) tkill(r1, 0x13) 16:05:37 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/33, 0x11) 16:05:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x4c01, 0x4) 16:05:37 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) read$eventfd(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 647.377490][ T25] Bluetooth: hci0: Frame reassembly failed (-84) 16:05:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000082000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) 16:05:37 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:05:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0xb4, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x1) getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0xb7e, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2}, 0x0, 0x0, &(0x7f0000000200)={0x3, 0xc, 0x0, 0x4}, &(0x7f0000000240)=0x2e, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x1}}, 0x10) shutdown(r0, 0x0) [ 649.458056][ T17] Bluetooth: hci0: command 0x1003 tx timeout [ 649.464549][T15101] Bluetooth: hci0: sending frame failed (-49) [ 651.528131][ T17] Bluetooth: hci0: command 0x1001 tx timeout [ 651.534391][T15101] Bluetooth: hci0: sending frame failed (-49) [ 653.608066][ T3014] Bluetooth: hci0: command 0x1009 tx timeout 16:05:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5411, &(0x7f0000000000)) 16:05:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5409, 0x4) 16:05:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000800130000000008"], 0x24}}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) 16:05:47 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000004c80)='/dev/adsp#\x00', 0x7, 0x10000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004cc0)={'vcan0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000004d00)={r1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x101801) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) r4 = socket(0x10, 0x80002, 0x0) connect$netlink(r4, &(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc) getpeername$packet(r4, &(0x7f00000008c0), &(0x7f0000000900)=0x14) 16:05:47 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x100000000014, 0x4, 0x8, 0x100}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001f40)={r1, &(0x7f0000000000), 0x0}, 0x18) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) 16:05:47 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:05:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000040)={0x27, 0x0, 0x3, 0x0, 0x0, 0x0, "ac41d1c45d71d3ed2a4182b9a6fdfebbf3550b2209895f348f8fc6716e08d1364ad5526c6e898cd32b6a3217fa0cb9e4cafe0569942f46cde7188b00", 0x1}, 0x60) 16:05:47 executing program 4: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') r4 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000480)={0x5, 0x70, 0x800, 0x97a, 0x0, 0x0, 0x0, 0x9, 0x400, 0x2, 0x6, 0x20, 0x0, 0x670, 0xb0e, 0x5d, 0x1, 0x80000000, 0xd7, 0x10001, 0x4, 0x8, 0x1, 0x7, 0x7, 0x1, 0x80, 0x7f1, 0xfffffffffffffffc, 0x2, 0x8b7c, 0x100, 0x4, 0x2, 0x4, 0xff, 0x6, 0x100, 0x0, 0x8f, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x800, 0x401, 0x5, 0x6, 0x71, 0x0, 0x7f}, r5, 0x2, r1, 0x9) mkdirat(r0, &(0x7f0000000440)='./file1\x00', 0x3) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x1, 0x300) getsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000040)=""/8, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) fsetxattr$security_smack_transmute(r1, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000380)='TRUE', 0x4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone(0x81000000, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0xffffffffffffff92) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000500)={{0x9, 0x81, 0xfffffffffffff000, 0x1, 0x1ff, 0x4}, 0x0, 0x8, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x100000001, 0x1, 0x7fff, 0xffff, 0x8, 0x1}) setsockopt$sock_int(r2, 0x1, 0x20000000000002c, &(0x7f0000f59ffc)=0x5, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000300)=0x8000006, 0xfffffdee) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c) getpid() mknod$loop(&(0x7f0000000600)='./file0\x00', 0x6005, 0x0) creat(&(0x7f00000007c0)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') sendto$inet(r4, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 16:05:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x20000, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000001c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7fffffff}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/176, 0xb0}], 0x1) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)) [ 657.640426][ T2668] Bluetooth: hci0: Frame reassembly failed (-84) 16:05:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x540b, 0x4) 16:05:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x4000000000089f4, &(0x7f0000000000)={'sit0\x00\x00\x00\x04\x00', @ifru_flags}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getpgid(0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x112, 0x4, 0x0, &(0x7f0000000080)) 16:05:47 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 658.328038][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 658.328068][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 658.333868][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 658.488086][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 658.493964][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 659.368068][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 659.374406][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 659.380334][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 659.386405][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 659.688074][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 659.688084][ T17] Bluetooth: hci0: command 0x1003 tx timeout [ 659.688151][T15101] Bluetooth: hci0: sending frame failed (-49) [ 661.768099][ T17] Bluetooth: hci0: command 0x1001 tx timeout [ 661.774231][T15101] Bluetooth: hci0: sending frame failed (-49) [ 663.528159][ C0] net_ratelimit: 18 callbacks suppressed [ 663.528169][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 663.539673][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 663.545513][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 663.551367][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 663.848070][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 663.853967][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 663.859928][ T3014] Bluetooth: hci0: command 0x1009 tx timeout [ 664.568129][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 664.568149][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 664.573986][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 664.579686][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:05:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5413, &(0x7f0000000000)) 16:05:57 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x100, 0x0) fcntl$setstatus(r0, 0x4, 0x46c00) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200000, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x8, 0x80, 0x413, 0x1, 0x5, 0x3ff, 0x10001, 0x7, 0x5, 0x3, 0x72c6, 0x9}) set_mempolicy(0xc000, 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f00000000c0)={0x28f634, 0x401, 0x1}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x5, 0xd0, 0xfffffffffffffffd, 0xffff, 0x11, 0x902, 0xeb67ba0, 0x4, 0xef8, 0x6, 0x4, 0x1}) 16:05:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x540c, 0x4) 16:05:57 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x3, &(0x7f0000000600)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x54}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x1fe, &(0x7f0000000240)=""/153}, 0x48) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 16:05:57 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:05:57 executing program 4: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') r4 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000480)={0x5, 0x70, 0x800, 0x97a, 0x0, 0x0, 0x0, 0x9, 0x400, 0x2, 0x6, 0x20, 0x0, 0x670, 0xb0e, 0x5d, 0x1, 0x80000000, 0xd7, 0x10001, 0x4, 0x8, 0x1, 0x7, 0x7, 0x1, 0x80, 0x7f1, 0xfffffffffffffffc, 0x2, 0x8b7c, 0x100, 0x4, 0x2, 0x4, 0xff, 0x6, 0x100, 0x0, 0x8f, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x800, 0x401, 0x5, 0x6, 0x71, 0x0, 0x7f}, r5, 0x2, r1, 0x9) mkdirat(r0, &(0x7f0000000440)='./file1\x00', 0x3) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x1, 0x300) getsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000040)=""/8, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) fsetxattr$security_smack_transmute(r1, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000380)='TRUE', 0x4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone(0x81000000, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0xffffffffffffff92) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000500)={{0x9, 0x81, 0xfffffffffffff000, 0x1, 0x1ff, 0x4}, 0x0, 0x8, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x100000001, 0x1, 0x7fff, 0xffff, 0x8, 0x1}) setsockopt$sock_int(r2, 0x1, 0x20000000000002c, &(0x7f0000f59ffc)=0x5, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000300)=0x8000006, 0xfffffdee) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c) getpid() mknod$loop(&(0x7f0000000600)='./file0\x00', 0x6005, 0x0) creat(&(0x7f00000007c0)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') sendto$inet(r4, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 16:05:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x5, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x9, 0x8, 0x5, 0x2008000000000000, 0x3}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r3, 0x101}, 0x8) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000100)={0x6, 0x5e1c, 0x3}) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000300)={r3, 0x22}, 0x8) listen(r1, 0xffffffffefffffff) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="03", 0x1}], 0x1, 0x0, 0x0, 0x3c01}, 0x0) 16:05:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x540d, 0x4) 16:05:57 executing program 5: msgsnd(0x0, &(0x7f0000000340), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fdatasync(r0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x5, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x1, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000080)={0x10}) ioctl$TIOCCONS(r1, 0x541d) [ 667.901852][ T2668] Bluetooth: hci0: Frame reassembly failed (-84) 16:05:57 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:05:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x540e, 0x4) 16:05:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0xfffffe25) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="b63db85e1e8d020000000000003ef0011dcc606a010000807018cebc9b97ae21b14d872c678ce22c9b160096aa1fae1a", 0x30) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@multicast1, @local}, 0xc) close(r0) [ 668.728029][ C0] net_ratelimit: 19 callbacks suppressed [ 668.728037][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 668.728062][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 668.733747][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 668.888093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 668.893951][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 669.778063][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 669.783868][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 669.789740][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 669.795485][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 669.928113][ T3219] Bluetooth: hci0: command 0x1003 tx timeout [ 669.934216][T15101] Bluetooth: hci0: sending frame failed (-49) [ 670.098086][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 672.008142][ T3014] Bluetooth: hci0: command 0x1001 tx timeout [ 672.018869][T15101] Bluetooth: hci0: sending frame failed (-49) [ 673.928061][ C0] net_ratelimit: 19 callbacks suppressed [ 673.933768][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 673.939568][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 673.945475][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 673.951237][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 674.088068][ T3014] Bluetooth: hci0: command 0x1009 tx timeout [ 674.248059][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 674.253845][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 674.968083][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 674.968089][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 674.968137][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 674.973920][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:06:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5414, &(0x7f0000000000)) 16:06:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x540f, 0x4) 16:06:07 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:06:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0xfffffe25) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="b63db85e1e8d020000000000003ef0011dcc606a010000807018cebc9b97ae21b14d872c678ce22c9b160096aa1fae1a", 0x30) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@multicast1, @local}, 0xc) close(r0) 16:06:07 executing program 5: r0 = socket$kcm(0xa, 0x8, 0x73) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) 16:06:07 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:06:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000140)={[], 0x7, 0x4, 0xa71, 0x8b, 0x4, r5}) r6 = socket$netlink(0x10, 0x3, 0x4000000000000004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 16:06:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5410, 0x4) [ 678.128391][T20675] Bluetooth: hci0: Frame reassembly failed (-84) 16:06:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000001780)={'bond0\x00\x00\x19\x00\x02\x00\x00\x00\x00?\x00', @ifru_names='lo\x00\x00\x00`\xff\xff\xff\xff\x00\x00\x00\x00\xff\xff'}) [ 678.225274][ T24] audit: type=1400 audit(1564243567.890:175): avc: denied { map } for pid=20881 comm="syz-executor.4" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=55412 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 [ 678.386055][T20997] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 678.402956][ T24] audit: type=1400 audit(1564243568.040:176): avc: denied { create } for pid=20996 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 16:06:08 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542c"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:06:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5412, 0x4) 16:06:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000040)={'bond0\x00@@\xea\xff\xff\x00\x00\x02\x00', @ifru_data=&(0x7f0000000000)="63d233117af08b8022cbfb25ae7e8a8f522370596fdcae4d29391467e4f7cf30"}) [ 678.473410][T20997] bond0: (slave lo): slave is up - this may be due to an out of date ifenslave [ 678.534359][ T24] audit: type=1400 audit(1564243568.200:177): avc: denied { ioctl } for pid=21015 comm="syz-executor.4" path="socket:[55436]" dev="sockfs" ino=55436 ioctlcmd=0x8994 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 678.600320][T21022] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 678.661077][T21022] bond0: (slave lo): slave is up - this may be due to an out of date ifenslave [ 679.128111][ C1] net_ratelimit: 19 callbacks suppressed [ 679.128121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 679.138105][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 679.139639][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 679.145287][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 679.288110][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 679.293985][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 680.168129][ T17] Bluetooth: hci0: command 0x1003 tx timeout [ 680.174784][T15101] Bluetooth: hci0: sending frame failed (-49) [ 680.180965][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 680.181000][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 680.181058][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 680.181084][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 682.248486][ T3014] Bluetooth: hci0: command 0x1001 tx timeout [ 682.254615][T15101] Bluetooth: hci0: sending frame failed (-49) [ 684.328124][ C0] net_ratelimit: 19 callbacks suppressed [ 684.328174][ T17] Bluetooth: hci0: command 0x1009 tx timeout [ 684.333836][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 684.345556][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 684.351357][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 684.357276][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 684.648132][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 684.653987][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 685.368107][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 685.368142][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 685.373951][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 685.528107][ C1] protocol 88fb is buggy, dev hsr_slave_0 16:06:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5415, &(0x7f0000000000)) 16:06:17 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x1b4, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000980)="e8268a927f1f6588b967481241ba18ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511ff746bec66ba6c88f1b72715c51a3bf92c91000000000000003f22bc14896fa9411b10e93ae7fe30c15971d6e58e608cc7067a2ec08ca187c1c57796ea2ad44782fba40d4a84f2066786e09a68ced498856e855a23c9d9425f67dff926c622e55abf69680edac6913e78b5ed8f74b59f8fffff52e5cdcb12916ff7d8f3177e8d4a8cfb5d8b20365570d1485f191596f5cbee15757ab3b73f207b610d596e63c2ebe2444dc3f4785f736bbb5394f923542c54824a72491555da91235e8ce99c6bd8692d1dd89c4913b885370b62f0a73e5cd916ddccae8477727d162d3ed409e773b4059c55acc21ebc5fa00bb897a60fc6bf8942cdfd0a490ef3164294cf23f6e822d672ef3d33e4f574cc9a609ee82bc9672ba61dd4d34cfde37cd134533430b8f592c8010000809e8325b960fbdb2184b9bd9a62cf294b01ddfbba91605e32eda8184212a7cedff7b39ef4b5325f4e6fc7360ca5bd919e7b3d26a065bc7f350cf4368a8d42c24e10d3e9347cdc6f6c97799ef56f62504bb3525103e2d44b28dd29d654a0f7b54ee690cab71ba2afa866fb17a312926fb89031db82f9622cc848749e2f2f3dca0ed27006abc39b3287c49dbb550c705adfdd49fe1075a54984d579b9363e8eff", 0xff82, 0x0, 0x0, 0x87) 16:06:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5413, 0x4) 16:06:17 executing program 5: r0 = socket(0x10, 0x80002, 0x0) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000), &(0x7f0000000300)=0x3c4) 16:06:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'lo\x00\x00\x00\x00\x00\x00\xed\xff\xff\xff\xff\xff\xff\xff'}) r1 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x18, &(0x7f00000002c0)={0x500, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2000000000001fb}, 0x90) 16:06:17 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542c"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:06:18 executing program 5: gettid() mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x400002172, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) open(&(0x7f0000000200)='./bus/file0\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r2, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:06:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5414, 0x4) 16:06:18 executing program 0: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) write$P9_RWRITE(r0, &(0x7f0000000340)={0xb}, 0xb) [ 688.373721][ T2668] Bluetooth: hci0: Frame reassembly failed (-84) 16:06:18 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542c"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:06:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5415, 0x4) [ 688.567565][ T24] audit: type=1804 audit(1564243578.230:178): pid=21254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir670322151/syzkaller.gS9Zbs/250/bus" dev="sda1" ino=16748 res=1 16:06:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5416, 0x4) [ 689.528095][ C0] net_ratelimit: 18 callbacks suppressed [ 689.528103][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 689.528126][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 689.533865][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 689.688097][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 689.693952][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 690.408024][ T17] Bluetooth: hci0: command 0x1003 tx timeout [ 690.414958][T15101] Bluetooth: hci0: sending frame failed (-49) [ 690.568128][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 690.574238][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 690.580126][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 690.585887][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 690.898043][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 692.488090][T11105] Bluetooth: hci0: command 0x1001 tx timeout [ 692.494249][T15101] Bluetooth: hci0: sending frame failed (-49) [ 694.568173][ T17] Bluetooth: hci0: command 0x1009 tx timeout [ 694.728126][ C0] net_ratelimit: 18 callbacks suppressed [ 694.733812][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 694.739573][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 694.745576][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 694.751641][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 695.048076][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 695.053874][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 695.768065][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 695.768073][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 695.768134][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 695.773918][ C1] protocol 88fb is buggy, dev hsr_slave_1 16:06:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5416, &(0x7f0000000000)) 16:06:28 executing program 5: futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f00000000c0), 0x1) 16:06:28 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f9"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:06:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5418, 0x4) 16:06:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000001c0)) 16:06:28 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x1, 0x0) 16:06:28 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1a, &(0x7f0000000000), 0x4) 16:06:28 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) 16:06:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x541b, 0x4) 16:06:28 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) faccessat(0xffffffffffffff9c, 0x0, 0xa, 0xc00) 16:06:28 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x800000000050000}]}) r0 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, 0x0) 16:06:28 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f9"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 699.928065][ C0] net_ratelimit: 20 callbacks suppressed [ 699.928090][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 699.938043][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 699.939705][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 699.945358][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 700.088143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 700.094137][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 700.648093][T11105] Bluetooth: hci0: command 0x1003 tx timeout [ 700.654397][T15101] Bluetooth: hci0: sending frame failed (-49) [ 700.968059][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 700.974449][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 700.980363][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 700.986412][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 702.728083][ T22] Bluetooth: hci0: command 0x1001 tx timeout [ 702.734273][T15101] Bluetooth: hci0: sending frame failed (-49) [ 704.808091][T11105] Bluetooth: hci0: command 0x1009 tx timeout [ 705.128090][ C0] net_ratelimit: 20 callbacks suppressed [ 705.135299][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 705.141568][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 705.147797][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 705.153608][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 705.448107][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 705.453980][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 706.168050][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 706.168111][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 706.173824][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 706.180938][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:06:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5418, &(0x7f0000000000)) 16:06:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x541d, 0x4) 16:06:38 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x800000000050000}]}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0xfffffd4c) 16:06:38 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f9"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:06:38 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x10001) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xfffffefe) fallocate(r1, 0x3, 0x8000, 0x8000) fallocate(r1, 0x3, 0x5e89, 0xfff9) 16:06:38 executing program 4: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/11, 0x5e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f0000000600)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 16:06:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x541e, 0x4) 16:06:38 executing program 5: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f9"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:06:38 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 708.822414][T20675] Bluetooth: hci0: Frame reassembly failed (-84) 16:06:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x541f, 0x4) 16:06:38 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542c"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:06:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5420, 0x4) [ 710.328130][ C0] net_ratelimit: 20 callbacks suppressed [ 710.328137][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 710.328170][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 710.335043][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 710.488108][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 710.493927][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 710.888015][ T22] Bluetooth: hci0: command 0x1003 tx timeout [ 710.894130][T15101] Bluetooth: hci0: sending frame failed (-49) [ 711.378057][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 711.384713][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 711.390919][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 711.398441][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 711.698030][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 712.968056][ T22] Bluetooth: hci0: command 0x1001 tx timeout [ 712.974246][T15101] Bluetooth: hci0: sending frame failed (-49) [ 715.048069][ T3014] Bluetooth: hci0: command 0x1009 tx timeout [ 715.528065][ C0] net_ratelimit: 19 callbacks suppressed [ 715.528072][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 715.541217][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 715.554206][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 715.560126][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 715.848082][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 715.854166][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 716.568187][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 716.568358][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 716.574104][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 716.579987][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:06:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x541b, &(0x7f0000000000)) 16:06:48 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:06:48 executing program 4: setresuid(0x0, 0xee01, 0x0) keyctl$invalidate(0x15, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 16:06:48 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:06:48 executing program 0: r0 = socket$inet(0x2, 0x4004000000000001, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) 16:06:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5421, 0x4) 16:06:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5422, 0x4) 16:06:48 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) getresuid(&(0x7f0000000080), &(0x7f0000000140)=0x0, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000001c0)={0xfffffffffffffffa, 0x4, r1, 0x0, r2, 0x0, 0xffffffffffff0000, 0x4}) alarm(0x6) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) write$selinux_create(r0, &(0x7f0000000200)=@objname={'system_u:object_r:chkpwd_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x0, 0x20, './file0\x00'}, 0x4f) [ 719.066451][ T25] Bluetooth: hci0: Frame reassembly failed (-84) 16:06:48 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:06:48 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:06:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5423, 0x4) 16:06:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/400], 0x190) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x100000000, 0x30}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r2, 0x5}, 0x8) [ 720.728087][ C1] net_ratelimit: 20 callbacks suppressed [ 720.728093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 720.738058][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 720.739537][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 720.745491][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 720.888182][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 720.893984][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 721.128089][ T17] Bluetooth: hci0: command 0x1003 tx timeout [ 721.134257][T15101] Bluetooth: hci0: sending frame failed (-49) [ 721.778054][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 721.784969][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 721.790809][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 721.797473][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 723.208087][ T17] Bluetooth: hci0: command 0x1001 tx timeout [ 723.214203][T15101] Bluetooth: hci0: sending frame failed (-49) [ 725.288118][ T3014] Bluetooth: hci0: command 0x1009 tx timeout [ 725.928373][ C0] net_ratelimit: 20 callbacks suppressed [ 725.934146][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 725.940172][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 725.946343][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 725.952522][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 726.248075][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 726.254633][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 726.968061][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 726.968148][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 726.973912][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 726.980215][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:06:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x541d, &(0x7f0000000000)) 16:06:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @bcast]}, 0x40) 16:06:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5424, 0x4) 16:06:58 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400040, 0x0) syz_emit_ethernet(0x0, &(0x7f0000000040)=ANY=[], 0x0) 16:06:58 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:06:58 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:06:58 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(r0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x9) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) close(r3) recvmmsg(r2, &(0x7f0000000080), 0x1ca, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) clone(0x44088001, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:06:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5425, 0x4) 16:06:58 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x40000000, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000000014000000000000000000822e080012000000030000000000000000000600000000000000000000009a0000000700000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000020000000000005000600000000000a00000000000000fe8000000000000000000000000000ff00000000000000"], 0x334}}, 0x0) [ 729.303909][ T25] Bluetooth: hci0: Frame reassembly failed (-84) 16:06:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5427, 0x4) 16:06:59 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 729.403920][T21450] IPVS: ftp: loaded support on port[0] = 21 16:06:59 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) [ 729.621222][T21475] IPVS: ftp: loaded support on port[0] = 21 [ 731.128052][ C0] net_ratelimit: 20 callbacks suppressed [ 731.128058][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 731.128066][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 731.128101][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 731.133875][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 731.288188][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 731.294091][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 731.368318][T11105] Bluetooth: hci0: command 0x1003 tx timeout [ 731.374860][T15101] Bluetooth: hci0: sending frame failed (-49) [ 732.168054][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 732.176602][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 732.182866][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 732.188820][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 733.448167][ T3014] Bluetooth: hci0: command 0x1001 tx timeout [ 733.454378][T15101] Bluetooth: hci0: sending frame failed (-49) [ 735.528041][ T22] Bluetooth: hci0: command 0x1009 tx timeout [ 736.328071][ C0] net_ratelimit: 20 callbacks suppressed [ 736.328077][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 736.339669][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 736.345601][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 736.351544][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 736.648090][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 736.653929][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 737.368042][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 737.368069][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 737.373835][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 737.528279][ C1] protocol 88fb is buggy, dev hsr_slave_0 16:07:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000000)) 16:07:09 executing program 0: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000300)={0x0, @reserved}) pipe(&(0x7f0000000440)={0xffffffffffffffff}) write(r0, &(0x7f0000000140)="01e79b40a00dedcba13386470d952dc529bd20ef435821e4250cc7c19fedadfaac45669f83a0ac0bf4e0a16e4ce702b1b56ed8e79760c2c1bd407ccff28746aae86d3212262dffafc4a2a7f388ea3a663ec237524dc9121fae5bc5630ef298d746ffa8ff6f452c38285ca514e293", 0x429) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r1, 0x0, 0x80005) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000100)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x1c1000, 0x0) 16:07:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5428, 0x4) 16:07:09 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:07:09 executing program 4: move_pages(0x0, 0x20000000000003e9, &(0x7f00000000c0)=[&(0x7f0000ffc000/0x3000)=nil], 0x0, &(0x7f00000002c0), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101000, 0x0) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000080)=0x1) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685, &(0x7f0000000180)={0x1, 0x7ff, 0x1000, 0x1000, &(0x7f0000000240)="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", 0x0, 0x0, &(0x7f00000000c0)}) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000040)=0x200, 0x4) r3 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000e7e000/0x2000)=nil) shmat(r3, &(0x7f0000e7e000/0x10000)=nil, 0x0) 16:07:09 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) [ 739.589469][ T25] Bluetooth: hci0: Frame reassembly failed (-84) 16:07:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5429, 0x4) 16:07:09 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:07:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5433, 0x4) 16:07:09 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:07:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5437, 0x4) 16:07:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5441, 0x4) [ 741.528051][ C1] net_ratelimit: 19 callbacks suppressed [ 741.528057][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 741.528101][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 741.533786][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 741.540043][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 741.608018][ T3014] Bluetooth: hci0: command 0x1003 tx timeout [ 741.614109][T15101] Bluetooth: hci0: sending frame failed (-49) [ 741.688157][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 741.694056][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 742.568092][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 742.573888][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 742.580107][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 742.585854][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 743.688093][ T3014] Bluetooth: hci0: command 0x1001 tx timeout [ 743.694260][T15101] Bluetooth: hci0: sending frame failed (-49) [ 745.768101][ T17] Bluetooth: hci0: command 0x1009 tx timeout [ 746.728093][ C0] net_ratelimit: 19 callbacks suppressed [ 746.733786][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 746.739556][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 746.745544][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 746.751306][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 747.048118][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 747.053944][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 747.769198][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 747.769319][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 747.775047][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 747.780796][ C1] protocol 88fb is buggy, dev hsr_slave_1 16:07:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x541f, &(0x7f0000000000)) 16:07:19 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:07:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5450, 0x4) 16:07:19 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) 16:07:19 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) faccessat(0xffffffffffffff9c, 0x0, 0x0, 0xc00) 16:07:19 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000002000), 0x215) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000240)=""/166, 0xa6}], 0x1, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 16:07:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5451, 0x4) [ 749.832886][ T21] Bluetooth: hci0: Frame reassembly failed (-84) 16:07:19 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80287010, &(0x7f0000000040)) 16:07:19 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:07:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5452, 0x4) 16:07:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0xa, {0x2, 0x0, @empty}, 'hwsim0\x00'}) 16:07:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x545d, 0x4) [ 751.848057][ T3014] Bluetooth: hci0: command 0x1003 tx timeout [ 751.854974][T15101] Bluetooth: hci0: sending frame failed (-49) [ 751.928086][ C1] net_ratelimit: 20 callbacks suppressed [ 751.928123][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 751.933779][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 751.933821][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 752.088148][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 752.094021][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 752.968077][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 752.973923][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 752.979764][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 752.985531][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 753.288125][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 753.928118][ T3014] Bluetooth: hci0: command 0x1001 tx timeout [ 753.934244][T15101] Bluetooth: hci0: sending frame failed (-49) [ 756.008147][ T3219] Bluetooth: hci0: command 0x1009 tx timeout [ 757.128104][ C0] net_ratelimit: 17 callbacks suppressed [ 757.133794][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 757.139567][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 757.145341][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 757.151073][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 757.448081][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 757.453882][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 758.168075][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 758.168126][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 758.173906][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 758.328119][ C1] protocol 88fb is buggy, dev hsr_slave_0 16:07:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5421, &(0x7f0000000000)) 16:07:29 executing program 0: syz_mount_image$iso9660(&(0x7f00000001c0)='iso9660\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@check_strict='check=strict'}]}) 16:07:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5460, 0x4) 16:07:29 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:07:29 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:07:29 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0)='iso9660\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@check_strict='check=strict'}], [{@fsuuid={'fsuuid', 0x3d, {[], 0x2d, [], 0x2d, [0x77, 0x0, 0x63], 0x2d, [], 0x2d, [0x77]}}}]}) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000), 0x4) 16:07:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5501, 0x4) 16:07:29 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='0', 0x1, 0xfffffffffffffffb) keyctl$read(0x3, r0, 0x0, 0x0) [ 760.109044][ T21] Bluetooth: hci0: Frame reassembly failed (-84) 16:07:29 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:07:29 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:07:29 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 16:07:29 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) faccessat(0xffffffffffffff9c, 0x0, 0x4, 0x1f00) [ 762.168085][T11105] Bluetooth: hci0: command 0x1003 tx timeout [ 762.174375][T15101] Bluetooth: hci0: sending frame failed (-49) [ 762.328069][ C1] net_ratelimit: 19 callbacks suppressed [ 762.328076][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 762.328624][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 762.333793][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 762.339554][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 762.488187][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 762.493991][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 763.368140][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 763.373956][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 763.379784][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 763.385559][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 764.248276][T11105] Bluetooth: hci0: command 0x1001 tx timeout [ 764.254583][T15101] Bluetooth: hci0: sending frame failed (-49) [ 766.328075][ T22] Bluetooth: hci0: command 0x1009 tx timeout [ 767.528090][ C0] net_ratelimit: 19 callbacks suppressed [ 767.533795][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 767.539578][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 767.545406][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 767.551176][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 767.848124][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 767.853968][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 768.568078][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 768.568108][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 768.573901][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 768.728140][ C1] protocol 88fb is buggy, dev hsr_slave_0 16:07:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 16:07:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x6364, 0x4) 16:07:39 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:07:39 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x800000000050000}]}) r0 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:07:39 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x80284504, 0x0) 16:07:39 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:07:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x6430, 0x4) 16:07:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x8901, 0x4) [ 770.332134][ T2668] Bluetooth: hci0: Frame reassembly failed (-84) 16:07:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'ip_vti0\x00', 0x201f}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@ipv4, 0x31, r3}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@empty}, 0x14) 16:07:40 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:07:40 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:07:40 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) [ 772.418064][T11105] Bluetooth: hci0: command 0x1003 tx timeout [ 772.424255][T16259] Bluetooth: hci0: sending frame failed (-49) [ 772.728040][ C1] net_ratelimit: 19 callbacks suppressed [ 772.728047][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 772.728079][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 772.733889][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 772.888105][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 772.894019][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 773.128047][ T3219] Bluetooth: hci1: command 0x1003 tx timeout [ 773.134307][T16259] Bluetooth: hci1: sending frame failed (-49) [ 773.768087][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 773.774123][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 773.780046][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 773.786250][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 774.088090][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 774.488116][ T3219] Bluetooth: hci0: command 0x1001 tx timeout [ 774.494225][T16259] Bluetooth: hci0: sending frame failed (-49) [ 775.208048][ T3219] Bluetooth: hci1: command 0x1001 tx timeout [ 775.215260][T16259] Bluetooth: hci1: sending frame failed (-49) [ 776.568101][T11105] Bluetooth: hci0: command 0x1009 tx timeout [ 777.288112][T11105] Bluetooth: hci1: command 0x1009 tx timeout [ 777.928057][ C0] net_ratelimit: 18 callbacks suppressed [ 777.933734][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 777.939597][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 777.945480][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 777.951743][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 778.248050][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 778.253963][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 778.968039][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 778.968046][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 778.968105][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 778.973841][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:07:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5424, &(0x7f0000000000)) 16:07:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x8903, 0x4) 16:07:51 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) 16:07:51 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:07:51 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:07:51 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) 16:07:51 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 781.834951][ T25] Bluetooth: hci0: Frame reassembly failed (-84) 16:07:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x8912, 0x4) 16:07:51 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:07:51 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:07:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x8914, 0x4) 16:07:51 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 783.128138][ C1] net_ratelimit: 20 callbacks suppressed [ 783.128144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 783.138021][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 783.139563][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 783.145267][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 783.288083][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 783.293909][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 783.848014][T11105] Bluetooth: hci0: command 0x1003 tx timeout [ 783.854127][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 784.168071][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 784.173907][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 784.179720][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 784.185660][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 785.928111][T11105] Bluetooth: hci0: command 0x1001 tx timeout [ 785.934241][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 788.008146][ T3219] Bluetooth: hci0: command 0x1009 tx timeout [ 788.328148][ C0] net_ratelimit: 19 callbacks suppressed [ 788.333847][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 788.339665][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 788.347890][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 788.353696][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 788.648114][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 788.654013][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 789.368131][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 789.368163][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 789.373961][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 789.528174][ C1] protocol 88fb is buggy, dev hsr_slave_0 16:08:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5425, &(0x7f0000000000)) 16:08:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x8933, 0x4) 16:08:01 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:08:01 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:08:01 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) 16:08:01 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) 16:08:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x89a0, 0x4) 16:08:01 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 792.138433][ T21] Bluetooth: hci0: Frame reassembly failed (-84) 16:08:01 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:08:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x89a1, 0x4) 16:08:02 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:08:02 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 793.528110][ C0] net_ratelimit: 19 callbacks suppressed [ 793.528119][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 793.528148][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 793.533833][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 793.688111][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 793.693900][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 794.168092][ T3014] Bluetooth: hci0: command 0x1003 tx timeout [ 794.174190][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 794.578055][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 794.583977][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 794.589848][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 794.595596][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 794.888116][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 796.248096][ T3219] Bluetooth: hci0: command 0x1001 tx timeout [ 796.254206][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 798.328116][ T3014] Bluetooth: hci0: command 0x1009 tx timeout [ 798.728067][ C0] net_ratelimit: 17 callbacks suppressed [ 798.733771][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 798.739649][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 798.745477][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 798.751248][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 799.048091][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 799.053936][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 799.768066][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 799.768099][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 799.773868][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 799.928150][ C1] protocol 88fb is buggy, dev hsr_slave_0 16:08:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5427, &(0x7f0000000000)) 16:08:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x89a2, 0x4) 16:08:11 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:08:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x8001, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYPTR], 0x1a) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 16:08:11 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) 16:08:11 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:08:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xae01, 0x4) [ 802.317559][ T21] Bluetooth: hci0: Frame reassembly failed (-84) 16:08:12 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(0x0) symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:08:12 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:08:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x40045431, 0x4) 16:08:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x40045436, 0x4) 16:08:12 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 803.928067][ C1] net_ratelimit: 19 callbacks suppressed [ 803.928076][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 803.928105][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 803.933791][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 804.088459][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 804.094304][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 804.328102][ T22] Bluetooth: hci0: command 0x1003 tx timeout [ 804.334202][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 804.968063][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 804.973968][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 804.979909][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 804.985712][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 805.288065][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 806.408089][ T3014] Bluetooth: hci0: command 0x1001 tx timeout [ 806.414297][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 808.488069][ T22] Bluetooth: hci0: command 0x1009 tx timeout [ 809.128100][ C0] net_ratelimit: 17 callbacks suppressed [ 809.133791][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 809.139587][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 809.145409][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 809.151391][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 809.448102][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 809.454036][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 810.168080][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 810.168111][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 810.173924][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 810.328257][ C1] protocol 88fb is buggy, dev hsr_slave_0 16:08:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5428, &(0x7f0000000000)) 16:08:22 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(0x0) symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:08:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400454ca, 0x4) 16:08:22 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x50000}]}) getpeername(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 16:08:22 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:08:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xffffff40, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440000000000e630c4000000000000000002100000006630440"], 0x26, 0x0, 0x0}) [ 812.476075][ T24] audit: type=1400 audit(1564243702.140:179): avc: denied { set_context_mgr } for pid=22815 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 812.477094][T22816] binder: 22815:22816 unknown command 0 16:08:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400454ce, 0x4) [ 812.540844][T22816] binder: 22815:22816 ioctl c0306201 20000380 returned -22 [ 812.570987][ T2668] Bluetooth: hci0: Frame reassembly failed (-84) [ 812.592545][T22825] binder: 22815:22825 unknown command 0 [ 812.620517][T22825] binder: 22815:22825 ioctl c0306201 20000380 returned -22 16:08:22 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:08:22 executing program 4: r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000040)) 16:08:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x40045564, 0x4) 16:08:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/23) 16:08:22 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000000)="44ff3e8f0edb6f13aa"}) [ 814.328614][ C1] net_ratelimit: 18 callbacks suppressed [ 814.328624][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 814.328642][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 814.334335][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 814.488184][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 814.494041][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 814.648058][ T3014] Bluetooth: hci0: command 0x1003 tx timeout [ 814.654197][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 815.368068][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 815.373900][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 815.379721][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 815.385483][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 815.688079][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 816.728098][ T3014] Bluetooth: hci0: command 0x1001 tx timeout [ 816.734304][ T1517] Bluetooth: hci0: sending frame failed (-49) [ 818.808109][ T3219] Bluetooth: hci0: command 0x1009 tx timeout [ 819.528098][ C0] net_ratelimit: 17 callbacks suppressed [ 819.533805][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 819.539592][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 819.545368][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 819.551097][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 819.848061][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 819.853898][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 820.568084][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 820.568119][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 820.573904][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 820.728207][ C1] protocol 88fb is buggy, dev hsr_slave_0 16:08:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000000)) 16:08:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x4004556b, 0x4) 16:08:32 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(0x0) symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:08:32 executing program 0: syslog(0x2, &(0x7f0000000200)=""/194, 0xc2) 16:08:32 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:08:32 executing program 4: [ 822.691473][ T24] audit: type=1400 audit(1564243712.360:180): avc: denied { syslog } for pid=22958 comm="syz-executor.0" capability=34 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 16:08:32 executing program 4: 16:08:32 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') [ 822.786715][ T2668] Bluetooth: hci0: Frame reassembly failed (-84) 16:08:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455cb, 0x4) 16:08:32 executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syslog(0x2, &(0x7f0000000200)=""/194, 0xc2) 16:08:32 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/packet\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/244, 0xf4}], 0x1, 0x0) 16:08:32 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 824.728084][ C1] net_ratelimit: 18 callbacks suppressed [ 824.728093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 824.728120][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 824.733851][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 824.808057][ T3014] Bluetooth: hci0: command 0x1003 tx timeout [ 824.814126][T16259] Bluetooth: hci0: sending frame failed (-49) [ 824.888122][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 824.893915][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 825.608081][ T22] Bluetooth: hci1: command 0x1003 tx timeout [ 825.614188][T16259] Bluetooth: hci1: sending frame failed (-49) [ 825.768032][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 825.773923][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 825.779773][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 825.785564][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 826.088042][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 826.888047][ T22] Bluetooth: hci0: command 0x1001 tx timeout [ 826.894157][T16259] Bluetooth: hci0: sending frame failed (-49) [ 827.688032][ T3014] Bluetooth: hci1: command 0x1001 tx timeout [ 827.694153][T16259] Bluetooth: hci1: sending frame failed (-49) [ 828.968031][ T3014] Bluetooth: hci0: command 0x1009 tx timeout [ 829.768046][ T22] Bluetooth: hci1: command 0x1009 tx timeout [ 829.928060][ C0] net_ratelimit: 17 callbacks suppressed [ 829.939061][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 829.944826][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 829.950608][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 829.956341][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 830.248074][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 830.253919][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 830.968100][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 830.968137][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 830.973934][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 831.128193][ C1] protocol 88fb is buggy, dev hsr_slave_0 16:08:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5441, &(0x7f0000000000)) 16:08:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x40049409, 0x4) 16:08:43 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(0x0, &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:08:43 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 16:08:43 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='io.stat\x00', 0x0, 0x0) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @rand_addr=0x101}, 0x46, 0x0, 0x0, 0x0, 0x401, &(0x7f0000000000)='veth0\x00', 0x2, 0x6, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) utime(0x0, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 16:08:43 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:08:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x40086602, 0x4) 16:08:44 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 834.298698][ T25] Bluetooth: hci0: Frame reassembly failed (-84) 16:08:44 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:08:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x40087602, 0x4) 16:08:44 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(0x0, &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:08:44 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 835.128122][ C1] net_ratelimit: 19 callbacks suppressed [ 835.128130][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 835.138055][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 835.140305][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 835.146222][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 835.288133][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 835.294665][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 836.168039][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 836.173838][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 836.179649][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 836.185396][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 836.338181][T11105] Bluetooth: hci0: command 0x1003 tx timeout [ 836.344338][T15101] Bluetooth: hci0: sending frame failed (-49) [ 838.408193][ T3219] Bluetooth: hci0: command 0x1001 tx timeout [ 838.414314][T15101] Bluetooth: hci0: sending frame failed (-49) [ 840.328069][ C0] net_ratelimit: 19 callbacks suppressed [ 840.333807][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 840.339625][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 840.345438][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 840.351356][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 840.488130][T11105] Bluetooth: hci0: command 0x1009 tx timeout [ 840.648087][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 840.653900][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 841.368051][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 841.368057][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 841.368115][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 841.373852][ C1] protocol 88fb is buggy, dev hsr_slave_1 16:08:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5446, &(0x7f0000000000)) 16:08:54 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:08:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x4014563c, 0x4) 16:08:54 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(0x0, &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:08:54 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:08:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 844.544410][ T25] Bluetooth: hci0: Frame reassembly failed (-84) 16:08:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x401c5504, 0x4) 16:08:54 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) [ 844.682320][ T21] Bluetooth: hci1: Frame reassembly failed (-84) 16:08:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x4020940d, 0x4) 16:08:54 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:08:54 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:08:54 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 845.528056][ C1] net_ratelimit: 20 callbacks suppressed [ 845.528064][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 845.528094][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 845.533810][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 845.688124][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 845.694100][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 846.568052][ T22] Bluetooth: hci0: command 0x1003 tx timeout [ 846.568078][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 846.579862][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 846.585857][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 846.591676][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 846.597569][T16259] Bluetooth: hci0: sending frame failed (-49) [ 846.728128][T11105] Bluetooth: hci1: command 0x1003 tx timeout [ 846.734441][T16259] Bluetooth: hci1: sending frame failed (-49) [ 846.888064][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 848.648483][T11105] Bluetooth: hci0: command 0x1001 tx timeout [ 848.654593][T16259] Bluetooth: hci0: sending frame failed (-49) [ 848.808187][ T22] Bluetooth: hci1: command 0x1001 tx timeout [ 848.814303][T16259] Bluetooth: hci1: sending frame failed (-49) [ 850.728059][ T22] Bluetooth: hci0: command 0x1009 tx timeout [ 850.728069][ C0] net_ratelimit: 17 callbacks suppressed [ 850.728086][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 850.745691][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 850.751599][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 850.757368][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 850.888178][T11105] Bluetooth: hci1: command 0x1009 tx timeout [ 851.048111][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 851.054186][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 851.768061][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 851.768067][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 851.768116][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 851.773915][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:09:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5450, &(0x7f0000000000)) 16:09:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80024322, 0x4) 16:09:04 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:09:04 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:09:04 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) 16:09:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 16:09:05 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:09:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80045430, 0x4) [ 855.417088][ T2668] Bluetooth: hci0: Frame reassembly failed (-84) [ 855.428207][ T2668] Bluetooth: hci0: Frame reassembly failed (-84) [ 855.437919][T20675] Bluetooth: hci1: Frame reassembly failed (-84) 16:09:05 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:09:05 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:09:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80045432, 0x4) 16:09:05 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) [ 855.928043][ C1] net_ratelimit: 19 callbacks suppressed [ 855.928052][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 855.938024][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 855.939519][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 855.945199][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 856.088847][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 856.095110][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 856.968037][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 856.974551][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 856.980462][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 856.986211][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 857.448051][ T3219] Bluetooth: hci1: command 0x1003 tx timeout [ 857.454444][T16259] Bluetooth: hci1: sending frame failed (-49) [ 857.460695][ T3219] Bluetooth: hci0: command 0x1003 tx timeout [ 857.467051][T16259] Bluetooth: hci0: sending frame failed (-49) [ 859.528073][ T3219] Bluetooth: hci1: command 0x1001 tx timeout [ 859.528081][ T3014] Bluetooth: hci0: command 0x1001 tx timeout [ 859.528155][T16259] Bluetooth: hci0: sending frame failed (-49) [ 859.545610][T22174] Bluetooth: hci1: sending frame failed (-49) [ 861.128093][ C0] net_ratelimit: 19 callbacks suppressed [ 861.133798][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 861.139596][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 861.145414][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 861.151151][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 861.448075][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 861.453861][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 861.608059][ T3014] Bluetooth: hci0: command 0x1009 tx timeout [ 861.608067][ T3219] Bluetooth: hci1: command 0x1009 tx timeout [ 862.168120][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 862.168165][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 862.173961][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 862.328202][ C1] protocol 88fb is buggy, dev hsr_slave_0 16:09:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5451, &(0x7f0000000000)) 16:09:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80045438, 0x4) 16:09:15 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:09:15 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:09:15 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) 16:09:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 16:09:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80045439, 0x4) 16:09:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 865.705293][T20675] Bluetooth: hci0: Frame reassembly failed (-84) [ 865.770555][ T2668] Bluetooth: hci1: Frame reassembly failed (-84) 16:09:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80045440, 0x4) 16:09:15 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:09:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:09:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x800454d2, 0x4) [ 866.328037][ C1] net_ratelimit: 19 callbacks suppressed [ 866.328047][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 866.328469][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 866.333849][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 866.339879][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 866.488109][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 866.493931][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 867.368070][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 867.373919][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 867.379777][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 867.385523][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 867.768111][ T22] Bluetooth: hci1: command 0x1003 tx timeout [ 867.774515][ T22] Bluetooth: hci0: command 0x1003 tx timeout [ 867.774614][T22174] Bluetooth: hci1: sending frame failed (-49) [ 867.781116][T23724] Bluetooth: hci0: sending frame failed (-49) [ 869.848065][ T22] Bluetooth: hci0: command 0x1001 tx timeout [ 869.848073][T11105] Bluetooth: hci1: command 0x1001 tx timeout [ 869.860315][T23724] Bluetooth: hci1: sending frame failed (-49) [ 869.866546][T23724] Bluetooth: hci0: sending frame failed (-49) [ 871.528058][ C0] net_ratelimit: 18 callbacks suppressed [ 871.533773][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 871.539604][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 871.545458][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 871.551233][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 871.848061][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 871.853912][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 871.928084][T11105] Bluetooth: hci0: command 0x1009 tx timeout [ 871.928092][ T22] Bluetooth: hci1: command 0x1009 tx timeout [ 872.568074][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 872.568080][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 872.568160][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 872.573895][ C1] protocol 88fb is buggy, dev hsr_slave_1 16:09:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5452, &(0x7f0000000000)) 16:09:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x800455c9, 0x4) 16:09:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:09:25 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) 16:09:25 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:09:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 16:09:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x800455ca, 0x4) 16:09:25 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:09:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 16:09:25 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:09:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x800455cc, 0x4) 16:09:25 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 876.728055][ C1] net_ratelimit: 19 callbacks suppressed [ 876.728062][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 876.738049][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 876.740138][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 876.745701][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 876.888168][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 876.894127][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 877.768052][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 877.773892][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 877.779694][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 877.785426][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 878.008065][ T22] Bluetooth: hci0: command 0x1003 tx timeout [ 878.014159][T15101] Bluetooth: hci0: sending frame failed (-49) [ 880.088170][T11132] Bluetooth: hci0: command 0x1001 tx timeout [ 880.094309][T15101] Bluetooth: hci0: sending frame failed (-49) [ 881.928103][ C0] net_ratelimit: 20 callbacks suppressed [ 881.933842][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 881.939620][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 881.945422][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 881.951179][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 882.168088][ T22] Bluetooth: hci0: command 0x1009 tx timeout [ 882.248066][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 882.254089][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 882.968072][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 882.968103][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 882.973908][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 883.128095][ C1] protocol 88fb is buggy, dev hsr_slave_0 16:09:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x545d, &(0x7f0000000000)) 16:09:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 16:09:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x8008563f, 0x4) 16:09:35 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:09:35 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:09:35 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) 16:09:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 16:09:35 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 886.124600][ T25] Bluetooth: hci0: Frame reassembly failed (-84) 16:09:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80086301, 0x4) 16:09:35 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:09:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 16:09:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80086601, 0x4) [ 887.128062][ C0] net_ratelimit: 18 callbacks suppressed [ 887.128070][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 887.128097][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 887.133812][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 887.291096][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 887.296888][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 888.168083][ T22] Bluetooth: hci0: command 0x1003 tx timeout [ 888.168090][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 888.168149][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 888.174177][T15101] Bluetooth: hci0: sending frame failed (-49) [ 888.180009][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 888.197454][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 888.488069][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 890.248222][ T22] Bluetooth: hci0: command 0x1001 tx timeout [ 890.254342][T15101] Bluetooth: hci0: sending frame failed (-49) [ 892.328123][ C0] net_ratelimit: 19 callbacks suppressed [ 892.333816][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 892.339606][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 892.345440][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 892.351217][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 892.357087][T23979] Bluetooth: hci0: command 0x1009 tx timeout [ 892.648141][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 892.654006][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 893.368119][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 893.368154][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 893.373953][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 893.528181][ C1] protocol 88fb is buggy, dev hsr_slave_0 16:09:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5460, &(0x7f0000000000)) 16:09:45 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:09:45 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:09:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 16:09:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80087601, 0x4) 16:09:45 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$getflags(r1, 0x40b) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) 16:09:46 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) [ 896.365457][ T25] Bluetooth: hci0: Frame reassembly failed (-84) [ 896.375937][ T25] Bluetooth: hci0: Frame reassembly failed (-84) 16:09:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x8070ae9f, 0x4) 16:09:46 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:09:46 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:09:46 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 16:09:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc0045878, 0x4) [ 897.528104][ C0] net_ratelimit: 18 callbacks suppressed [ 897.528113][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 897.528135][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 897.533902][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 897.688182][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 897.695791][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 898.408139][ T22] Bluetooth: hci0: command 0x1003 tx timeout [ 898.416209][T15101] Bluetooth: hci0: sending frame failed (-49) [ 898.568077][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 898.578412][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 898.589802][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 898.601426][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 898.888211][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 900.488172][ T22] Bluetooth: hci0: command 0x1001 tx timeout [ 900.495817][T15101] Bluetooth: hci0: sending frame failed (-49) [ 902.568133][T11132] Bluetooth: hci0: command 0x1009 tx timeout [ 902.728181][ C0] net_ratelimit: 17 callbacks suppressed [ 902.735028][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 902.741772][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 902.748013][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 902.754372][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 903.048169][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 903.055120][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 903.768093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 903.768099][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 903.768165][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 903.774229][ C1] protocol 88fb is buggy, dev hsr_slave_1 16:09:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x6364, &(0x7f0000000000)) 16:09:56 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:09:56 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 16:09:56 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:09:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc0045878, 0x4) 16:09:56 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) 16:09:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 16:09:56 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:09:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc014563b, 0x4) [ 906.677632][T20675] Bluetooth: hci0: Frame reassembly failed (-84) 16:09:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 16:09:56 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:09:56 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 907.928029][ C1] net_ratelimit: 20 callbacks suppressed [ 907.928035][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 907.928057][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 907.933941][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 908.098033][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 908.103854][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 908.728026][ T3219] Bluetooth: hci0: command 0x1003 tx timeout [ 908.734132][T15101] Bluetooth: hci0: sending frame failed (-49) [ 908.978068][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 908.983937][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 908.989836][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 908.995619][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 909.288071][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 910.808030][T11132] Bluetooth: hci0: command 0x1001 tx timeout [ 910.814161][T15101] Bluetooth: hci0: sending frame failed (-49) [ 912.888057][ T3219] Bluetooth: hci0: command 0x1009 tx timeout [ 913.128088][ C0] net_ratelimit: 17 callbacks suppressed [ 913.133770][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 913.139561][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 913.145406][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 913.151164][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 913.448075][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 913.453893][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 914.168059][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 914.168096][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 914.173870][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 914.338113][ C1] protocol 88fb is buggy, dev hsr_slave_0 16:10:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x641f, &(0x7f0000000000)) 16:10:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc0189436, 0x4) 16:10:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 16:10:06 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:10:06 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:10:06 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) 16:10:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 16:10:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc020660b, 0x4) [ 916.867462][ T21] Bluetooth: hci0: Frame reassembly failed (-84) 16:10:06 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:10:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 16:10:06 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, 0x0) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:10:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc0285443, 0x4) [ 918.328058][ C0] net_ratelimit: 18 callbacks suppressed [ 918.328067][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 918.328087][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 918.333917][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 918.488113][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 918.494008][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 918.888114][T11132] Bluetooth: hci0: command 0x1003 tx timeout [ 918.894289][T15101] Bluetooth: hci0: sending frame failed (-49) [ 919.368063][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 919.373901][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 919.379879][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 919.385626][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 919.688063][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 920.968089][ T22] Bluetooth: hci0: command 0x1001 tx timeout [ 920.974221][T15101] Bluetooth: hci0: sending frame failed (-49) [ 923.048072][T11132] Bluetooth: hci0: command 0x1009 tx timeout [ 923.528085][ C0] net_ratelimit: 17 callbacks suppressed [ 923.533812][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 923.539594][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 923.545437][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 923.551207][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 923.848100][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 923.861504][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 924.568081][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 924.568119][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 924.573923][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 924.728158][ C1] protocol 88fb is buggy, dev hsr_slave_0 16:10:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x6612, &(0x7f0000000000)) 16:10:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 16:10:16 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:10:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc0306201, 0x4) 16:10:16 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, 0x0) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:10:16 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) 16:10:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 16:10:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc0404309, 0x4) [ 927.118504][ T21] Bluetooth: hci0: Frame reassembly failed (-84) 16:10:16 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, 0x0) sendto$inet6(r2, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:10:16 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:10:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc4c85513, 0x4) 16:10:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 928.728069][ C0] net_ratelimit: 18 callbacks suppressed [ 928.728077][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 928.728100][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 928.733797][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 928.888075][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 928.893888][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 929.138006][T11132] Bluetooth: hci0: command 0x1003 tx timeout [ 929.144135][T15101] Bluetooth: hci0: sending frame failed (-49) [ 929.768096][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 929.773943][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 929.779819][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 929.785777][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 930.088076][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 931.208077][T11132] Bluetooth: hci0: command 0x1001 tx timeout [ 931.214205][T15101] Bluetooth: hci0: sending frame failed (-49) [ 933.288113][T22812] Bluetooth: hci0: command 0x1009 tx timeout [ 933.928071][ C0] net_ratelimit: 18 callbacks suppressed [ 933.935064][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 933.940824][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 933.946609][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 933.952349][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 934.248081][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 934.253918][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 934.968076][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 934.968114][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 934.973922][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 935.128119][ C1] protocol 88fb is buggy, dev hsr_slave_0 16:10:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x890c, &(0x7f0000000000)) 16:10:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) 16:10:26 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:10:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 16:10:26 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:10:26 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) 16:10:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 937.332761][ T2668] Bluetooth: hci0: Frame reassembly failed (-84) 16:10:27 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:10:27 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:10:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3) 16:10:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 16:10:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x5) [ 939.128132][ C1] net_ratelimit: 18 callbacks suppressed [ 939.128141][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 939.138185][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 939.140611][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 939.146301][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 939.288059][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 939.294126][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 939.368081][T11132] Bluetooth: hci0: command 0x1003 tx timeout [ 939.374262][T15101] Bluetooth: hci0: sending frame failed (-49) [ 940.168071][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 940.173854][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 940.179733][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 940.185483][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 941.448108][T22812] Bluetooth: hci0: command 0x1001 tx timeout [ 941.454327][T15101] Bluetooth: hci0: sending frame failed (-49) [ 943.528131][T11132] Bluetooth: hci0: command 0x1009 tx timeout [ 944.328100][ C0] net_ratelimit: 19 callbacks suppressed [ 944.333827][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 944.339679][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 944.345570][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 944.351424][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 944.648073][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 944.654073][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 945.368040][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 945.368067][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 945.373832][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 945.528103][ C1] protocol 88fb is buggy, dev hsr_slave_0 16:10:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x890f, &(0x7f0000000000)) 16:10:37 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:10:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 16:10:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x6) 16:10:37 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000540)="33a35f3ecb6010767daa4fc8d25d5d91a068b0a2d6accca40f81898f1970b1f20c29b05c93b80468abd5c1ee2a366d1182afc0d949f2be0ac4feac2a3fbc6e75bf691af26de652597d875c25964f1314f9f33a7b5759dd5364dd183f8acf5ace405d5efbe6486cab1f5e488e82b9661bf4f242c973998f3bdd0317fee4b71a1a3d119e4c77b2726eb750f0ba3bb181db9cd6e31eb75362de87fe15de568262a9d54a7e1bb2f0498a460c113821aa850fa6bd1840496d086c", 0xb8, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:10:37 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) 16:10:37 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:10:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 16:10:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x7) 16:10:37 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) 16:10:37 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:10:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 949.528126][ C0] net_ratelimit: 19 callbacks suppressed [ 949.528135][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 949.528142][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 949.528237][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 949.534073][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 949.688132][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 949.695144][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 949.702400][ T3219] Bluetooth: hci0: command 0x1003 tx timeout [ 949.712859][T15101] Bluetooth: hci0: sending frame failed (-49) [ 950.568081][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 950.574423][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 950.581457][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 950.589617][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 951.768458][ T3219] Bluetooth: hci0: command 0x1001 tx timeout [ 951.775829][T15101] Bluetooth: hci0: sending frame failed (-49) [ 953.848161][T11132] Bluetooth: hci0: command 0x1009 tx timeout [ 954.728058][ C0] net_ratelimit: 19 callbacks suppressed [ 954.733887][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 954.739811][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 954.745956][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 954.751778][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 955.048053][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 955.053907][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 955.768069][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 955.768132][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 955.773925][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 955.928156][ C1] protocol 88fb is buggy, dev hsr_slave_0 16:10:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x8912, &(0x7f0000000000)) 16:10:47 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:10:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 16:10:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x8) 16:10:47 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)=""/249) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000000040000005604000000000000001000020000000000200000000000000068cd1ab3ce7359733f743edfbb80b99c3a129d2766420905a4ba957588aa558e36685a6dcaddc2b9a14c431894c0c57ee1456e45a04b542cec330113e42fc70c161152230069f99b2f2a6049dbe8e3448cf32d9d4a78"], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={[], [], @empty}, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="c685c719083549873fe6747c656b1d03", 0x400}, 0x1c) 16:10:47 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) [ 957.768869][ T1517] ------------[ cut here ]------------ [ 957.774862][ T1517] WARNING: CPU: 0 PID: 1517 at drivers/tty/tty_ioctl.c:319 tty_set_termios.cold+0x11/0x23 [ 957.785099][ T1517] Kernel panic - not syncing: panic_on_warn set ... [ 957.791693][ T1517] CPU: 0 PID: 1517 Comm: kworker/u5:0 Not tainted 5.3.0-rc1+ #78 [ 957.799410][ T1517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 16:10:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 957.806258][T25125] kobject: 'hci1' (00000000353e148c): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 957.809483][ T1517] Workqueue: hci0 hci_power_on [ 957.809493][ T1517] Call Trace: [ 957.809514][ T1517] dump_stack+0x172/0x1f0 [ 957.809530][ T1517] ? tty_unthrottle_safe+0xf0/0x17d [ 957.809546][ T1517] panic+0x2dc/0x755 [ 957.809559][ T1517] ? add_taint.cold+0x16/0x16 [ 957.809584][ T1517] ? __kasan_check_write+0x14/0x20 [ 957.852199][ T1517] ? __warn.cold+0x5/0x4c [ 957.852295][ T3908] kobject: 'loop4' (000000004ed6afee): kobject_uevent_env [ 957.856619][ T1517] ? __warn+0xe7/0x1e0 16:10:47 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x3) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 957.856636][ T1517] ? tty_set_termios.cold+0x11/0x23 [ 957.856655][ T1517] __warn.cold+0x20/0x4c [ 957.878682][ T1517] ? tty_set_termios.cold+0x11/0x23 [ 957.887729][ T1517] report_bug+0x263/0x2b0 [ 957.892078][ T1517] do_error_trap+0x11b/0x200 [ 957.896675][ T1517] do_invalid_op+0x37/0x50 [ 957.901096][ T1517] ? tty_set_termios.cold+0x11/0x23 [ 957.906305][ T1517] invalid_op+0x23/0x30 [ 957.910484][ T1517] RIP: 0010:tty_set_termios.cold+0x11/0x23 [ 957.916295][ T1517] Code: ef e8 a6 0b 2c fe e9 e8 fe ff ff e8 9c 0b 2c fe eb ae e8 95 0b 2c fe eb 84 e8 9e f4 f1 fd 48 c7 c7 60 d3 d0 87 e8 e6 94 db fd <0f> 0b e9 d5 d5 ff ff 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 [ 957.935017][T25125] kobject: 'hci1' (00000000353e148c): kobject_uevent_env [ 957.935915][ T1517] RSP: 0018:ffff8880a60d7978 EFLAGS: 00010282 [ 957.935928][ T1517] RAX: 0000000000000024 RBX: ffff8880a60d7a38 RCX: 0000000000000000 [ 957.935937][ T1517] RDX: 0000000000000000 RSI: ffffffff815c5bd6 RDI: ffffed1014c1af21 [ 957.935944][ T1517] RBP: ffff8880a60d7a60 R08: 0000000000000024 R09: ffffed1015d060b1 [ 957.935962][ T1517] R10: ffffed1015d060b0 R11: ffff8880ae830587 R12: ffff8880a60d7aa0 [ 957.981451][ T1517] R13: 0000000000010004 R14: 1ffff11014c1af4e R15: ffff8880a0f1ea00 [ 957.989855][ T1517] ? vprintk_func+0x86/0x189 [ 957.994461][ T1517] ? tty_set_termios.cold+0x11/0x23 [ 957.999667][ T1517] ? hci_dev_do_open+0xa7/0x1940 [ 958.000574][ T3908] kobject: 'loop4' (000000004ed6afee): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 958.004627][ T1517] ? tty_wait_until_sent+0x580/0x580 [ 958.004646][ T1517] ? __mutex_lock+0x3da/0x1340 [ 958.004671][ T1517] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 958.031123][ T1517] ? tty_termios_encode_baud_rate+0x3ca/0x4e0 [ 958.037214][ T1517] hci_uart_set_baudrate+0x157/0x1c0 [ 958.042550][ T1517] ? hci_uart_set_speeds+0x90/0x90 [ 958.043071][T25125] kobject: 'hci1' (00000000353e148c): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1' [ 958.047675][ T1517] ? cpuacct_charge+0x1db/0x360 [ 958.047690][ T1517] ? __kasan_check_read+0x11/0x20 [ 958.047716][ T1517] hci_uart_setup+0xa2/0x4a0 [ 958.072577][ T1517] ? hci_uart_set_baudrate+0x1c0/0x1c0 [ 958.078241][ T1517] hci_dev_do_open+0x3e3/0x1940 [ 958.083107][ T1517] ? hci_rx_work+0xae0/0xae0 [ 958.087717][ T1517] ? trace_hardirqs_off+0x62/0x240 [ 958.092852][ T1517] ? __kasan_check_read+0x11/0x20 [ 958.097895][ T1517] ? process_one_work+0x89d/0x1740 [ 958.103104][ T1517] ? mark_held_locks+0xf0/0xf0 [ 958.107876][ T1517] hci_power_on+0x12d/0x680 [ 958.112389][ T1517] ? hci_error_reset+0xf0/0xf0 [ 958.117167][ T1517] ? lock_acquire+0x190/0x410 [ 958.121936][ T1517] ? process_one_work+0x8c1/0x1740 [ 958.127145][ T1517] ? trace_hardirqs_on+0x67/0x240 [ 958.132187][ T1517] process_one_work+0x9af/0x1740 [ 958.137138][ T1517] ? pwq_dec_nr_in_flight+0x320/0x320 [ 958.142524][ T1517] ? lock_acquire+0x190/0x410 [ 958.147209][ T1517] worker_thread+0x98/0xe40 [ 958.151723][ T1517] kthread+0x361/0x430 [ 958.155794][ T1517] ? process_one_work+0x1740/0x1740 [ 958.160995][ T1517] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 958.167265][ T1517] ret_from_fork+0x24/0x30 [ 958.172999][ T1517] Kernel Offset: disabled [ 958.177718][ T1517] Rebooting in 86400 seconds..