et$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x6000000000000000, @loopback}, 0x1c) 18:38:09 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') exit(0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/69, 0x45}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x400003) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec\xad\x1b\xa2\xf4x\x1d\x9f\xf5\xda\x9a\"\xf97\xf4i\x91e\xd5f\xbf7N\x13\xbe\xbe\ve\x82\xa1\xd2b\x06\xb5\xebt\xb1b\xefd\xb0\xecbf\x96\xd4\x88\x99\xeeh\xc5$\xc3\xf4D\xac\xc4P\xe3\x98R\xef\xf4\xdb\x017\xef\x90\'n/\x88\xae\x93\vx\'\xdf]A\x97\x99\xadr\xdcvw\xbf\xac\x9e=\xe1\xd8P\xea\x10}\xdbC\xab\xae\xf9\xcfS|\x9ce\x12\x8eV\xa8\xd2\xc7\x9bJ', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x2) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000000)={0x8, 0x50, &(0x7f0000000240)="dace5ed93f1081030270b7767aa54d95dbe5887515589a8dc49b29d7ad65d8fd672f228bbeefa72f22cfbc1652dd01acb0223a476ebc0c7b0a64ee32e4bea17d3bda03aecc5d4073d2a2aea9aaa5699c970760682eeefd8d50a23670895a7e47cf090b4dd98c7f541cc3845f329bb2f199f89f37b2d1a5b53cee376551e0c465fce9e81788c3572b0d4099e0f4ce55eddc1950a91bd4f13ae13d521f05082cb9e425c42bbd923ebf91877303de7dc8dfe17359a0884577ca1d087da704403f4579a9dbf7f25503ae3209676b5205c0df4f9ef69c63a6c57b2e8fcadef972c4252ac3e679eef8b1da43e2a262e3d0b93f0937296e", {0x7, 0x6, 0x34324948, 0xf, 0x0, 0x20, 0x0, 0x3}}) close(r1) 18:38:10 executing program 2: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @dev}, &(0x7f0000000080)=0xc) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032dbd7009fcdb05250c00020008ed01004800000000000000000000000000000fee0d4100"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) sendto(r0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffe80) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 18:38:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000180)={0xb7, 0x3, 0x8, 0x4, 0x18, 0x1}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x4e21, 0x0, @remote}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f00000001c0)=0x28) 18:38:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:10 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x7f00000000000000, @loopback}, 0x1c) 18:38:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="a9e600"/18], 0x1, 0xfffffffe, &(0x7f0000000200)="86"}) r2 = dup2(r0, r1) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000000)={0x7, 0x102, 0x1, {0x1, 0x1, 0x1, 0x883b}}) [ 874.604200][T26476] binder: 26469:26476 unknown command 59049 [ 874.625175][T26476] binder: 26469:26476 ioctl c0306201 20000380 returned -22 [ 874.641151][T26476] binder: 26469:26476 ioctl c040565e 20000000 returned -22 18:38:10 executing program 1: ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) socketpair$unix(0x1, 0x2000000000000003, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000140)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000480)=0xe8) r4 = syz_open_dev$cec(&(0x7f0000000540)='/dev/cec#\x00', 0x1, 0x2) sendto$rose(r4, &(0x7f0000000580), 0x0, 0x800, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000280)='./bus\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f00000004c0)=@v3={0x3000000, [{0x9, 0x2}, {0x100, 0x9}], r3}, 0x18, 0x2) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000000)=0x401, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_script(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x25c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) ptrace$setopts(0x4206, r7, 0xff, 0x48) perf_event_open(&(0x7f000001d000)={0x40000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x7fff) sendfile(r6, r8, 0x0, 0x8000fffffffe) [ 874.661264][T26476] binder: 26469:26476 unknown command 59049 [ 874.680089][T26476] binder: 26469:26476 ioctl c0306201 20000380 returned -22 18:38:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:10 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x8dffffff00000000, @loopback}, 0x1c) 18:38:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") mkdir(&(0x7f0000000680)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2080088, 0x0) mkdir(0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xa400295c) utime(&(0x7f0000000040)='./file0\x00', 0x0) [ 874.826275][T26593] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:38:11 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x0, 0x3f8b, 0x7fffffff, {0x6, 0x7}, {0x0, 0x2}, @const={0x3ff, {0xffff, 0x0, 0x5, 0x7fff}}}) timer_create(0x1, &(0x7f0000000340)={0x0, 0x39, 0x2, @tid=r0}, &(0x7f0000000380)) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xb72, 0x8000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x800, 0x3, 0x6, 0x9, 0x101, 0x8, 0x5, {0x0, @in={{0x2, 0x2, @multicast1}}, 0x6, 0x10001, 0x9, 0x85, 0x400}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r3, 0x8}, 0x8) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:38:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0xb, @mcast1={0xff, 0x1, [0x9]}}]}}}]}, 0x48}}, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)={0x58, 0x8000, "f5fa4b5cd1c3c68288f968362e2617ac70ccc110d4d0490fb40bfea27ac8a62bf90a04291962a6f639c219d65d75fe0da885864b15405312847466280e1d5f49f47b27d8168fcc5f15495af8b2831e1e"}, 0x2000) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00') [ 875.505121][T26734] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 875.526843][T26655] XFS (loop0): Invalid superblock magic number [ 875.561133][T26734] netlink: 'syz-executor.4': attribute type 11 has an invalid length. 18:38:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)='#\x00', 0xfffffffffffffff8) keyctl$get_security(0x11, r4, &(0x7f0000000180)=""/127, 0x7f) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000000)={0x800000007a, 0x0, [0x40000105, 0x0, 0x4b564d04], [0xc1]}) 18:38:12 executing program 1: r0 = socket(0x2, 0x1801, 0x4) connect$tipc(r0, &(0x7f00000011c0)=@id, 0x10) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x400, &(0x7f00000000c0)=0x4) r1 = semget(0x3, 0x2, 0x80) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x7c]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) 18:38:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:12 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xc05d000000000000, @loopback}, 0x1c) 18:38:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cd", 0x5) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$nl_generic(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x1}}, 0x20004081) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000040)="6473f101851f096f171bb4f5bade0dfa83646c6468b8f7281f797349c09914ed2b611e87dc8cc3e2398d3a39aefbb3c829c9622e9d2821c9c58904ffc2cb5bc70db11cf82b79b5eca2f6bdd42b2be1ed738a355e47e6aad96cf4c13dfbe9100601d75addccbbcfc7ae388a041e3786328a71fd1fac0a71cd6c3f9615417f3d7d89ee881c893b4227df4d29ccaacd83b08196639d6ffde0507076b192a16a4c") recvmmsg(r2, &(0x7f0000004500)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000001800)=""/176, 0xb0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 18:38:12 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x111240, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="b7859cb8eec705f2288a933d6e593ae164c990a016726640c522b60bdfedb810", 0x20) r2 = accept$alg(r1, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") socket$alg(0x26, 0x5, 0x0) r4 = getpid() ptrace$getsig(0x4202, r4, 0x1ff, &(0x7f0000000100)) recvmsg(r2, &(0x7f0000d43000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000b9ff8b)=""/117, 0x75}], 0x1}, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000200)={0x9, 0x6, 0xffffffffa411afcf}) 18:38:13 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xe803000000000000, @loopback}, 0x1c) 18:38:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000040)={0x80000001, 0x6, 0x1ee1, 0x4}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x3}}], 0x1, 0x0, 0x0) 18:38:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400004b", @ANYRES16=r2, @ANYBLOB="0104000000000000000014000000d101000000000000000000007290adf6b057b0fb425270c0ba1e158a71e7ee0e208e2f17a2a9bc098174da3dca"], 0x14}}, 0x0) 18:38:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 876.986366][T26872] kvm [26870]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 18:38:13 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000040)=0x1ff, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:38:13 executing program 0: r0 = socket$inet(0x2, 0x2000000080006, 0x0) r1 = semget(0x2, 0x4, 0x400) semtimedop(r1, &(0x7f0000000100)=[{0x0, 0x7f, 0x1000}, {0x7, 0x3f, 0x1800}], 0x2, &(0x7f0000000140)) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x2db7f362cff0fe4a}, "cb4a5a2378a0c176", "7874597a865e091777dc09fbaf3ed745bbad3757a534c11661657467405a5944", "d809707d", "4e6fb84f404a4f5a"}, 0x38) rt_sigtimedwait(&(0x7f0000000040)={0x20}, 0x0, &(0x7f0000000080)={0x77359400}, 0x8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000c40)=@broute={'broute\x00', 0x20, 0x2, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]}, 0x80) 18:38:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffe98, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000eea1d04e2a1ec30087591c000705000000000000000002000000"], 0x1e3}}, 0x0) 18:38:13 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xf401000000000000, @loopback}, 0x1c) 18:38:13 executing program 4: r0 = creat(&(0x7f0000000980)='./file2\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./file2\x00', 0x0, 0x46a0000, 0x0) 18:38:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:13 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0) getsockname(r0, &(0x7f0000000000)=@rc, &(0x7f0000000080)=0x80) 18:38:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca5055e0bcfec7be070") setxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=@ng={0x4, 0x11, "dd47f9510c2e6b0f5b3589f2de2a403f0d1b"}, 0x14, 0x3) r1 = add_key(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000004c0)="dcb376a2dfc233cd8c48ffcf180387a2db5c37ca69709337670e6bcdc870165ce5e3498a2be1efb20d74d6b30aeeb54eb9ef7e072fee7b8a1863c5ecd9a6296fa51802033559c22d5578dbb316ca1d5a6ee959dab11bba0d8ead9aced189c7e3e2566e12dd94cd17deb6e9cd08bca273449fa70767d85886a2ee0ac355bfc7cf553e52acbdb14b95871691fd", 0x8c, 0xfffffffffffffff8) r2 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r2) r4 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000005c0)={'syz', 0x3}, &(0x7f00000000c0)="01", 0x1, r2) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r4}, 0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={'sha224-avx\x00'}}) 18:38:13 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xf5ffffff00000000, @loopback}, 0x1c) 18:38:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x5, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)) 18:38:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:14 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:14 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x8000, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x7a04, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x7) 18:38:14 executing program 0: perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrusage(0x1, &(0x7f0000000080)) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}]}) 18:38:14 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xfc00000000000000, @loopback}, 0x1c) 18:38:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xffffffff) r0 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x4}}], 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6) bind$alg(r1, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'veth1_to_bridge\x00', {0x2, 0x4e22, @loopback}}) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {0x0}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) 18:38:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:14 executing program 1: r0 = socket(0x10, 0x3, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000ff010000000c00da3a9242d821aa286ce19b"], 0x14}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)="0800b5055e") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000700000000000000fb"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x3, 0x4) 18:38:14 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 878.445263][T27321] XFS (loop0): unknown mount option [smackfsroot=vfat]. 18:38:14 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xfe80000000000000, @loopback}, 0x1c) [ 878.539637][T27383] XFS (loop0): unknown mount option [smackfsroot=vfat]. 18:38:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000000c0)={'mangle\x00', 0xd7, "3d7d6775187f24f0cb506ce1c2e231551b1fcdc132c2695495706f26fc36974f5e8fd22f87fce07bb55087613a93fe779888dbc8ecfc21a75353710e17104dcbb8fd00e3ba564bbf41ae4bbfe28892e8c83690e46f850dd632bbb082e6843f271ddf8624300e4c2983a003d82c9b513858784bd58cc66262f5c26afa1e8ea16d2212cbd71b439f727de80a4fdb9ebe8ca21a6395a0b5b004a4d7535dee287af24a3b9af6c85382d3f191a4d913a618a992c44d2b392a2df81536a6e15e02842e6338d6a3126ec5ec23df005bb3f2b77f67bfe302d4c654"}, &(0x7f00000001c0)=0xfb) 18:38:14 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:15 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xfec0000000000000, @loopback}, 0x1c) 18:38:15 executing program 1: membarrier(0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x3cc}, 0x0) 18:38:15 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x17c, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) setsockopt$inet_mtu(r0, 0x0, 0x32, &(0x7f0000000200)=0x1000000, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) kcmp(r2, r3, 0x1, r0, r1) 18:38:15 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffe2b}}], 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='sched\x00') syz_open_procfs(r0, &(0x7f0000000100)='io\x00') ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0x800, 0x0, 0x6, 0x4, 0x120, 0x1ff}) 18:38:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:15 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xff00000000000000, @loopback}, 0x1c) 18:38:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) fcntl$notify(r1, 0x402, 0xc) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x271) recvmmsg(r1, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0) accept4$x25(r2, &(0x7f0000000140), &(0x7f0000000100)=0x12, 0x800) 18:38:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:25 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xffffffff00000000, @loopback}, 0x1c) 18:38:25 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='h\x88getl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4\x1d<\xcd2r\xd4;\x82\xd0es\x00', 0x275a, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x31}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 18:38:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000001200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = dup2(r1, r1) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000080)=[0xfffffffffffffff7, 0x1ff]) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x9699) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x9, 0x208, 0xff, 0x81, 0x4, 0x200, 0x3fa9, 0x0}, &(0x7f0000000140)=0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r3, 0x5, 0x30}, &(0x7f00000001c0)=0xc) r4 = accept$alg(r0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000000)=""/44, 0x2c}], 0x1}}], 0x23e, 0x0, 0x0) 18:38:25 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x800) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x0, r1, 0x19}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x100) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000080)) r4 = shmget(0x0, 0x3000, 0x1000000000002c8, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) 18:38:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 889.254391][T27759] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 49 (only 16 groups) [ 889.330527][T27815] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 49 (only 16 groups) 18:38:25 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3}, 0xe) 18:38:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:25 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x2}}, 0x1c) 18:38:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000040)=@getnetconf={0x14, 0x4f, 0x7c3324e99b989539}, 0x14}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x200000) getsockopt$inet_dccp_buf(r1, 0x21, 0x8d, &(0x7f0000000080)=""/62, &(0x7f00000000c0)=0x3e) 18:38:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") close(r1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002700)='/dev/rfkill\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) 18:38:25 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:25 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:25 executing program 4: unshare(0x20000) r0 = creat(&(0x7f0000000180)='./file2\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x1000, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000006900)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x3a, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x80000000, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfffffe8b) sendmmsg(r0, &(0x7f0000006840)=[{{&(0x7f0000000080)=@rc={0x1f, {0x8, 0x6, 0x7, 0x20, 0x3, 0x4}, 0x8}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000100)="f02883e74c382d29789a1066bd39252c94595f959a7246fd3adabaa94235baf4340411fddfb5f7b39fb2cd6abcd12f170c4b1e5b4eb69f51e715e7641e58157875", 0x41}, {&(0x7f0000000280)="7d0c6e0bf526dd68ca369773d92d4dc3bdfa2cd02aeb378063c107878162e68a12eb879bb1581bf20055b4e2184f338b3f16894544e5afec660a76f604c5ca2cb23c5e147bfa3e6af2bd169443ab8d5fcc4939ca4db2a80041aa795404ae907b9b9fc1a4d52af787242c7f5898633d741ad7a035786ab1ef4b38ceed34de9c84c94a99174a97789bfcefe4f08ffbdef95c04e21d449d28875cad5eca37d487b05beb1567ea8af84d5678df17908a2443f07cfd8666d06099f4c7ec2eecabd05438b3e2449862ec6a5332ae17eeaed9cf7cd34ebf263a4270969b1f1498f42eabd97be88da3604778a7f45e99e9773ebb2b7a9d4a3a", 0xf5}, {&(0x7f0000000380)="4f37c9f2bf65c18647472d9fd0cdf35b6a8d33b7d160fbf17af1f0888a7afe4dbc730bb3ccfb0b051aa6f6df007873cab15aee6ec902b3552d3318fee78d5c820cac6b2b25a602c97ee78a502fef127da8e97cc3888a0518c634a4f32095e90eb89ff902f7d2d9deac0efa715ef0cd70b7bcfd6f2b328bf2105826d980ba0f1c933bf0709ca6f28bc8349d0c344bee12ee5b8bd259686ea9872ff0c0c070fe59fe1a90b1babcfa9beb26827cc2bd3df7a379e8a3eb1f37bf6394f478ee5b523fe96585177316f2ee6f4f415e49a0cdde7863f49cdcf5ea03898a11a0160aef363641bf749c25dd893abd65d51d903c81e507f7417f8e428b14a797a1fb29d3de0150720a296050dc03c91365ed312a07d5d61c0debbb18d279801c3acc7451d1cb2fcf23e055484729a81b69229be0bc87e2a09f0c2b91a67860a330baba22b6006b4f2272db00920a24e7b7b1b4f719543bc47777440150801e397165165331d5bd61f2ac818083253540991afefdb4445013d22f449697d9d9de255d96713032be447ed111bd9ddd98f3d7319bad0f71481e09c0d03132a25279e2f1e438541d65528f98249421e5e5446cbbfedbf11615aed35c481cc7e425f0d02f6abe7ea21cceec517c9bd25e2539c9a3e5e2766b69be1e7ab08b0cc60f85bac9fa8f19164650297a787ab34e22a25c388fa6eb251b314f6f7b1e398d1ddaa9734617992f43d22f15073e9e772a0f822bf3772956e16703944ea34159015079364eca1ecfc20408b9bb0f51865bc4b49cb8dfa4037a47bdd2ba25c41a776842a4650b7657a6f638943bd66a2160ed47910133c9aa5e05399ab1962c0ca76f2160353c47501d2e83dd39ca4898adbe0a3e5971bebe08753352a772fb7515bdca13184bba285003dfcd3b4ab03dcfb8de9ed160238a202c0d818466ead0f697da658e1db9bbdc7444afc299b01a2ca2a9d10461e13e9a29db1a9e3c5b5689d96401a50c93910f18a5a53626c8d5df974fc1fcdb753b9f8cfa1fdc6eac2a85feb984b20176b25cda5bc46d3c5441631cba06b80d7e75a219aa92e92102e33ee362cd37e8a505b5ccec0b69160a5f109a9d67b03ebb1217e7be4f4dc6a1326ba2fdde7d32618fdcf9da1a873d13919b5f9919032c4381c35ee1fea3be98db98fcdbbf8bef16e5c3eee4e2af436082804d85d2e0e7f07e4ee776c6d6c6eb11b901e97164e0351a1d692f99eb8e9af61f0d5d538b3d111e6d2b193ef50c43c9b4e88a7e902a3dee8d2c56889aee9ca4907fe065f4d4d29cc8f0100b5ee1c210e1007399c087608fd9439fe98216710fb8ad488e5da772f58054eb88b01319cf539e08bf2535379e9f8cd55d9b2161919623f462fe5951e3a5e247ea3bceffa1b404f5e5332d0d347f1d5e0bdc7a4c441e5d305431c173bed1659a2bf69fdea6ba460d9f3f0d2be3c731b2cf260b07e827aa9e61a828ffbab38828342731fa2f50e1c907262fe0d8e104393aea1f25c66b3546e2c0f49eca4efa748ba593032317552994a91d438ad2edd95978560cbb7ef4356a6577143117125d5f01e8d17d5d29c0ccea791634507efd7d05743e15203c2ddce88e36178220fe7d3d2de79b469843ab1da90cd32375e4d54d46929f8e6985435e342eb7354afe10ae5f09130cd22345706b2b789201844be2c80323fe299175cd8931bf9512dd507fae23197fd90e7ecba5f8902403322452f9abc78d5ddd6131e4f34014d3df7ccf9696774e60370caeb981a2e784af8334eb0ccf5a93a2c64557b82d608d9fe372c74b43dbf8c2be72eb7d503215145dc5a7ba0b4863181100204bc50ca24c500b826191c18cab436d3cb90fd2592e5f5af006dac79fa2c6e29b6a7f64db2316a9964aaac524b9f8e436a6faa5a9bfe1c7fad4673fd15ce1a12792e5a37d7fc37b7a3a4b9ee1c26c530a7dcafd031dc7760b47e218fa91710ba68c2d1b0ecd4a43a6a7a9b71e1aaa0f491e13105d3b85ba50be82fbe0b247d8612ad03204748894e6222b9c69281132751af1a5192dae540ee1896192a5042c61e97a6008c75b12cddabd25e79af55502a44e28c4acc9de19a44226dc2c99bbdcc365bb3d42273196c25faf18dc6d8c6ed2816d6a5b796b6c3b27f62fc62ce180554a92f7900d64f6fcedcfcd2d624da5e69270007621fae4d703f024872065e4e0fda51e9ec570df760daa51233d4638bfeb51e200e8726d13f8b4b5efaa9dbe205ef11a436a2d5a91bbdebc84d6f3efcfea9dc3e70090f6db6808f579eab958f5785f40d5b681a6a08fad4d709befcc0b5917564ca6cf826362f63d426a9452c53052263745f8713b97c3e102b7a0ec7e6d315449b76a686d13defd01db9fad146c0e85e8e119bd74d6d825745b641bebfdbd0b5eecdea1a2a120d1d48e8847a6310303792e96258c3eb3225f907d43953af95e86ccd050e2fbf952c482848c19266f2641e9f6c6b5ebdb69884a43c7b0e6dba013906ec43650c9345b3ba2ba2608cb6b7b0ad9747f47f91a7537970cf9e74b174272d6681afa176042faec7e657ba54e50f6cf1dfd56dcffa252c55d740400d743f1bf1ca6036b87b255223a78d3be305ecf7f09e56158ecc29d631f6007e3a09d77553929ec4e8182c92dab1d30783ca65ac8db39b760cab3ebd536a8278e749d9b5d3bb2e9f3c65e71bb3a9118fc64a75828311324eea180b0a64e61978981859235ff4b023666a7e4530b6ce348556bf34eb413333898f6e51146a8b916cd66b0dbed25b3a734061582f7008f7a3dcfd96719ec4182e23d27980511a33521caef3ade08a43945936a360a71b149c6a8c97377fa9a1a14fdd3cca29f2a84aaacfb3ab548b1cb8eb160ac6e98e3eb4f28a77790efd2baf1458eb0bdaccc21f91acf18bafee1d99f1ea29881875af01372543fb1253fe2b15698fc91cd8d4051182f107460243309995d2f89c3304243ff7487817c561c48f53ec4f4bbe53e1aaac93cba30dc911e18a31eb969f3fe73ae026e5127f8ba7be4d06f143d8e30ee5ea13ea0de2adbe8eb19d0b6344d452c3a0e7ad3495c3a1704a5aa7a26e3fafc4c19c53b29c8dadd4c1e6fc7ad53b2ccebb3ecc7ba2abfbb3c9bd423f609a63056fbe9291c1b28b182b03e06be08f9eb83e8577c7dd20018cff6e28e5118e5c6e49e5cca7be27ec54dd2795e3664ca6c66c2607575cc863bfc3456b478a306937e1232e18ad9981bef9c81e00eadaf6c8bc5b9ae8c21d640e9167c976b56ef493c0748193110a48e7fced556efb0cf9b27b0f5a4f9b103392f9ce52ebc80b876df42a522ad1f92a634da2416b73cb4813a0ff5c55f3c8ebb54dc25e0709ed055d36d38bed2458b778397f9eafd8751b924833ebc022af60656afb018a1b40b40e6856a884c3e59fd76d04fd490e2dd81e52dbf3cf6bb297d3bb17744bb3525881df92b21d7b5e3ed6c26e0224ee41359cccb23ab9d81b49c7ab03dd0ce90f4504440ed16b408ab41846a46f2546e464d8a1ed722e17de6dc9d58e7e72e4c7c9786e124096571995f8a8b3173a64e7c8c1f0ccf6fef6984ff76f420dbf6bfe54fff9cc1ab78ac322e20503fc298c0f87186ccc64614c3718e0101e22999257b151d66b3de613455dd556c0d7d26e593be22a420355bb4f2e1b518d4e7fa24d1998a628efe4933f696a366a656df0546614053ba9fbcc7348f7a007cc3403be6607d74c53e772bca3f1c004abdc35bedf8fd4afe28908c37d1063455a5b61f806b893d3e3c9ddbc914a8ee31387291c77e95253790c72ef0af9572621c62d033f5b1f5a220602ac4c3db6b3a3a74fe7824fda57ba777f4fdd92c311b9b078dffbe22088653872ea0cd40996aa7c3cc04a352b292150f6e848f12f47e8380855da4eec9beb54dbc65d2f66d0f1b357479b7a501b56d65a0899d0534065756a04bc9a6e448f938ca47d11de5bbce2ea88cd003ec637cd537686fc9f57436cc3ef14f6c70f6e2623d74f43e3f08a1319311fffe74e230b1624c25d338fa5e950cac775d7f6e9c17d97a3fb42f760a4bc491385cebd804cacf6ff3cbfa1a1ef9e599c5747334457955e2232cfbe18b70efa87226372351604d6bb4559897b613b2a429ff46643038351ab7a0dc8b445586baa81c7fe238eea015f9b08d1cedb82b08a7c13a48e4af59d42589b988195817516e05a7bb025ceee6199f004baad945544c9236634ded036c8170251c18225947234261c5887e7d35f67df1b10b5bcf0dea28bd3adf54686bfa6061c90e655d0642d2ae05b570773aa1836db2cb505afc97b0d0228d22498df6c3e557543c6af91894c98fe57bed67c2825ab5895f23f8d011f10217848179edd90fe7c8a4138c7b6d4493d75f4919124d252637edae2a98e0227e48a24ac2d7b004aba0ac1299cb842dee5e069cd8f034d50a6cca301490d41e9750b1fcfe8f440abdb3dff2571f923aba4908ebe3e3250f257ab0ec05c6d9d9168585b52ac1216216be9ca770c7ce207bbfe52b16d0cf74c38668261f440aaa7d2b6be437b85f57e4fcf3ff8d49fb7bda04abe4e94f25067cc9553e78cfe3cae6322d272e0219eabe0e05c73d5197905ef4da24d572b5c6cad237a3c4d060809d62644892dde5ae29239d234da3105f4d020d4417006cc27d2cdf9953b83875ce66e0353a160cbda827c9c87ffa3c2b789a812022b927de815fe23b291c211b1d17141bbaa75bec01795663c64a83a406118608108be15893674d02b87b442cf9e094c51b0f7f5c415bab6765cf999590e3e82ce7c80cb65b0241f7db3fb0cc2627284d6df5d5efa339155601187c389a6c88196cc784b8408af1d041c38f881d1c867de022232eb0570dc1eb033bbb0ac7e8d2dafdf91cc1abcb491ece463dbc93995f6bcbff467e0e4af95f7c2fe2af47fbdad802b37a75dee18cc401bc30c054598e07164a0691edb8feb19e06061b468098dc849bb1a0d1c0aaf13d97fbc19729f5db754e410a2058f14be04f42b88b027941426b029be14fa5cb0edd5844fd5ce269a1b9f5dcd5433107585ff4772b55c64eda165768816c1d151130a079659eeda193df43f7a4b8295e6b7de6a39b94491237980cf75d48644eef08bd835a7af10371ecab67f9c554458a294ae26a57cf669e7d322891b6a8fe16a0bc22b32c7622abae630b976d3a0f6f0840b1a1148f10f0508b79025c0d2713097f501fee010646d76c80e59d7d4caf0722607d65a08f2d4849659e063759cb26b904ac12aaa98b01a5bd6ebd6414a2fb359bc22f714f9fa009b3483f5f8a339bc6336044f96a1c0d702d54d039ac563b7679c93f3d712d25708142d9bec48a771c8ba1fcaa5afde7b1703d783172bf5e13bba6c340c5abe911c772467836568bcc6e24703a32a19a4ffe8fe1dceec689b85defe145318fa736be3214bc00ea224527a45384c868c5d4666e49aa6faca28e955389735f5759a9162f477df9bfeb1b4807e32626f8e5c230948195075f4e55c0919f92f16f346ad74692180d7d00f7b1c2a091e5735b2559f15a35a23b421856a4d34e30498a2fc2edd39657308a2557c6bdce376cdc5204d0662358abb71091d628ff8de79f6ad3cee755f891db0102f54380af0f8a89a510056c07f361b69dedd8fa72b6415da8fe6598a3c56f215dc4109d67258f4443c89f4177066c3533bb79b0c1efd44efb1f2512fc3bdf5993ff461f60955bd5c78f04c5c1004681e47473d7a7531aa85d3b8697ffb9fc1ba755052f0bc4f16720126ca6f566393a1369ff493ce51c0f2de01b", 0x1000}, {&(0x7f0000001380)="f64a0cb77ee95b7c9639237730c55b07f13e8ca73d2f08641966a626183ae807a86326be4865e8ae9863c96f21935e4902a4a74b81256992fa81a4803a4ca3e5b893531c740933ab65103f1b779a716c7177220688ee6cfccbc4a7c50e6f46d2dcbc7ef49175e20f8d81d47b163101d4162ec1ec0fd006d079d4af4d34b51260683b6a0bc82b707a93066499232ce022dcbe6c5ac4aa1f2d41b21b5bb90482a8af846aca64fba5211a4cf5", 0xab}, {&(0x7f00000001c0)="08ac0621c27154208db8b10947a0d6c7548185bd5522bd80f7985b5533989d71c1045e40d7f9a0d54da8dec073cdc65d90e8b94a2ef71e1d62a9f9d7161aa09a3afaef97ddd6c755cfaccea4af6071f6da902d6c9b586269654a564a64fe19c7fd192270134cf5f01680ec187cfd35f54fd2247ddf", 0x75}, {&(0x7f0000001440)="2def1589a31e588bf9461a6409eaff0e10d1c05fd610e857eae91570c91785b3c703e1f910855c29132d9d16823461a699dbe1244354d8778594b2991c768a515631d13132f0707d1be961710f0768f1cc3bb9a3b01cf80ff1edef5f36a51336c8ec92a96931e23c1561b628cd0a9dba9ba5e46a4cf6b130aae0198d800ceca91d7a539aa375905b3fc5c105283d1995442f50dc39c8ac90", 0x98}, {&(0x7f0000001500)="5de780408b8c6a0ab5d9aec32e720c9116947d214a6896032f241bee96039d0661361a7950e4d73284d17939ce51f29f573707f191d3a306a1d67cb34460a91c4c5cee742e7b5ef1116c4fa1e9fd46c66127150923583a9852698a101603dd73b570596c55857256b4a780c2f7f5955409f1535ff9eb479772c529b55744f561c1b90f190bd20138e07143b6ddbe232429d9c861c299e3130fd92c2b3ad40a77aace011dbd232f15059b7419337f76d23e4059a593b5709777574a2b5884c34c8730586d509f659e8313d2b05659f39297aa", 0xd2}, {&(0x7f0000001600)="c8c36d362aa37e8621cdf409444213d16500b52486c491239d1c583c9408fa58a6e83efa60b2e4d72e1b813ffabab3fba4d2b125584ffaae65bcc29349f650465c053eba030e63d68fdb47fc225ca892c4fb9c67c84847cfb8df5b72bbfac4987d258a4ddf8a7dbc76007709219c0296b2edeffbb70ff1bcf066cadf", 0x7c}, {&(0x7f0000001680)="02e72c6838b24316f56a83031b83", 0xe}], 0x9, &(0x7f0000001780)=[{0x30, 0x10e, 0x6, "611d4aae102eb9fe6432ca826ede53dfafe083001070c1a2e51fae"}, {0xa8, 0x3a, 0x0, "8065e8b8a1a6e840e339906eeb8fc0823c32c70cf02e770df2f42954f67b8bf7c3f1343e10489102d1696905a3f4b2c691f1d382cbf93a96b0d6249e9f2756722f667d215fc47594fb299a406f635baf2f6a9280a9bc7ebc87cc92b4bfe4773ea6e8acad4725f9785e3c16b74fb574b21f5a5189771971ebd03000c18f8c904762ab7f365e756241505feb9c551bf8385c2c1832eeafa8eb"}, {0x100, 0x10f, 0x3, "5e7a79f2b0d26cdb7ea7a4e213d0c02dc370e6bd8137069f463b3147c603ca28c464a09750c3c4b15ffe3c9b6cf1e241e675718801fc9a9799a52ffd96bfe3b5e7d99dff6e21c353642860139130e80443bc3c2f467e06188af1a24464a987f52a41a924996f80ea2d0daee047a9b21337e1cc37d7344db7d58b608b01a54298011e09f706c7acebe4631976a694c4ef11c5c85ffe5aace505268bdd1b1a3ebf644b081b1a0061e1668b3a397f5a4036b84bd9e8bd65983d2310f2047693b995abe8c1a19c2c6ab2785c640bdcc34dc06d9191bb8d898ef5ce58b20fc121ee71bb1628b5c40e17bce9"}, {0x108, 0x119, 0x0, "a7b8df2eecc6af03d9f4dba025d94b6a6c6c462c4f485719927c44edcdebadef9d160e080f00e479004acb52cb21e0a84814d902770159f936d61978282378be12055412560ea7af4498a1abace5504a4c016349f8bcf44137f3f83327abfe2fa956deca947e4e29c1dd391b7ec88ec178b32fbd8728b48d88553254a53e041cfe998b634e3e9a3c0f960dafe164564ed737badb50d19c6a8b1c3f92712d9ffdef245924115bfb131d17dad95f475ef019a80fdfddadf676e72dc33ac8cc24283b5a4ea83ff961cc73f3da25438019f2dc47d34d251a7956d7fff4a40bc7889f11159718b762756990a21b24545092d6fb"}], 0x2e0}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001a80)="bf2b34dbbb5c8422923bc754ec6589ec5031d4aaa94a76845e8be72742899bf61a965a9e971fe16118fc202c2ba38def3fc63fc469e6454aea055466c47cc2203fcb89c1e4c3b6f110a809a36693be6305796d358fdb6a73d8aaae5a700a8f6bd4c87786515398cb9bc38347675efe7c0b846f9c5e1d8525772159284ba61326f30cd5aef94841", 0x87}, {&(0x7f0000001b40)="faeb365cce63e5d54f58fd7d69a3a4b44e5d4f14ad3cd6d87c87f0f1c7dac8d6d8335472e976cb6722dc224858063cfd5e461c7876845c26ae48c3dda2039a1f5f2715f7689e98bb4cd74a2ff30dcd4dd4c9cf926c0710adbb9c8d387b62e629b37c2105faa6dae1d9a4363c0de5919718dc44039bc68ee03737e01466155a", 0x7f}, {&(0x7f0000001bc0)="0c67427b129d464f197ac0d02aad56c7b5cdcb142789b02feae002c25d46494dc080adabe81e0cee572dcac922b9994c97dd1cea534ba303112a53d7dba592ddf5b94a1bd24f8dabb0567fcd1ac56d17bb237d72164f5e4217180f5b1b9089dd4636b99344c8a317ac2b9f02380809b096b0b5180e87c95c694acb74c28d3061384c8b8d263ed728791a29e9818958fd6237b6c89abbeec78120f528b6aa0860b45dbc5d806f792834d5411126c93a212c10672badbe605603ce4688af93db29db9ac6a0463960c9c68b6c647c4e4f1caf3eabf627ededa07c8934100b67d838180d2da817a6ba6a7df28fc9391de48ecc", 0xf1}, {&(0x7f0000001cc0)="31f7206c1563db0bd4b6f03cee9fffafe3a6bb11962772562e0345d9cfb95db96340608118e59fe80c84fcfe06af2e98881a63d6726bf9f49ea41a9772dbfa0383e712b0f91eb569db3851b104f953867bf667c85762bc2ad27204141a4a410a46072a49", 0x64}, {&(0x7f0000001d40)="1209e11a597c440fcda4ebf9088c8e9c6ee703b8cc66e22cd4299f673b368d8cb8fe59343553249ff5df4e4c3242ae94b57a17f4f4defa6cca58b000bcec300c3a928a2dbe90219abb4207f07ea2eb93ced26404796a44c89025f7f6cb7ccca1ddd5aa10a1802a8d72af1c5bbe7489f3bda909bb26cfeec1", 0x78}], 0x5, &(0x7f0000001e40)=[{0xb8, 0x0, 0xd6, "90cb7646ea1de52cd9c45ac4284dc5490481932eaa5c45cd579f12513801b6686ccc54d442b46e6a180833fd0db464245bd692ee7eee392b0d768d2a5bd03758f674af17abb10bf36d36e14ecb9172b63e4544b6f10fedcedf1e51203b9c6c81d4e55c8c49ed07044700f31495b49fbfe266b22d48dcbe771760cc63117b5cc654a88d5644c4c705a2bf5fa8d02648593656541be4e88f50fab43050784c148e14"}, {0x28, 0x117, 0x10001, "700ef34182525e5c96866f5b0df5e9ae2915"}, {0x20, 0x3b, 0x5ae2e473, "93b10ba1490896b247af5e5b41"}, {0x1010, 0x109, 0xa44, "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"}, {0xd8, 0x1, 0x2e, "f59a5cd1ed32abb80270ec6e1e2a59e655a2ff57f53090729ba39433b65423c35d6c4e0c7f67d4ca0cb158ee53fffda5e20ecd6cea5b0c2e503e5928495ed662ed6eafbc8ffb17741efafcb55c63f06bbab5b8fb96891f6de809fe69756b2ed133052369275a8efa7f4e0698c00f0b4c0e5b35b733925a7e22b2be7c3bb4bdc80763a6328d548dc422abb79fbc1918e6918ed2905b26389084302578c2c7328cb5a51f3e21096148d2feaad39aef7ace2bcb386a245b788490919e070cb33eba298517af"}, {0x48, 0x10c, 0xc52, "74575e37efe662c7c4cc70c931c3cc3d192a2f4569cff1899a7c667c00ee1983e98acd2ff3f444616c321016e6e3744bcb"}, {0x1010, 0x11f, 0x2, "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"}], 0x2240}}, {{&(0x7f0000004080)=@in6={0xa, 0x4e20, 0x5, @loopback}, 0x80, &(0x7f0000004300)=[{&(0x7f0000004100)="5a60776c0b7c92fdefa58a4064494d8a490a53435ea8940829bfbae0007bb999f71950681df5384a3e3bb8212424d702d385d4f01c7d9b2c0bad108d35fa8c96a0ef69e820001e12b098f8225dda4730730ef5c33666d676fd52f64455f9bf2642de7af0ddd7b6ab93fd5b5f0f2b14dde222359a83148eca38a0", 0x7a}, {&(0x7f0000004180)="5b36a3024ec16a3278d083039372fa3d2088375aa48e28963a3ebfbaaa396571bc5efa1badcd4be913858bd04c8c8f641ea847f0a4955775a4527089bf64db902f3fbe9dc7d2872800ac6ecddc", 0x4d}, {&(0x7f0000004200)="f46bbf6b4c463ccb56a28b04266d2e54ef9d8b429f65174b8a32d589696f56332ad5aadc3e1114bdf34c7f49be6b6d9e19bbbd050b8224abd0a73627b14c872dfd94d4421f4a94488778ef8523ab44eda6f57705393bbf2880802ca9faf12beb376c33e8c31908bf646e457875298c4374a4d209a8446af370781cb24baddb91c5fddccf54cf478f6cd5a57ce61861d46f9053db634fab09f1eb15cc6646a9253244dc9e0a39583b7cf326fbd9d76fbd4833433d2089d7069a4d4a364ca5be04990e6ebaadb7ac1db9af5ce99e2d5ff2115fb901", 0xd4}], 0x3, &(0x7f0000004340)=[{0xb0, 0x10f, 0x8001, "ac7871206b09962259490116b7216b8f0741430f6a43843bc3660076f793ccb05696a35cbc05c2ea9c9ffa1acc0e38f5911966aee46ec0efa8cdfe02c0bd42a26b37d5fa3da9ad946b2bcdacfb45c256bf02f66060c165ff4983842617efb76629e48d4ee88084be8718fc15a58104fe6fa1ba19115ed0d24f09b3a4d26d9815d1b025d607e4a763bcbdbcf547ca9253f7ff4365f5f76d03532a0136eb"}, {0xf0, 0x11d, 0x8001, "04aa4cfeba40573c47c0dbc32269c44a07277caa21f9d95e2fa6ae549dfa15d486464624dfcb3bf6ef72574e73c73161b4fafb93954b07c91211a555a1c659f846dadbb99130af5d2495d8ad3ccc60f4e1c18b3a3a42d3c8f6b180327a4ca480a70c8eb5f635e08af262fe42c042b656a56025e23648712a77de927ed14e736383e1c353c96fb2a4570e8e35d545ed2f12f558ec97705035a88e441eac7fa9530764747c1b3dbe180521e4512e3965b8b75c1119ed0a4763984ed60513d58909e75fb7462e7503f0b61576e82df38c63a4dce999ecc36abbe8f6e46801"}, {0x80, 0x0, 0xffffffff, "153d2192167cec252c122971a03d2f35115723e944ec4c11956fd404ca72f5df9aa2b5b23b89752a298cd74a928f827687dc09633c11efe8f64b14229f99ff129aeecf2ed5c9a40fc6b2317e9112b3ff10f732bcbcb83fa78a403e6f376755af0d7c0516cdbe79a4a5226ba0b66e0003"}, {0x1010, 0x111, 0x100, "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"}, {0x1010, 0x11d, 0x2, "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"}, {0x70, 0xff, 0x3, "d2b87d6349a0aaf508de64b389d3a24519d7c63fbfc52cf8be9d57183504d9e7cc68d777abfc5bc68f550e335876d19fe3695549d9134e33f2b82c77cdc7f334df5f833c43e8edaa6383eef7e0652e35f0ebb90254e8c0d1a038317b1fc392ef"}, {0x28, 0x0, 0x3, "ca423c64081502540b06a2a48249a4174d8f"}, {0x100, 0x116, 0x3e0e, "e1dad1531449ce67ca3d3380b56f31dc135d977552eddd855b122061e50827c5c8e4fbb9f47e4e743b07e2f2857ab7a15fda85beeeb599f2d8002603c92a829850a696a99a8fee74115db4c47087beb65a4b44ce7742940b438f53e9c4cf0211b292dcf5c939f9606b7b3246799be491c6ad3b5fa16214269a0b87ef532bf180b846bbf27bf72be23106637b19f6dd5661286cb97d1d9d33c8029f1676066f72bfb2b94377e5ca8505820cb910e38165cb8301802c24b61fea2f746b896a8901dd2db5cdce67cf09684c2604e5f3aa1d3a5fcfdc572b05b788940d0c22ae3ab239e6fb00c3a8142efa949d7aad85"}, {0xc8, 0x115, 0x0, "ded85d2164a38434ef042911dc93ab865be681d47117f96f2c6b290db26c28ed2ef4457d365568dc4ec1f4bc7a58974f04f18017866ebc1cccfc810b807c9a2928ed7b446408c6c4d4f8fffdf586f2fc25bad14407b30ba97ccd77fef201b13e4c65f87298923bf121671e34b6b89e37d3a0af18a00abc626965b1fdd2803d9cdf3d44ddcd3aa980421b70c5f8004d7f352ad81d4aa96a75356b9d1b3ecc6116f656056c83ca1afd60f8fc706aa60ac7188e05"}, {0x60, 0x11f, 0x6, "e59f5834bcae3eca7bc02b4893c6ee0d2b5f198a4fc48cbf5904202ea1204c6db1ecd1f9eed20fd1c33271227002cbf748593904e04c91ca6febd5e79010eca5a691f8413cdbb79974e2e539c3ec"}], 0x2500}}], 0x3, 0x0) unlink(&(0x7f0000000040)='./file0\x00') syz_init_net_socket$x25(0x9, 0x5, 0x0) 18:38:26 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x3}}, 0x1c) 18:38:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:26 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:26 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:26 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:26 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x4}}, 0x1c) 18:38:26 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:26 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:26 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:26 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x5}}, 0x1c) 18:38:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:27 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:27 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:27 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x6}}, 0x1c) 18:38:27 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:27 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:27 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:27 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x7}}, 0x1c) 18:38:27 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:27 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:27 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:28 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 18:38:28 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x8}}, 0x1c) 18:38:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:28 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:28 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:28 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:28 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 18:38:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:28 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 18:38:28 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x9}}, 0x1c) 18:38:28 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:28 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:29 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:29 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) close(r1) 18:38:29 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xa}}, 0x1c) 18:38:29 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:29 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:29 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 18:38:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:29 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) close(r1) 18:38:29 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xe}}, 0x1c) 18:38:29 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:29 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:29 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 18:38:29 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) close(r1) 18:38:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:30 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:30 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x15}}, 0x1c) 18:38:30 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 18:38:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:38:30 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x58}}, 0x1c) 18:38:30 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:30 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) close(r1) 18:38:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:30 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:30 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:30 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x5c}}, 0x1c) 18:38:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:38:31 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) close(r1) 18:38:31 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:38:31 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) close(r1) 18:38:31 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x60}}, 0x1c) 18:38:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:31 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:31 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:38:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:38:31 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xfc}}, 0x1c) 18:38:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:31 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:32 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:32 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:38:32 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:32 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x1f4}}, 0x1c) 18:38:32 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:32 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:32 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) 18:38:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:33 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x300}}, 0x1c) 18:38:33 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) 18:38:33 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:33 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:33 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x3e8}}, 0x1c) 18:38:33 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:33 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:33 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) 18:38:33 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:33 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x500}}, 0x1c) 18:38:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:34 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:34 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:34 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x600}}, 0x1c) 18:38:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:34 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:34 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x700}}, 0x1c) 18:38:34 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:34 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:35 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:35 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:35 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:35 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x900}}, 0x1c) 18:38:35 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:35 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:35 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:35 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:35 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:35 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xa00}}, 0x1c) 18:38:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:36 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:36 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:36 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:36 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xe00}}, 0x1c) 18:38:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:36 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:36 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:36 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) 18:38:36 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x1500}}, 0x1c) 18:38:37 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:37 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:37 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) 18:38:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:37 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x2000}}, 0x1c) 18:38:37 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:37 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:37 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) 18:38:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:37 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:37 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x3f00}}, 0x1c) 18:38:38 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:38 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:38:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:38 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) 18:38:38 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:38:38 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:38 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x4000}}, 0x1c) 18:38:38 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:38 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) 18:38:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:38 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:38 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:38:38 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:38 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x5800}}, 0x1c) 18:38:39 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) 18:38:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:39 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:39 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:39 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x5c00}}, 0x1c) 18:38:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:39 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:38:39 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:38:39 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:39 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:39 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:38:39 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:38:39 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:39 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x5dc0}}, 0x1c) 18:38:39 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:39 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:38:40 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:38:40 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:40 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:40 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:40 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) 18:38:40 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x6000}}, 0x1c) 18:38:40 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:40 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:40 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:40 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) 18:38:40 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x7f00}}, 0x1c) 18:38:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:40 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:41 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:41 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) 18:38:41 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:41 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x80fe}}, 0x1c) 18:38:41 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:41 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:41 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:41 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:41 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:41 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xc05d}}, 0x1c) 18:38:41 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:41 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:41 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:41 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:42 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:42 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:42 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:42 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xc0fe}}, 0x1c) 18:38:42 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:42 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:42 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:42 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:42 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xe803}}, 0x1c) 18:38:42 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:42 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:42 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:42 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:43 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xf401}}, 0x1c) 18:38:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:43 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:43 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:43 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:43 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:43 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xfc00}}, 0x1c) 18:38:43 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:43 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:44 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xfe80}}, 0x1c) 18:38:44 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:44 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:44 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:44 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:44 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:44 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xfec0}}, 0x1c) 18:38:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:44 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:44 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:44 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:44 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:44 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xff00}}, 0x1c) 18:38:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:45 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:45 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:45 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x1000000}}, 0x1c) 18:38:45 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:45 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:45 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:45 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:45 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x2000000}}, 0x1c) 18:38:45 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:46 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:46 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:46 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:46 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x3000000}}, 0x1c) 18:38:46 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:46 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:46 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:46 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:46 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:46 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x4000000}}, 0x1c) 18:38:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:46 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:46 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:46 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:46 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:47 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:47 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:47 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x5000000}}, 0x1c) 18:38:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:47 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:47 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:47 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:47 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:47 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, 0x0, 0x0) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:47 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x6000000}}, 0x1c) 18:38:47 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:47 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:47 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:47 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, 0x0, 0x0) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:47 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:48 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x7000000}}, 0x1c) 18:38:48 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, 0x0, 0x0) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:48 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, 0x0, 0x0) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:48 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, 0x0, 0x0) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:48 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, 0x0, 0x0) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:48 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:48 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x8000000}}, 0x1c) 18:38:48 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, 0x0, 0x0) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:48 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, 0x0, 0x0) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:48 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:48 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:48 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, 0x0, 0x0) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:48 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x9000000}}, 0x1c) 18:38:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:49 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:49 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:59 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:38:59 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:59 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xa000000}}, 0x1c) 18:38:59 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xe000000}}, 0x1c) 18:38:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:38:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:59 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x15000000}}, 0x1c) 18:38:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, 0x0, 0x0) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:38:59 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:38:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:10 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:10 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x20000000}}, 0x1c) 18:39:10 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, 0x0, 0x0) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:10 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:10 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:10 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, 0x0, 0x0) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:10 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x3f000000}}, 0x1c) 18:39:10 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:10 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x40000000}}, 0x1c) 18:39:10 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:20 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:20 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:20 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x58000000}}, 0x1c) 18:39:20 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:20 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:21 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:21 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:21 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x5c000000}}, 0x1c) 18:39:21 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:21 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:31 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:31 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:31 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x60000000}}, 0x1c) 18:39:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:31 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:31 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:32 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:32 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:32 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:32 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x7f000000}}, 0x1c) 18:39:32 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:32 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:32 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:32 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x8dffffff}}, 0x1c) 18:39:32 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:32 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:32 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:33 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(0x0, 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:33 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(0x0, 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:33 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:33 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xc05d0000}}, 0x1c) 18:39:33 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 957.145026][ T3098] kobject_add_internal failed for hci2 (error: -2 parent: bluetooth) 18:39:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 957.263559][ T3098] Bluetooth: Can't register HCI device 18:39:33 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(0x0, 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:33 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x0, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:33 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xe8030000}}, 0x1c) 18:39:33 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(0x0, 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:33 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:33 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(0x0, 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:33 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x0, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:34 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xf4010000}}, 0x1c) 18:39:34 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:34 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x0, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:34 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:34 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xf5ffffff}}, 0x1c) 18:39:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(0x0, 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:34 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:34 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(0x0, 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:34 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xfc000000}}, 0x1c) 18:39:35 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:35 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:35 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:35 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xfe800000}}, 0x1c) 18:39:35 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(0x0, 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:35 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:35 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:35 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:35 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:39:35 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xfec00000}}, 0x1c) 18:39:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:35 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:36 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:36 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:39:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:36 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xff000000}}, 0x1c) 18:39:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) 18:39:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:36 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:39:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) 18:39:36 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xffffff8d}}, 0x1c) 18:39:36 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:36 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:37 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) 18:39:37 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xfffffff5}}, 0x1c) 18:39:37 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:37 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) 18:39:37 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:37 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x100000000000000}}, 0x1c) 18:39:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:37 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x0, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) 18:39:37 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:38 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:38 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x200000000000000}}, 0x1c) 18:39:38 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) 18:39:38 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x0, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:38 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x300000000000000}}, 0x1c) 18:39:38 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:38 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x0, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) fgetxattr(r0, 0x0, 0x0, 0x0) 18:39:38 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) 18:39:38 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x400000000000000}}, 0x1c) 18:39:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) fgetxattr(r0, 0x0, 0x0, 0x0) 18:39:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:39 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:39 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) 18:39:39 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:39 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) 18:39:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) fgetxattr(r0, 0x0, 0x0, 0x0) 18:39:39 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x500000000000000}}, 0x1c) 18:39:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:39 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:39 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:39:39 executing program 0: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$P9_RLINK(r0, &(0x7f0000000040)={0x7}, 0x7) ftruncate(r0, 0x2081fc) r1 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r1, 0x4, 0x40400) write$FUSE_WRITE(r1, &(0x7f0000000240)={0x18}, 0x18) 18:39:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:39 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:39 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:39 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x600000000000000}}, 0x1c) 18:39:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:39:40 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x700000000000000}}, 0x1c) 18:39:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:39:40 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:39:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x0, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:39:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:39:40 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x800000000000000}}, 0x1c) 18:39:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x0, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:39:41 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x900000000000000}}, 0x1c) 18:39:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:41 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:39:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xb8\x9f&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$FUSE_LK(r0, &(0x7f0000000240)={0xfffffffffffffe61, 0x0, 0x7, {{0x2}}}, 0x28) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x12, r0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0xc020660b, &(0x7f0000000000)) 18:39:41 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x0, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:41 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:41 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="205eb36b7b0000107c000000000000201483f2270200000000000000102acd00000000c1155c3f0000000000000000000000000000003eb677"], 0x1}}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x10000000000038) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:39:41 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xa00000000000000}}, 0x1c) 18:39:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:41 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:41 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000008c0)={0x0, 0x117004, 0x0, 0x0, 0x55}) setpriority(0x0, 0x0, 0xffff) r0 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f0000000380)) clone(0x4007fc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[0x0], 0x0) chroot(&(0x7f0000000ec0)='./file0\x00') 18:39:41 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:41 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000000)=r1, 0x82) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfd00) perf_event_open(&(0x7f0000000900)={0x1, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'hwsim0\x00'}) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x14, &(0x7f0000000080), 0x301) setsockopt$sock_attach_bpf(r3, 0x29, 0x14, &(0x7f0000000000), 0x70db2da734432a8e) setsockopt$sock_attach_bpf(r3, 0x29, 0x15, &(0x7f0000000080), 0xfcf3) 18:39:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:42 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:39:42 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xe00000000000000}}, 0x1c) 18:39:42 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:42 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:42 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:42 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:42 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x1500000000000000}}, 0x1c) 18:39:42 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:42 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:43 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x2000000000000000}}, 0x1c) 18:39:43 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:39:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:43 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:43 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x3f00000000000000}}, 0x1c) 18:39:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:43 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x4000000000000000}}, 0x1c) 18:39:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) 18:39:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:44 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) dup2(r0, r1) 18:39:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:39:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:44 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x5800000000000000}}, 0x1c) 18:39:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) 18:39:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:44 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) 18:39:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:44 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x5c00000000000000}}, 0x1c) 18:39:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:45 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) dup2(r0, r1) 18:39:45 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x6000000000000000}}, 0x1c) 18:39:45 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:45 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x7f00000000000000}}, 0x1c) 18:39:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:45 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) fgetxattr(r0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:45 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x8dffffff00000000}}, 0x1c) 18:39:46 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) dup2(r0, r1) 18:39:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) fgetxattr(r0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:46 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xc05d000000000000}}, 0x1c) 18:39:46 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:46 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) fgetxattr(r0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:46 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:46 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xe803000000000000}}, 0x1c) 18:39:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:46 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:47 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:39:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:47 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xf401000000000000}}, 0x1c) 18:39:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:47 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:47 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xf5ffffff00000000}}, 0x1c) 18:39:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:56 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:56 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xfc00000000000000}}, 0x1c) 18:39:56 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:56 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:39:57 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xfe80000000000000}}, 0x1c) 18:39:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:57 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r1, 0x0, 0x0, 0x0) 18:39:57 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:57 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:57 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xfec0000000000000}}, 0x1c) 18:39:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:57 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:57 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:57 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) 18:39:57 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:39:57 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:57 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:58 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:58 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0xffffffff00000000}}, 0x1c) 18:39:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:58 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:58 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x2}}, 0x1c) 18:39:58 executing program 1 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:58 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 18:39:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:58 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:39:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:58 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 18:39:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x280400) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:39:59 executing program 4 (fault-call:2 fault-nth:0): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:39:59 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:39:59 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/audio\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000900)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000940)=0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000980)={r1, @in={{0x2, 0x4e23, @loopback}}, 0xfffffffffffffff9, 0x7}, 0x90) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x8001, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f00000001c0)) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r4 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x20, 0x400000) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000200)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000003c0)={{0xa, 0x6, 0x3ff, 0x5, 'syz0\x00', 0x2}, 0x1, [0x1ff, 0xa0000, 0x2, 0x8a53, 0x100000000, 0x1, 0x5, 0x5, 0x5954, 0x2, 0x5b1a, 0x6, 0x100000000, 0x3, 0x6, 0x72, 0x5, 0x6, 0x10001, 0x1, 0x7, 0x4, 0x8, 0x9, 0x3, 0x7, 0x1000, 0x7, 0x4, 0x1, 0x1, 0x4, 0xba51, 0x9, 0x6, 0x6, 0xfffffffffffffe01, 0xb8, 0x2f8f, 0x0, 0x8, 0x8, 0x1, 0x6, 0x1, 0x80, 0x0, 0x6, 0x4, 0x3, 0x2, 0x9, 0x6, 0x4, 0x4, 0x80, 0xffff, 0x200, 0x8, 0x88, 0x6, 0x5, 0x6a0, 0x1, 0x1, 0x9, 0x3, 0xce, 0xffffffffffff0001, 0x5, 0x41fa82, 0x1, 0x4, 0x8, 0x7, 0x8, 0xfffffffffffffc00, 0xfffffffffffffbff, 0x0, 0x4, 0x5, 0x10001, 0x6, 0x0, 0x3c, 0x9, 0x7f, 0x7fff, 0x7, 0x8, 0x2, 0x7, 0x0, 0x4, 0x8, 0x9, 0x8, 0x0, 0x4, 0x3, 0x7, 0xae, 0x20, 0x3ff, 0xffff, 0x5, 0x3e9, 0x80000001, 0x4, 0x7, 0xffffffffffffff00, 0x5, 0xffffffffffffffff, 0x0, 0x6, 0x7fff, 0x9, 0x5, 0x5, 0x3, 0x7, 0x1898, 0xbc, 0x538746d5, 0x9, 0x3e4, 0x8, 0x1f], {0x0, 0x1c9c380}}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x33, @local, 0x4e20, 0x4, 'dh\x00', 0x0, 0x3ff, 0x41}, 0x2c) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000240)="a229000f0966b9800000c00f326635002000000f303e660f38402166b9a10800000f32bad004ec66b8010000000f01c1672e0f2a4a15f20f58240f01cb", 0x3d}], 0x1, 0x20, &(0x7f0000000300)=[@cr0={0x0, 0x20000000}], 0x1) prctl$PR_SVE_GET_VL(0x33, 0x1ae30) close(r3) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x766) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 983.255917][ T7904] FAULT_INJECTION: forcing a failure. [ 983.255917][ T7904] name failslab, interval 1, probability 0, space 0, times 0 [ 983.330010][ T7904] CPU: 1 PID: 7904 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 983.338253][ T7904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.348608][ T7904] Call Trace: [ 983.351954][ T7904] dump_stack+0x172/0x1f0 [ 983.356353][ T7904] should_fail.cold+0xa/0x15 [ 983.361162][ T7904] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 983.367198][ T7904] ? ___might_sleep+0x163/0x280 [ 983.372094][ T7904] __should_failslab+0x121/0x190 [ 983.377256][ T7904] should_failslab+0x9/0x14 [ 983.381798][ T7904] kmem_cache_alloc_node+0x261/0x710 [ 983.387277][ T7904] ? lock_downgrade+0x880/0x880 [ 983.392296][ T7904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 983.399178][ T7904] __alloc_skb+0xd5/0x5e0 [ 983.403549][ T7904] ? skb_trim+0x190/0x190 [ 983.407916][ T7904] ? perf_trace_lock_acquire+0xf5/0x530 [ 983.413543][ T7904] vhci_write+0xc4/0x470 [ 983.417902][ T7904] new_sync_write+0x4d3/0x770 [ 983.422693][ T7904] ? new_sync_read+0x800/0x800 [ 983.427595][ T7904] ? common_file_perm+0x238/0x720 [ 983.427613][ T7904] ? __fget+0x381/0x550 [ 983.427635][ T7904] ? apparmor_file_permission+0x25/0x30 [ 983.427656][ T7904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 983.427687][ T7904] ? security_file_permission+0x8f/0x380 [ 983.427704][ T7904] __vfs_write+0xe1/0x110 [ 983.449327][ T7904] vfs_write+0x20c/0x580 [ 983.449347][ T7904] ksys_write+0x14f/0x290 [ 983.449364][ T7904] ? __ia32_sys_read+0xb0/0xb0 [ 983.449391][ T7904] ? do_syscall_64+0x26/0x680 [ 983.464185][ T7904] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 983.484087][ T7904] ? do_syscall_64+0x26/0x680 [ 983.484114][ T7904] __x64_sys_write+0x73/0xb0 [ 983.484140][ T7904] do_syscall_64+0xfd/0x680 [ 983.497939][ T7904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 983.503858][ T7904] RIP: 0033:0x4592c9 [ 983.507776][ T7904] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:39:59 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x3}}, 0x1c) 18:39:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:59 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 18:39:59 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) [ 983.527783][ T7904] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 983.527801][ T7904] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 983.527809][ T7904] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 983.527819][ T7904] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 983.527838][ T7904] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 983.545047][ T7904] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:39:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:39:59 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:39:59 executing program 4 (fault-call:2 fault-nth:1): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:00 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:00 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) close(r1) [ 983.962613][ T8033] FAULT_INJECTION: forcing a failure. [ 983.962613][ T8033] name failslab, interval 1, probability 0, space 0, times 0 [ 984.091689][ T8033] CPU: 1 PID: 8033 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 984.099726][ T8033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.109999][ T8033] Call Trace: [ 984.113310][ T8033] dump_stack+0x172/0x1f0 [ 984.117994][ T8033] should_fail.cold+0xa/0x15 [ 984.122718][ T8033] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 984.128917][ T8033] ? ___might_sleep+0x163/0x280 [ 984.133781][ T8033] __should_failslab+0x121/0x190 [ 984.138899][ T8033] should_failslab+0x9/0x14 [ 984.143703][ T8033] kmem_cache_alloc_node_trace+0x26d/0x720 [ 984.149920][ T8033] __kmalloc_node_track_caller+0x3d/0x70 [ 984.155731][ T8033] __kmalloc_reserve.isra.0+0x40/0xf0 [ 984.161244][ T8033] __alloc_skb+0x10b/0x5e0 [ 984.165711][ T8033] ? skb_trim+0x190/0x190 [ 984.170596][ T8033] ? perf_trace_lock_acquire+0xf5/0x530 [ 984.176359][ T8033] vhci_write+0xc4/0x470 [ 984.180742][ T8033] new_sync_write+0x4d3/0x770 [ 984.185606][ T8033] ? new_sync_read+0x800/0x800 [ 984.190557][ T8033] ? common_file_perm+0x238/0x720 [ 984.195808][ T8033] ? __fget+0x381/0x550 [ 984.200099][ T8033] ? apparmor_file_permission+0x25/0x30 [ 984.205822][ T8033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 984.212590][ T8033] ? security_file_permission+0x8f/0x380 [ 984.218328][ T8033] __vfs_write+0xe1/0x110 [ 984.222661][ T8033] vfs_write+0x20c/0x580 [ 984.226932][ T8033] ksys_write+0x14f/0x290 [ 984.231359][ T8033] ? __ia32_sys_read+0xb0/0xb0 [ 984.236121][ T8033] ? do_syscall_64+0x26/0x680 [ 984.240822][ T8033] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 984.247027][ T8033] ? do_syscall_64+0x26/0x680 [ 984.252396][ T8033] __x64_sys_write+0x73/0xb0 [ 984.256989][ T8033] do_syscall_64+0xfd/0x680 [ 984.261558][ T8033] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 984.267839][ T8033] RIP: 0033:0x4592c9 [ 984.271762][ T8033] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:40:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(r0, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x5, 0x100000000003}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0x7, 0x4) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:00 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) [ 984.291520][ T8033] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 984.299931][ T8033] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 984.308604][ T8033] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 984.316588][ T8033] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 984.324576][ T8033] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 984.332560][ T8033] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:00 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:00 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x4}}, 0x1c) 18:40:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:00 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) close(r1) 18:40:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) prctl$PR_GET_SECCOMP(0x15) fremovexattr(r1, &(0x7f0000000140)=@random={'btrfs.', '/dev/vhci\x00'}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:00 executing program 4 (fault-call:2 fault-nth:2): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 984.948053][ T8178] FAULT_INJECTION: forcing a failure. [ 984.948053][ T8178] name failslab, interval 1, probability 0, space 0, times 0 [ 984.961173][ T8178] CPU: 0 PID: 8178 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 984.969228][ T8178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.979471][ T8178] Call Trace: [ 984.982804][ T8178] dump_stack+0x172/0x1f0 [ 984.987157][ T8178] should_fail.cold+0xa/0x15 [ 984.991949][ T8178] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 984.998087][ T8178] ? ___might_sleep+0x163/0x280 [ 985.003049][ T8178] __should_failslab+0x121/0x190 [ 985.007999][ T8178] should_failslab+0x9/0x14 [ 985.012524][ T8178] kmem_cache_alloc_node+0x261/0x710 [ 985.017942][ T8178] ? trace_hardirqs_off+0x62/0x220 [ 985.023079][ T8178] __alloc_skb+0xd5/0x5e0 [ 985.027418][ T8178] ? skb_trim+0x190/0x190 [ 985.031953][ T8178] ? vhci_write+0x2b3/0x470 [ 985.036475][ T8178] ? rcu_read_lock_sched_held+0x110/0x130 [ 985.042383][ T8178] ? kmem_cache_free+0x222/0x260 [ 985.047341][ T8178] __vhci_create_device+0x88/0x5a0 [ 985.052471][ T8178] vhci_write+0x2d0/0x470 [ 985.057030][ T8178] new_sync_write+0x4d3/0x770 [ 985.061915][ T8178] ? new_sync_read+0x800/0x800 [ 985.066966][ T8178] ? common_file_perm+0x238/0x720 [ 985.072299][ T8178] ? __fget+0x381/0x550 [ 985.077134][ T8178] ? apparmor_file_permission+0x25/0x30 [ 985.083041][ T8178] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 985.089727][ T8178] ? security_file_permission+0x8f/0x380 [ 985.095771][ T8178] __vfs_write+0xe1/0x110 [ 985.100105][ T8178] vfs_write+0x20c/0x580 [ 985.104451][ T8178] ksys_write+0x14f/0x290 [ 985.108794][ T8178] ? __ia32_sys_read+0xb0/0xb0 [ 985.113665][ T8178] ? do_syscall_64+0x26/0x680 [ 985.118352][ T8178] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.124434][ T8178] ? do_syscall_64+0x26/0x680 [ 985.129409][ T8178] __x64_sys_write+0x73/0xb0 [ 985.134049][ T8178] do_syscall_64+0xfd/0x680 [ 985.138564][ T8178] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.144756][ T8178] RIP: 0033:0x4592c9 [ 985.148912][ T8178] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 985.169077][ T8178] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 985.177661][ T8178] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 985.186193][ T8178] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 18:40:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x100000000, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000180)="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", 0xfa, 0x7}, {&(0x7f00000003c0)="4ad6aebdebac8c8cd9f4598f6fba55d44494ea383db5f9fde4726921dd862d87552df6f7a86563b46e79221d5cde9861b7508d28d85ce765f333a1a1da6befa3b5e71fe47611d6a7e932ab1cc62f088210b04fece7204773e340ddf0780d703403ccda56cc87c039bba0f1bcd17f0da5e7a17d2a29f4727e98acb27cd3c44aa8ff2dd974f89fdd938ac3e3d7c4608a06a1f4e82e94faba00efd2d3a8d4971b3d1c590d6c96c3c349dda71611e8a08889eb9017bbed8f0c74cc0e560ad63b76b3b2b93a93acee0cc2284f1df26d5fe08e76025bccbabdee339127fb4aa7cf8f4f41873d77", 0xe4, 0x100000001}, {&(0x7f00000004c0)="2da015aa6fd76eb080f84ed4bd3e71edc1f3a0393e51e899df619c5c20e3fdfd6df00b47e9a5a924ed04548bdac790c22e6761b7442c3cbf4a334a676d9663778553d98d250f4d3e68919447224360f9a78cd260e14536e86ec1bdf2a45f41e427e5a919972c579e160186765d635e06c1b9c190926c7585d47b5eb45802afc8f5994fe52aec9117cfbc7e959fd8b8764db219c82259b0dd616a5b3f776c8280f81e267755a0528a6d681bed736bc98193d10177231412dc49df54a7a134f4e1ce3df985c37c769759", 0xc9, 0x8}], 0x800, &(0x7f0000000280)=ANY=[@ANYBLOB="02686f72746e616d653d77696e393500"]) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4, 0x400) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f041}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000640)={0x3, &(0x7f0000000300)=[{0xfff, 0x0, 0x2, 0x6}, {0x7, 0x0, 0x7f, 0x9}, {0x5, 0x1, 0x9, 0x8}]}) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:01 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) close(r1) [ 985.194748][ T8178] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 985.202798][ T8178] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 985.211021][ T8178] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:01 executing program 4 (fault-call:2 fault-nth:3): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 985.398158][ T8190] vivid-003: disconnect [ 985.615867][ T8199] FAULT_INJECTION: forcing a failure. [ 985.615867][ T8199] name failslab, interval 1, probability 0, space 0, times 0 18:40:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 985.680813][ T8199] CPU: 0 PID: 8199 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 985.689217][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.692676][ T8188] FAT-fs (loop1): Unrecognized mount option "hortname=win95" or missing value [ 985.699761][ T8199] Call Trace: [ 985.699801][ T8199] dump_stack+0x172/0x1f0 [ 985.699830][ T8199] should_fail.cold+0xa/0x15 [ 985.699853][ T8199] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 985.699880][ T8199] ? ___might_sleep+0x163/0x280 [ 985.699906][ T8199] __should_failslab+0x121/0x190 [ 985.699932][ T8199] should_failslab+0x9/0x14 [ 985.699958][ T8199] kmem_cache_alloc_node_trace+0x26d/0x720 [ 985.736975][ T8199] __kmalloc_node_track_caller+0x3d/0x70 [ 985.753079][ T8199] __kmalloc_reserve.isra.0+0x40/0xf0 [ 985.758473][ T8199] __alloc_skb+0x10b/0x5e0 [ 985.762911][ T8199] ? skb_trim+0x190/0x190 [ 985.767264][ T8199] ? vhci_write+0x2b3/0x470 [ 985.771806][ T8199] ? rcu_read_lock_sched_held+0x110/0x130 [ 985.777538][ T8199] ? kmem_cache_free+0x222/0x260 [ 985.777565][ T8199] __vhci_create_device+0x88/0x5a0 [ 985.777586][ T8199] vhci_write+0x2d0/0x470 [ 985.777606][ T8199] new_sync_write+0x4d3/0x770 [ 985.777625][ T8199] ? new_sync_read+0x800/0x800 [ 985.777660][ T8199] ? common_file_perm+0x238/0x720 [ 985.787764][ T8199] ? __fget+0x381/0x550 [ 985.787792][ T8199] ? apparmor_file_permission+0x25/0x30 [ 985.787810][ T8199] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 985.787825][ T8199] ? security_file_permission+0x8f/0x380 [ 985.787846][ T8199] __vfs_write+0xe1/0x110 [ 985.787864][ T8199] vfs_write+0x20c/0x580 [ 985.787883][ T8199] ksys_write+0x14f/0x290 [ 985.787898][ T8199] ? __ia32_sys_read+0xb0/0xb0 [ 985.787920][ T8199] ? do_syscall_64+0x26/0x680 [ 985.787955][ T8199] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.869903][ T8199] ? do_syscall_64+0x26/0x680 [ 985.874620][ T8199] __x64_sys_write+0x73/0xb0 [ 985.879382][ T8199] do_syscall_64+0xfd/0x680 [ 985.884276][ T8199] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.890178][ T8199] RIP: 0033:0x4592c9 [ 985.894089][ T8199] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 985.894098][ T8199] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 985.894115][ T8199] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 18:40:02 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x5}}, 0x1c) 18:40:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) [ 985.894125][ T8199] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 985.894135][ T8199] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 985.894144][ T8199] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 985.894153][ T8199] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 [ 986.107810][ T8186] vivid-003: reconnect 18:40:02 executing program 4 (fault-call:2 fault-nth:4): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 986.278736][ T8325] FAULT_INJECTION: forcing a failure. [ 986.278736][ T8325] name failslab, interval 1, probability 0, space 0, times 0 [ 986.280739][ T8188] FAT-fs (loop1): Unrecognized mount option "hortname=win95" or missing value [ 986.326462][ T8325] CPU: 0 PID: 8325 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 986.334482][ T8325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 986.334491][ T8325] Call Trace: [ 986.334524][ T8325] dump_stack+0x172/0x1f0 [ 986.334551][ T8325] should_fail.cold+0xa/0x15 [ 986.334575][ T8325] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 986.334603][ T8325] ? ___might_sleep+0x163/0x280 [ 986.334630][ T8325] __should_failslab+0x121/0x190 [ 986.334651][ T8325] should_failslab+0x9/0x14 [ 986.334670][ T8325] kmem_cache_alloc_trace+0x2ce/0x750 [ 986.334690][ T8325] ? skb_trim+0x190/0x190 [ 986.334710][ T8325] ? vhci_write+0x2b3/0x470 [ 986.334730][ T8325] ? rcu_read_lock_sched_held+0x110/0x130 [ 986.334769][ T8325] hci_alloc_dev+0x43/0x1d00 [ 986.334792][ T8325] __vhci_create_device+0x101/0x5a0 [ 986.334815][ T8325] vhci_write+0x2d0/0x470 [ 986.334838][ T8325] new_sync_write+0x4d3/0x770 [ 986.334857][ T8325] ? new_sync_read+0x800/0x800 [ 986.334887][ T8325] ? common_file_perm+0x238/0x720 [ 986.334902][ T8325] ? __fget+0x381/0x550 [ 986.334927][ T8325] ? apparmor_file_permission+0x25/0x30 [ 986.334956][ T8325] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 986.334973][ T8325] ? security_file_permission+0x8f/0x380 [ 986.334994][ T8325] __vfs_write+0xe1/0x110 [ 986.335015][ T8325] vfs_write+0x20c/0x580 [ 986.335037][ T8325] ksys_write+0x14f/0x290 [ 986.335058][ T8325] ? __ia32_sys_read+0xb0/0xb0 18:40:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000100)=0x10f004) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 986.335081][ T8325] ? do_syscall_64+0x26/0x680 [ 986.335100][ T8325] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 986.335117][ T8325] ? do_syscall_64+0x26/0x680 [ 986.335140][ T8325] __x64_sys_write+0x73/0xb0 [ 986.335161][ T8325] do_syscall_64+0xfd/0x680 [ 986.335183][ T8325] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 986.335198][ T8325] RIP: 0033:0x4592c9 [ 986.335218][ T8325] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 986.335227][ T8325] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 986.335245][ T8325] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 986.335255][ T8325] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 986.335265][ T8325] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 18:40:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) [ 986.335275][ T8325] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 986.335286][ T8325] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:02 executing program 4 (fault-call:2 fault-nth:5): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 986.849596][ T8339] FAULT_INJECTION: forcing a failure. [ 986.849596][ T8339] name failslab, interval 1, probability 0, space 0, times 0 18:40:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) [ 986.940727][ T8339] CPU: 1 PID: 8339 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 986.948676][ T8339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 986.958846][ T8339] Call Trace: [ 986.962186][ T8339] dump_stack+0x172/0x1f0 [ 986.966609][ T8339] should_fail.cold+0xa/0x15 [ 986.971260][ T8339] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 986.971286][ T8339] ? ___might_sleep+0x163/0x280 [ 986.971311][ T8339] __should_failslab+0x121/0x190 [ 986.971336][ T8339] should_failslab+0x9/0x14 [ 986.971353][ T8339] __kmalloc+0x2d9/0x740 [ 986.971380][ T8339] ? alloc_workqueue+0x166/0xf00 [ 986.971402][ T8339] alloc_workqueue+0x166/0xf00 [ 986.971431][ T8339] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 986.971459][ T8339] ? scnprintf+0x140/0x140 [ 986.971485][ T8339] ? __init_waitqueue_head+0x36/0x90 [ 986.971512][ T8339] hci_register_dev+0x1b8/0x860 [ 986.971544][ T8339] ? hci_init_sysfs+0x7c/0xa0 [ 986.992928][ T8339] __vhci_create_device+0x2d0/0x5a0 [ 986.992959][ T8339] vhci_write+0x2d0/0x470 [ 987.022955][ T8339] new_sync_write+0x4d3/0x770 [ 987.022972][ T8339] ? new_sync_read+0x800/0x800 [ 987.022998][ T8339] ? common_file_perm+0x238/0x720 [ 987.023020][ T8339] ? __fget+0x381/0x550 [ 987.047079][ T8339] ? apparmor_file_permission+0x25/0x30 [ 987.047100][ T8339] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 987.047117][ T8339] ? security_file_permission+0x8f/0x380 [ 987.047139][ T8339] __vfs_write+0xe1/0x110 [ 987.047159][ T8339] vfs_write+0x20c/0x580 [ 987.047180][ T8339] ksys_write+0x14f/0x290 [ 987.047206][ T8339] ? __ia32_sys_read+0xb0/0xb0 [ 987.061174][ T8339] ? do_syscall_64+0x26/0x680 [ 987.061201][ T8339] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.079263][ T8339] ? do_syscall_64+0x26/0x680 [ 987.079287][ T8339] __x64_sys_write+0x73/0xb0 [ 987.079303][ T8339] do_syscall_64+0xfd/0x680 [ 987.079326][ T8339] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.079338][ T8339] RIP: 0033:0x4592c9 [ 987.079354][ T8339] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 987.079362][ T8339] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 987.079376][ T8339] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 987.079384][ T8339] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 987.079392][ T8339] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 987.079410][ T8339] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 987.097758][ T8339] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:03 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x6}}, 0x1c) [ 987.288858][ T8339] Bluetooth: Can't register HCI device 18:40:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000200)) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x8, r3}, 0x10) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) getpeername$netlink(r2, &(0x7f0000000100), &(0x7f0000000140)=0xc) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(r1, 0x541c, 0x0) connect(r1, &(0x7f00000003c0)=@nl=@kern={0x10, 0x0, 0x0, 0x80000000}, 0x80) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000180)) 18:40:03 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:03 executing program 4 (fault-call:2 fault-nth:6): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 987.652100][ T8472] FAULT_INJECTION: forcing a failure. [ 987.652100][ T8472] name failslab, interval 1, probability 0, space 0, times 0 [ 987.665798][ T8472] CPU: 1 PID: 8472 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 987.673898][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.684297][ T8472] Call Trace: [ 987.684337][ T8472] dump_stack+0x172/0x1f0 [ 987.684366][ T8472] should_fail.cold+0xa/0x15 [ 987.684389][ T8472] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 987.684415][ T8472] ? ___might_sleep+0x163/0x280 [ 987.684450][ T8472] __should_failslab+0x121/0x190 [ 987.684477][ T8472] should_failslab+0x9/0x14 [ 987.684494][ T8472] kmem_cache_alloc_trace+0x2ce/0x750 [ 987.684514][ T8472] ? rcu_read_lock_sched_held+0x110/0x130 [ 987.684530][ T8472] ? __kmalloc+0x5d2/0x740 [ 987.684559][ T8472] alloc_workqueue_attrs+0x82/0x120 [ 987.697066][ T8472] alloc_workqueue+0x190/0xf00 [ 987.697095][ T8472] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 987.697112][ T8472] ? scnprintf+0x140/0x140 [ 987.697137][ T8472] ? __init_waitqueue_head+0x36/0x90 [ 987.697165][ T8472] hci_register_dev+0x1b8/0x860 [ 987.707848][ T8472] ? hci_init_sysfs+0x7c/0xa0 [ 987.707879][ T8472] __vhci_create_device+0x2d0/0x5a0 [ 987.707899][ T8472] vhci_write+0x2d0/0x470 [ 987.707920][ T8472] new_sync_write+0x4d3/0x770 [ 987.707937][ T8472] ? new_sync_read+0x800/0x800 [ 987.707965][ T8472] ? common_file_perm+0x238/0x720 [ 987.707979][ T8472] ? __fget+0x381/0x550 [ 987.708001][ T8472] ? apparmor_file_permission+0x25/0x30 [ 987.708023][ T8472] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 987.708037][ T8472] ? security_file_permission+0x8f/0x380 [ 987.708056][ T8472] __vfs_write+0xe1/0x110 [ 987.708075][ T8472] vfs_write+0x20c/0x580 [ 987.708094][ T8472] ksys_write+0x14f/0x290 [ 987.708112][ T8472] ? __ia32_sys_read+0xb0/0xb0 [ 987.708132][ T8472] ? do_syscall_64+0x26/0x680 18:40:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 987.708150][ T8472] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.708165][ T8472] ? do_syscall_64+0x26/0x680 [ 987.708185][ T8472] __x64_sys_write+0x73/0xb0 [ 987.708202][ T8472] do_syscall_64+0xfd/0x680 [ 987.708224][ T8472] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.708237][ T8472] RIP: 0033:0x4592c9 [ 987.708256][ T8472] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 987.708265][ T8472] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 987.708280][ T8472] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 987.708290][ T8472] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 987.708300][ T8472] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 987.708309][ T8472] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 987.708318][ T8472] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 [ 987.711558][ T8472] Bluetooth: Can't register HCI device 18:40:04 executing program 4 (fault-call:2 fault-nth:7): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000001400)=@HCI_EVENT_PKT={0x4, "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"}, 0x1001) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000100)={0x5, 0x2, 'client1\x00', 0xffffffff80000000, "6f7d99187e8aa479", "471187bc96b098d54356c33adb878023619ac195f0e70c2ff0488a39fb9f48c8", 0x100000001, 0xffff}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:04 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 988.110634][ T8484] FAULT_INJECTION: forcing a failure. [ 988.110634][ T8484] name failslab, interval 1, probability 0, space 0, times 0 18:40:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 988.228334][ T8484] CPU: 0 PID: 8484 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 988.236574][ T8484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 988.236583][ T8484] Call Trace: [ 988.236616][ T8484] dump_stack+0x172/0x1f0 [ 988.236647][ T8484] should_fail.cold+0xa/0x15 [ 988.259098][ T8484] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 988.265278][ T8484] ? ___might_sleep+0x163/0x280 [ 988.270152][ T8484] __should_failslab+0x121/0x190 [ 988.275401][ T8484] should_failslab+0x9/0x14 [ 988.279942][ T8484] __kmalloc_track_caller+0x2d5/0x740 [ 988.285329][ T8484] ? pointer+0x750/0x750 [ 988.289578][ T8484] ? widen_string+0x2e0/0x2e0 [ 988.294263][ T8484] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 988.299990][ T8484] ? kasprintf+0xbb/0xf0 [ 988.304349][ T8484] kvasprintf+0xc8/0x170 [ 988.308603][ T8484] ? bust_spinlocks+0xe0/0xe0 [ 988.313294][ T8484] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 988.319022][ T8484] ? find_next_bit+0x107/0x130 [ 988.323819][ T8484] kasprintf+0xbb/0xf0 [ 988.327901][ T8484] ? kvasprintf_const+0x190/0x190 [ 988.332970][ T8484] ? kasan_check_read+0x11/0x20 [ 988.337836][ T8484] alloc_workqueue+0x471/0xf00 [ 988.342723][ T8484] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 988.348465][ T8484] ? __init_waitqueue_head+0x36/0x90 [ 988.353803][ T8484] hci_register_dev+0x1b8/0x860 [ 988.358673][ T8484] ? hci_init_sysfs+0x7c/0xa0 [ 988.364518][ T8484] __vhci_create_device+0x2d0/0x5a0 [ 988.369831][ T8484] vhci_write+0x2d0/0x470 [ 988.374195][ T8484] new_sync_write+0x4d3/0x770 [ 988.379067][ T8484] ? new_sync_read+0x800/0x800 [ 988.383857][ T8484] ? common_file_perm+0x238/0x720 [ 988.388895][ T8484] ? __fget+0x381/0x550 [ 988.393074][ T8484] ? apparmor_file_permission+0x25/0x30 [ 988.398727][ T8484] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 988.409491][ T8484] ? security_file_permission+0x8f/0x380 [ 988.415325][ T8484] __vfs_write+0xe1/0x110 [ 988.419675][ T8484] vfs_write+0x20c/0x580 [ 988.424376][ T8484] ksys_write+0x14f/0x290 [ 988.428732][ T8484] ? __ia32_sys_read+0xb0/0xb0 [ 988.433600][ T8484] ? do_syscall_64+0x26/0x680 [ 988.438390][ T8484] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 988.444487][ T8484] ? do_syscall_64+0x26/0x680 [ 988.449266][ T8484] __x64_sys_write+0x73/0xb0 [ 988.453876][ T8484] do_syscall_64+0xfd/0x680 [ 988.458586][ T8484] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 988.464694][ T8484] RIP: 0033:0x4592c9 [ 988.468710][ T8484] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 988.488957][ T8484] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 988.497472][ T8484] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 988.505713][ T8484] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 988.513699][ T8484] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 988.521690][ T8484] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 18:40:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getown(r0, 0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r2) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000100)) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 988.529860][ T8484] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:04 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x7}}, 0x1c) 18:40:04 executing program 4 (fault-call:2 fault-nth:8): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:05 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000100)={0x7, 0x101, 0xfffffffffffff800, 0x800, 0x7}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000140)) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) ioctl$VT_RELDISP(r1, 0x5605) [ 989.003588][ T8614] FAULT_INJECTION: forcing a failure. [ 989.003588][ T8614] name failslab, interval 1, probability 0, space 0, times 0 [ 989.067948][ T8614] CPU: 1 PID: 8614 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 989.075977][ T8614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.086134][ T8614] Call Trace: [ 989.089463][ T8614] dump_stack+0x172/0x1f0 [ 989.093954][ T8614] should_fail.cold+0xa/0x15 [ 989.098571][ T8614] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 989.104407][ T8614] ? ___might_sleep+0x163/0x280 [ 989.109289][ T8614] __should_failslab+0x121/0x190 [ 989.114234][ T8614] should_failslab+0x9/0x14 [ 989.119246][ T8614] __kmalloc+0x2d9/0x740 [ 989.123511][ T8614] ? apply_wqattrs_prepare+0xae/0x970 [ 989.128918][ T8614] apply_wqattrs_prepare+0xae/0x970 [ 989.134161][ T8614] apply_workqueue_attrs_locked+0xcb/0x140 [ 989.140253][ T8614] apply_workqueue_attrs+0x31/0x50 [ 989.145385][ T8614] alloc_workqueue+0x8b9/0xf00 [ 989.150181][ T8614] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 989.155932][ T8614] ? __init_waitqueue_head+0x36/0x90 [ 989.161238][ T8614] hci_register_dev+0x1b8/0x860 [ 989.166102][ T8614] ? hci_init_sysfs+0x7c/0xa0 [ 989.170917][ T8614] __vhci_create_device+0x2d0/0x5a0 [ 989.176261][ T8614] vhci_write+0x2d0/0x470 [ 989.180598][ T8614] new_sync_write+0x4d3/0x770 [ 989.185460][ T8614] ? new_sync_read+0x800/0x800 [ 989.190244][ T8614] ? common_file_perm+0x238/0x720 [ 989.195263][ T8614] ? __fget+0x381/0x550 [ 989.199441][ T8614] ? apparmor_file_permission+0x25/0x30 [ 989.205010][ T8614] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 989.211529][ T8614] ? security_file_permission+0x8f/0x380 [ 989.217179][ T8614] __vfs_write+0xe1/0x110 [ 989.221799][ T8614] vfs_write+0x20c/0x580 [ 989.226081][ T8614] ksys_write+0x14f/0x290 [ 989.230505][ T8614] ? __ia32_sys_read+0xb0/0xb0 [ 989.235266][ T8614] ? do_syscall_64+0x26/0x680 [ 989.240106][ T8614] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.246291][ T8614] ? do_syscall_64+0x26/0x680 [ 989.251283][ T8614] __x64_sys_write+0x73/0xb0 [ 989.255907][ T8614] do_syscall_64+0xfd/0x680 [ 989.260424][ T8614] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.266315][ T8614] RIP: 0033:0x4592c9 [ 989.270215][ T8614] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 989.290327][ T8614] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 989.298887][ T8614] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 989.306940][ T8614] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 18:40:05 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) [ 989.315028][ T8614] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 989.323138][ T8614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 989.331127][ T8614] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 [ 989.398532][ T8614] Bluetooth: Can't register HCI device 18:40:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x8800) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) r2 = gettid() ptrace$cont(0x1f, r2, 0x4, 0x100000000) close(r0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000280)={@multicast1, @dev, 0x0}, &(0x7f0000000300)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'rose0\x00', r3}) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(r1, 0x541c, 0x0) 18:40:05 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:05 executing program 4 (fault-call:2 fault-nth:9): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 989.746755][ T8686] FAULT_INJECTION: forcing a failure. [ 989.746755][ T8686] name failslab, interval 1, probability 0, space 0, times 0 [ 989.762400][ T8686] CPU: 1 PID: 8686 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 989.770491][ T8686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.780639][ T8686] Call Trace: [ 989.784011][ T8686] dump_stack+0x172/0x1f0 [ 989.788358][ T8686] should_fail.cold+0xa/0x15 [ 989.792955][ T8686] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 989.798782][ T8686] ? ___might_sleep+0x163/0x280 [ 989.803739][ T8686] __should_failslab+0x121/0x190 [ 989.808687][ T8686] should_failslab+0x9/0x14 [ 989.813366][ T8686] kmem_cache_alloc_trace+0x2ce/0x750 [ 989.818917][ T8686] ? rcu_read_lock_sched_held+0x110/0x130 [ 989.824803][ T8686] ? __kmalloc+0x5d2/0x740 [ 989.829373][ T8686] alloc_workqueue_attrs+0x82/0x120 [ 989.834684][ T8686] apply_wqattrs_prepare+0xbb/0x970 [ 989.839907][ T8686] apply_workqueue_attrs_locked+0xcb/0x140 [ 989.845828][ T8686] apply_workqueue_attrs+0x31/0x50 [ 989.850948][ T8686] alloc_workqueue+0x8b9/0xf00 [ 989.855740][ T8686] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 989.861472][ T8686] ? __init_waitqueue_head+0x36/0x90 [ 989.866781][ T8686] hci_register_dev+0x1b8/0x860 [ 989.871639][ T8686] ? hci_init_sysfs+0x7c/0xa0 [ 989.876526][ T8686] __vhci_create_device+0x2d0/0x5a0 [ 989.881732][ T8686] vhci_write+0x2d0/0x470 [ 989.886124][ T8686] new_sync_write+0x4d3/0x770 [ 989.890904][ T8686] ? new_sync_read+0x800/0x800 [ 989.895855][ T8686] ? common_file_perm+0x238/0x720 [ 989.901087][ T8686] ? __fget+0x381/0x550 [ 989.905250][ T8686] ? apparmor_file_permission+0x25/0x30 [ 989.910807][ T8686] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 989.917157][ T8686] ? security_file_permission+0x8f/0x380 [ 989.922805][ T8686] __vfs_write+0xe1/0x110 [ 989.927144][ T8686] vfs_write+0x20c/0x580 [ 989.931399][ T8686] ksys_write+0x14f/0x290 [ 989.935754][ T8686] ? __ia32_sys_read+0xb0/0xb0 [ 989.940528][ T8686] ? do_syscall_64+0x26/0x680 [ 989.945230][ T8686] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.951737][ T8686] ? do_syscall_64+0x26/0x680 [ 989.956666][ T8686] __x64_sys_write+0x73/0xb0 [ 989.961373][ T8686] do_syscall_64+0xfd/0x680 [ 989.965889][ T8686] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.971957][ T8686] RIP: 0033:0x4592c9 [ 989.975873][ T8686] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:40:06 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 989.995789][ T8686] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 990.004469][ T8686] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 990.012457][ T8686] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 990.020556][ T8686] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 990.028532][ T8686] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 990.036507][ T8686] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:06 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x8}}, 0x1c) [ 990.117755][ T8686] Bluetooth: Can't register HCI device 18:40:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000100)={0xbf5}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f00000000c0)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) ioctl$RTC_WIE_ON(r1, 0x700f) mq_unlink(&(0x7f0000000280)=')]bdev,securitybdev{[vboxnet1.\x00') fgetxattr(r1, 0x0, 0x0, 0x259) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000140)) 18:40:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:06 executing program 4 (fault-call:2 fault-nth:10): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:06 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:06 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) [ 990.463488][ T8763] FAULT_INJECTION: forcing a failure. [ 990.463488][ T8763] name failslab, interval 1, probability 0, space 0, times 0 [ 990.491488][ T8763] CPU: 0 PID: 8763 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 990.499437][ T8763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 990.509599][ T8763] Call Trace: [ 990.513026][ T8763] dump_stack+0x172/0x1f0 [ 990.517671][ T8763] should_fail.cold+0xa/0x15 [ 990.522382][ T8763] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 990.528211][ T8763] ? ___might_sleep+0x163/0x280 [ 990.533081][ T8763] __should_failslab+0x121/0x190 [ 990.538133][ T8763] should_failslab+0x9/0x14 [ 990.542654][ T8763] kmem_cache_alloc_trace+0x2ce/0x750 [ 990.548174][ T8763] ? rcu_read_lock_sched_held+0x110/0x130 [ 990.554027][ T8763] ? __kmalloc+0x5d2/0x740 [ 990.558463][ T8763] alloc_workqueue_attrs+0x82/0x120 [ 990.563979][ T8763] apply_wqattrs_prepare+0xc8/0x970 [ 990.569206][ T8763] apply_workqueue_attrs_locked+0xcb/0x140 [ 990.569227][ T8763] apply_workqueue_attrs+0x31/0x50 [ 990.569254][ T8763] alloc_workqueue+0x8b9/0xf00 [ 990.585200][ T8763] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 990.585227][ T8763] ? __init_waitqueue_head+0x36/0x90 [ 990.585257][ T8763] hci_register_dev+0x1b8/0x860 [ 990.596624][ T8763] ? hci_init_sysfs+0x7c/0xa0 [ 990.606328][ T8763] __vhci_create_device+0x2d0/0x5a0 [ 990.606351][ T8763] vhci_write+0x2d0/0x470 [ 990.606371][ T8763] new_sync_write+0x4d3/0x770 [ 990.606391][ T8763] ? new_sync_read+0x800/0x800 [ 990.615915][ T8763] ? common_file_perm+0x238/0x720 [ 990.615931][ T8763] ? __fget+0x381/0x550 [ 990.615961][ T8763] ? apparmor_file_permission+0x25/0x30 [ 990.615985][ T8763] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 990.634785][ T8763] ? security_file_permission+0x8f/0x380 [ 990.634807][ T8763] __vfs_write+0xe1/0x110 [ 990.634827][ T8763] vfs_write+0x20c/0x580 [ 990.634854][ T8763] ksys_write+0x14f/0x290 [ 990.656766][ T8763] ? __ia32_sys_read+0xb0/0xb0 [ 990.656789][ T8763] ? do_syscall_64+0x26/0x680 [ 990.656807][ T8763] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 990.656829][ T8763] ? do_syscall_64+0x26/0x680 [ 990.675116][ T8763] __x64_sys_write+0x73/0xb0 [ 990.675140][ T8763] do_syscall_64+0xfd/0x680 [ 990.675164][ T8763] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 990.675177][ T8763] RIP: 0033:0x4592c9 18:40:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x6, 0x4000000000000400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) accept4$netrom(r1, &(0x7f0000000100)={{0x3, @netrom}, [@rose, @remote, @remote, @remote, @netrom, @null, @default, @null]}, &(0x7f0000000180)=0x48, 0x800) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 990.675198][ T8763] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 990.686173][ T8763] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 990.686188][ T8763] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 990.686197][ T8763] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 990.686206][ T8763] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 990.686216][ T8763] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 990.686225][ T8763] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 [ 990.827760][ T8763] Bluetooth: Can't register HCI device 18:40:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:07 executing program 4 (fault-call:2 fault-nth:11): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:07 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:07 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(r0, &(0x7f0000000400)) r2 = syz_open_dev$mouse(&(0x7f00000003c0)='/dev/input/mouse#\x00', 0xa, 0x200001) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000280)=@ccm_128={{0x307}, "7822b9b0982527bc", "64eaa2975c98910fa2d26ff2ed60d55b", "731761ca", "1235a05cdcff4247"}, 0x28) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x8}) close(r1) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x310, 0x70bd2a, 0x1, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xe739}}, ["", "", "", "", "", ""]}, 0x24}}, 0x80) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 991.099317][ T8885] FAULT_INJECTION: forcing a failure. [ 991.099317][ T8885] name failslab, interval 1, probability 0, space 0, times 0 [ 991.135616][ T8885] CPU: 1 PID: 8885 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 991.143660][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.154257][ T8885] Call Trace: [ 991.157680][ T8885] dump_stack+0x172/0x1f0 [ 991.162279][ T8885] should_fail.cold+0xa/0x15 [ 991.167031][ T8885] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 991.172861][ T8885] ? ___might_sleep+0x163/0x280 [ 991.177735][ T8885] __should_failslab+0x121/0x190 [ 991.183145][ T8885] should_failslab+0x9/0x14 [ 991.187739][ T8885] kmem_cache_alloc_node+0x261/0x710 [ 991.193044][ T8885] alloc_unbound_pwq+0x4c5/0xcf0 [ 991.198003][ T8885] apply_wqattrs_prepare+0x35e/0x970 [ 991.203394][ T8885] apply_workqueue_attrs_locked+0xcb/0x140 [ 991.209303][ T8885] apply_workqueue_attrs+0x31/0x50 [ 991.214599][ T8885] alloc_workqueue+0x8b9/0xf00 [ 991.219378][ T8885] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 991.225376][ T8885] ? __init_waitqueue_head+0x36/0x90 [ 991.230687][ T8885] hci_register_dev+0x1b8/0x860 [ 991.235934][ T8885] ? hci_init_sysfs+0x7c/0xa0 [ 991.240864][ T8885] __vhci_create_device+0x2d0/0x5a0 [ 991.246097][ T8885] vhci_write+0x2d0/0x470 [ 991.250686][ T8885] new_sync_write+0x4d3/0x770 [ 991.255463][ T8885] ? new_sync_read+0x800/0x800 [ 991.260340][ T8885] ? common_file_perm+0x238/0x720 [ 991.265498][ T8885] ? __fget+0x381/0x550 [ 991.269757][ T8885] ? apparmor_file_permission+0x25/0x30 [ 991.275400][ T8885] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 991.281845][ T8885] ? security_file_permission+0x8f/0x380 [ 991.287491][ T8885] __vfs_write+0xe1/0x110 [ 991.291950][ T8885] vfs_write+0x20c/0x580 [ 991.296204][ T8885] ksys_write+0x14f/0x290 [ 991.300754][ T8885] ? __ia32_sys_read+0xb0/0xb0 [ 991.305714][ T8885] ? do_syscall_64+0x26/0x680 [ 991.310487][ T8885] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 991.316741][ T8885] ? do_syscall_64+0x26/0x680 [ 991.321540][ T8885] __x64_sys_write+0x73/0xb0 [ 991.326141][ T8885] do_syscall_64+0xfd/0x680 [ 991.330759][ T8885] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 991.336660][ T8885] RIP: 0033:0x4592c9 [ 991.340586][ T8885] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 991.360389][ T8885] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 991.369690][ T8885] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 991.377682][ T8885] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 991.385972][ T8885] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 18:40:07 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x9}}, 0x1c) [ 991.393957][ T8885] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 991.402210][ T8885] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:07 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) [ 991.588012][ T8885] Bluetooth: Can't register HCI device 18:40:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:07 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20040, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x27, 0x0, 0x1, 0x0, 0xaf04, 0x7fffffff, "8df3601c657d06a1add24b984794d04a751f2d178b0ea31d8bc09467d7a8c57c412d2b2478b2f31441be04b95c8388bbf56487b7cc62e973585b07e1516e33", 0x2}, 0x60, &(0x7f0000000840)=[{&(0x7f0000000200)="37531695c09a31fec1792fd05682a355804ac0c2fedd3ad8d7ca360f0a45c27259f1bf0994ac71e5fc222991117f19f5278da837c20909fb8fcadb08b7e4326d268de7fbf7bcc61ea6264930dc3b893a8c", 0x51}, {&(0x7f00000003c0)="7db16b3705d580534053cb1e7782ae0e1aac12a8453e41c413e5009b5dc6df796c132714dfeb5e92d7aed6644001d8b4013614df2581d200d15045efb4a92ec3dc5350fc64d24c44d65c7854d7bc254bd27dad55", 0x54}, {&(0x7f0000000440)="11a216f332f53ec8a14edb19f35c866f1211d0953df0c3cc7604359ac3d25f8ae228a3332dbed94fa7506caa904a2bf7a122420781d2f737243dc61f3973c4f2a6b60c0e557e041bac6bf578c5d226979d2174dc65cde523666205026a96769ae6fbd94ddffcc59f55d50963b7904c394235c61a1437022508ea54", 0x7b}, {&(0x7f00000004c0)="5c2a72f12490e79e71c836b15f6ddb81a4b03e5ac9a8c1e43680e656b932821e487a732edea110ede2f1d19e8e185fb0b6c81ca0cf28ea0fe830e0b5f1c8cd0252c6c36676f328fb77c5f51d25ac5ad8fb7ca42bbb53da74469ea3a8f5a7ffffc4", 0x61}, {&(0x7f0000000540)="410747352eaa31c6865f25f3feb220c55ca14b69c1e78d0c2bf775be5266a23a704aadc7c3fae0130ca9e15869a996e3a37f78a984a06ca3f97b88a2f6ea58c6ba7c1ed98d5e30c9fb775deb45b9e6b6d6ab0669b882e645da245e5bf7e2c1133cc8415a90ba0e6ec18dcefa7ed59ce40ae47dd7649d765c2dd4f2b64f217867bc22a1ad062bb059c22168e89c1748b946719474cc0f15740321efc6346ac503c92df1bdfc7e67351678537554706b30f5deec6a262cbe9a39163a3e6b18099962abfa3017702937494b39c7913d4f4a8c30d963", 0xd4}, {&(0x7f0000000640)="6bd08dd9d9df861e9f4424a934d0aa2ebdf0c9a0983961d00928e84c19ba8059a28e0aa87c018d8d2345b17a681d7e61acb2f137c9dacd9d9706af2dd51d29a1ed8da4054b3d2f8f5b4e972d9a4c15653e7763fc4b3ea6a6f5068fc23075d1158c25b4ef209a2dbc7be33edd3f88fd0c80cb0e5b730188c2069c1ebc1fb2426067dddb9ddfbd468a36fcc660af977c5e3a95d78931a73cb81d8c909ffe7fdc8d8b1b16219f759078b2d83ddabca005eb5276", 0xb2}, {&(0x7f0000000700)="25613248fdfa13647a7d30e6f386f3c7727e40ebec73306ec37460821f946b1abed58c070a4b00e9f521bc2d554fec1767fb27783e4a5df085d298b312ffe960d509397d76c778df537dd22e3ab4e1af62783828976b2c9e03594dbccf881e261322bce4b9585bab59d8958298b32bfcc2ab52f5991086bee2", 0x79}, {&(0x7f0000000780)="0f6a8b4d2c40e756cc0695b1e904d51bdf340f80444efb7c38179c10c7efc83006ed55bb1359d05e8438a716cb2ccb560744654f11020c1ce92e8a39f56bef3a387f8deb9c3e5978cebeb324de2ca60227cb0d2059b45c030de454eac9e308e6c603ce9b92de0be7d8482f219625888a320a95db974a772967395863f85fef9935fd6e8b480c731b3250e65f5d0ca9e4cdfec326647d28ecc41bd4a0c2ab462b5d5171398059351697f2dde9f0aab93ba77def63fc7fe8c8", 0xb8}], 0x8, &(0x7f00000008c0)={0x1010, 0x106, 0x9, "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"}, 0x1010, 0x80}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000100)={'vxcan1\x00', 0x7fffffff}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r2, 0x0, 0x0, 0xffff) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:07 executing program 4 (fault-call:2 fault-nth:12): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:07 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 991.957091][ T8932] FAULT_INJECTION: forcing a failure. [ 991.957091][ T8932] name failslab, interval 1, probability 0, space 0, times 0 [ 991.978139][ T8932] CPU: 0 PID: 8932 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 991.986058][ T8932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.986065][ T8932] Call Trace: [ 991.986097][ T8932] dump_stack+0x172/0x1f0 [ 991.986143][ T8932] should_fail.cold+0xa/0x15 [ 992.003850][ T8932] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 992.003876][ T8932] ? ___might_sleep+0x163/0x280 [ 992.003900][ T8932] __should_failslab+0x121/0x190 [ 992.003924][ T8932] should_failslab+0x9/0x14 [ 992.014325][ T8932] __kmalloc+0x2d9/0x740 [ 992.014345][ T8932] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 992.014364][ T8932] ? pwq_adjust_max_active+0x3b6/0x5c0 [ 992.014381][ T8932] ? alloc_workqueue+0x166/0xf00 [ 992.014403][ T8932] alloc_workqueue+0x166/0xf00 [ 992.014428][ T8932] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 992.033332][ T8932] ? __init_waitqueue_head+0x36/0x90 [ 992.033361][ T8932] hci_register_dev+0x209/0x860 [ 992.033390][ T8932] __vhci_create_device+0x2d0/0x5a0 [ 992.033410][ T8932] vhci_write+0x2d0/0x470 [ 992.049605][ T8932] new_sync_write+0x4d3/0x770 [ 992.049625][ T8932] ? new_sync_read+0x800/0x800 [ 992.049652][ T8932] ? common_file_perm+0x238/0x720 [ 992.049666][ T8932] ? __fget+0x381/0x550 [ 992.049687][ T8932] ? apparmor_file_permission+0x25/0x30 [ 992.049707][ T8932] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 992.049723][ T8932] ? security_file_permission+0x8f/0x380 [ 992.049742][ T8932] __vfs_write+0xe1/0x110 [ 992.060221][ T8932] vfs_write+0x20c/0x580 [ 992.060242][ T8932] ksys_write+0x14f/0x290 [ 992.060259][ T8932] ? __ia32_sys_read+0xb0/0xb0 [ 992.060279][ T8932] ? do_syscall_64+0x26/0x680 [ 992.060297][ T8932] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.060312][ T8932] ? do_syscall_64+0x26/0x680 [ 992.060332][ T8932] __x64_sys_write+0x73/0xb0 [ 992.104854][ T8932] do_syscall_64+0xfd/0x680 [ 992.104881][ T8932] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.104893][ T8932] RIP: 0033:0x4592c9 [ 992.104912][ T8932] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 992.104921][ T8932] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 992.116931][ T8932] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 992.116946][ T8932] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 992.116953][ T8932] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 992.116962][ T8932] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 992.116971][ T8932] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 [ 992.128453][ T8932] Bluetooth: Can't register HCI device 18:40:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:08 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e21, 0x0, @remote, 0x6}}}, 0x84) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) r3 = getpid() ptrace$setregs(0xf, r3, 0x200, &(0x7f0000000240)="91e7377b65394498359c73642cdcf48e8fb61c7301d120a7424f50ed2521e9ad7e93be782a7d4c157967555da2bfa4b38f0635a72b7625d888bd15") 18:40:08 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0xa}}, 0x1c) 18:40:08 executing program 4 (fault-call:2 fault-nth:13): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:08 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 992.659424][ T9077] FAULT_INJECTION: forcing a failure. [ 992.659424][ T9077] name failslab, interval 1, probability 0, space 0, times 0 18:40:08 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) [ 992.737650][ T9077] CPU: 1 PID: 9077 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 992.745599][ T9077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.745608][ T9077] Call Trace: [ 992.745641][ T9077] dump_stack+0x172/0x1f0 [ 992.745668][ T9077] should_fail.cold+0xa/0x15 [ 992.745691][ T9077] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 992.745719][ T9077] ? ___might_sleep+0x163/0x280 [ 992.768073][ T9077] __should_failslab+0x121/0x190 [ 992.768095][ T9077] should_failslab+0x9/0x14 [ 992.768109][ T9077] kmem_cache_alloc_trace+0x2ce/0x750 [ 992.768127][ T9077] ? rcu_read_lock_sched_held+0x110/0x130 [ 992.768140][ T9077] ? __kmalloc+0x5d2/0x740 [ 992.768172][ T9077] alloc_workqueue_attrs+0x82/0x120 [ 992.788276][ T9077] alloc_workqueue+0x190/0xf00 [ 992.788300][ T9077] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 992.788324][ T9077] ? __init_waitqueue_head+0x36/0x90 [ 992.788350][ T9077] hci_register_dev+0x209/0x860 [ 992.788376][ T9077] __vhci_create_device+0x2d0/0x5a0 [ 992.788394][ T9077] vhci_write+0x2d0/0x470 [ 992.788417][ T9077] new_sync_write+0x4d3/0x770 [ 992.844582][ T9077] ? new_sync_read+0x800/0x800 [ 992.849468][ T9077] ? common_file_perm+0x238/0x720 [ 992.854517][ T9077] ? __fget+0x381/0x550 [ 992.858690][ T9077] ? apparmor_file_permission+0x25/0x30 [ 992.864250][ T9077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 992.870503][ T9077] ? security_file_permission+0x8f/0x380 [ 992.876159][ T9077] __vfs_write+0xe1/0x110 [ 992.880504][ T9077] vfs_write+0x20c/0x580 [ 992.884753][ T9077] ksys_write+0x14f/0x290 [ 992.889178][ T9077] ? __ia32_sys_read+0xb0/0xb0 [ 992.893948][ T9077] ? do_syscall_64+0x26/0x680 [ 992.899001][ T9077] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.905076][ T9077] ? do_syscall_64+0x26/0x680 [ 992.909821][ T9077] __x64_sys_write+0x73/0xb0 [ 992.914424][ T9077] do_syscall_64+0xfd/0x680 [ 992.919210][ T9077] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.925228][ T9077] RIP: 0033:0x4592c9 [ 992.929132][ T9077] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 992.948923][ T9077] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 992.957352][ T9077] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 992.965446][ T9077] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 992.973699][ T9077] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 992.981698][ T9077] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 992.989853][ T9077] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:09 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r1, 0x20, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x14, 0x13, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhci\x00', 0x7) r3 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x4, 0x101000) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f0000000280), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r4 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000200)={0x9, 0x6, 0x1, 0x7, 'syz0\x00', 0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r2) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RTC_EPOCH_SET(r4, 0x4008700e, 0x7) ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000300)) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) getsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000100)=0x2, &(0x7f0000000140)=0x4) r5 = getpid() write$cgroup_pid(r4, &(0x7f0000000240)=r5, 0x12) [ 993.096777][ T9077] Bluetooth: Can't register HCI device 18:40:09 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) 18:40:09 executing program 4 (fault-call:2 fault-nth:14): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:09 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:09 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) 18:40:09 executing program 1: socket$isdn(0x22, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000100)=0x40) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0xa00, 0x0) [ 993.414871][ T9104] FAULT_INJECTION: forcing a failure. [ 993.414871][ T9104] name failslab, interval 1, probability 0, space 0, times 0 [ 993.524341][ T9104] CPU: 0 PID: 9104 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 993.532296][ T9104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 993.542467][ T9104] Call Trace: [ 993.546502][ T9104] dump_stack+0x172/0x1f0 [ 993.550875][ T9104] should_fail.cold+0xa/0x15 [ 993.555851][ T9104] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 993.561859][ T9104] ? ___might_sleep+0x163/0x280 [ 993.566738][ T9104] __should_failslab+0x121/0x190 [ 993.571706][ T9104] should_failslab+0x9/0x14 [ 993.571723][ T9104] __kmalloc_track_caller+0x2d5/0x740 [ 993.571738][ T9104] ? pointer+0x750/0x750 [ 993.571757][ T9104] ? widen_string+0x2e0/0x2e0 [ 993.571771][ T9104] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 993.571794][ T9104] ? kasprintf+0xbb/0xf0 [ 993.581760][ T9104] kvasprintf+0xc8/0x170 [ 993.581775][ T9104] ? bust_spinlocks+0xe0/0xe0 [ 993.581798][ T9104] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 993.581814][ T9104] ? find_next_bit+0x107/0x130 [ 993.581833][ T9104] kasprintf+0xbb/0xf0 [ 993.581849][ T9104] ? kvasprintf_const+0x190/0x190 [ 993.581874][ T9104] ? kasan_check_read+0x11/0x20 [ 993.581899][ T9104] alloc_workqueue+0x471/0xf00 [ 993.581923][ T9104] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 993.597098][ T9104] ? __init_waitqueue_head+0x36/0x90 [ 993.597127][ T9104] hci_register_dev+0x209/0x860 [ 993.597156][ T9104] __vhci_create_device+0x2d0/0x5a0 [ 993.597177][ T9104] vhci_write+0x2d0/0x470 [ 993.597198][ T9104] new_sync_write+0x4d3/0x770 18:40:09 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) [ 993.616245][ T9104] ? new_sync_read+0x800/0x800 [ 993.616275][ T9104] ? common_file_perm+0x238/0x720 [ 993.616290][ T9104] ? __fget+0x381/0x550 [ 993.616311][ T9104] ? apparmor_file_permission+0x25/0x30 [ 993.616331][ T9104] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 993.616347][ T9104] ? security_file_permission+0x8f/0x380 [ 993.616366][ T9104] __vfs_write+0xe1/0x110 [ 993.616386][ T9104] vfs_write+0x20c/0x580 [ 993.616405][ T9104] ksys_write+0x14f/0x290 [ 993.640233][ T9104] ? __ia32_sys_read+0xb0/0xb0 [ 993.640256][ T9104] ? do_syscall_64+0x26/0x680 [ 993.640275][ T9104] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 993.640290][ T9104] ? do_syscall_64+0x26/0x680 [ 993.640310][ T9104] __x64_sys_write+0x73/0xb0 [ 993.640329][ T9104] do_syscall_64+0xfd/0x680 [ 993.640361][ T9104] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 993.656314][ T9104] RIP: 0033:0x4592c9 18:40:09 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0xb}}, 0x1c) [ 993.656334][ T9104] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 993.665831][ T9104] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 993.675426][ T9104] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 993.675436][ T9104] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 993.675444][ T9104] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 993.675453][ T9104] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 18:40:09 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 993.675462][ T9104] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:10 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:10 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:40:10 executing program 4 (fault-call:2 fault-nth:15): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x82500, 0x0) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f00000003c0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @local}}, [0x994, 0x3, 0x8aca, 0xa50, 0x8, 0x0, 0x18000, 0x14dcce4, 0xac, 0x9e, 0x8, 0x8031, 0x10001, 0x8, 0x1]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000280)={r2, 0x2, 0x7, 0x4800000, 0x401, 0x8}, &(0x7f0000000300)=0x14) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(r1, &(0x7f0000000480)) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 994.241996][ T9236] FAULT_INJECTION: forcing a failure. [ 994.241996][ T9236] name failslab, interval 1, probability 0, space 0, times 0 [ 994.286444][ T9236] CPU: 1 PID: 9236 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 994.294397][ T9236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 994.304662][ T9236] Call Trace: [ 994.308163][ T9236] dump_stack+0x172/0x1f0 [ 994.312524][ T9236] should_fail.cold+0xa/0x15 [ 994.317143][ T9236] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 994.323152][ T9236] ? ___might_sleep+0x163/0x280 [ 994.328030][ T9236] __should_failslab+0x121/0x190 [ 994.333128][ T9236] should_failslab+0x9/0x14 [ 994.337885][ T9236] __kmalloc+0x2d9/0x740 [ 994.342153][ T9236] ? apply_wqattrs_prepare+0xae/0x970 [ 994.347752][ T9236] apply_wqattrs_prepare+0xae/0x970 [ 994.353016][ T9236] apply_workqueue_attrs_locked+0xcb/0x140 [ 994.359028][ T9236] apply_workqueue_attrs+0x31/0x50 [ 994.364169][ T9236] alloc_workqueue+0x8b9/0xf00 [ 994.368963][ T9236] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 994.374844][ T9236] ? __init_waitqueue_head+0x36/0x90 [ 994.380161][ T9236] hci_register_dev+0x209/0x860 [ 994.385139][ T9236] __vhci_create_device+0x2d0/0x5a0 [ 994.390402][ T9236] vhci_write+0x2d0/0x470 [ 994.394754][ T9236] new_sync_write+0x4d3/0x770 [ 994.399567][ T9236] ? new_sync_read+0x800/0x800 [ 994.404448][ T9236] ? common_file_perm+0x238/0x720 [ 994.409497][ T9236] ? __fget+0x381/0x550 [ 994.413681][ T9236] ? apparmor_file_permission+0x25/0x30 [ 994.419330][ T9236] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 994.447526][ T9236] ? security_file_permission+0x8f/0x380 [ 994.453532][ T9236] __vfs_write+0xe1/0x110 [ 994.457871][ T9236] vfs_write+0x20c/0x580 [ 994.462211][ T9236] ksys_write+0x14f/0x290 [ 994.466628][ T9236] ? __ia32_sys_read+0xb0/0xb0 [ 994.471547][ T9236] ? do_syscall_64+0x26/0x680 [ 994.476234][ T9236] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 994.482402][ T9236] ? do_syscall_64+0x26/0x680 [ 994.487131][ T9236] __x64_sys_write+0x73/0xb0 [ 994.491732][ T9236] do_syscall_64+0xfd/0x680 [ 994.496381][ T9236] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 994.502380][ T9236] RIP: 0033:0x4592c9 [ 994.506470][ T9236] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 994.526913][ T9236] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 18:40:10 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) [ 994.535622][ T9236] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 994.543593][ T9236] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 994.551569][ T9236] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 994.559878][ T9236] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 994.567862][ T9236] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:10 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 994.648063][ T9236] Bluetooth: Can't register HCI device 18:40:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:10 executing program 4 (fault-call:2 fault-nth:16): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:10 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x23}}, 0x1c) 18:40:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r2, 0x1}, &(0x7f00000001c0)=0x8) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:11 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:11 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 994.967690][ T9366] FAULT_INJECTION: forcing a failure. [ 994.967690][ T9366] name failslab, interval 1, probability 0, space 0, times 0 [ 995.067823][ T9366] CPU: 0 PID: 9366 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 995.075766][ T9366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 995.085925][ T9366] Call Trace: [ 995.089427][ T9366] dump_stack+0x172/0x1f0 [ 995.093970][ T9366] should_fail.cold+0xa/0x15 [ 995.098593][ T9366] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 995.104512][ T9366] ? ___might_sleep+0x163/0x280 [ 995.109469][ T9366] __should_failslab+0x121/0x190 [ 995.114418][ T9366] should_failslab+0x9/0x14 [ 995.118932][ T9366] kmem_cache_alloc_trace+0x2ce/0x750 [ 995.124325][ T9366] ? rcu_read_lock_sched_held+0x110/0x130 [ 995.130066][ T9366] ? __kmalloc+0x5d2/0x740 [ 995.134517][ T9366] alloc_workqueue_attrs+0x82/0x120 [ 995.140006][ T9366] apply_wqattrs_prepare+0xbb/0x970 [ 995.145236][ T9366] apply_workqueue_attrs_locked+0xcb/0x140 [ 995.151065][ T9366] apply_workqueue_attrs+0x31/0x50 [ 995.156391][ T9366] alloc_workqueue+0x8b9/0xf00 [ 995.161245][ T9366] ? workqueue_sysfs_register+0x3f0/0x3f0 18:40:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) getrlimit(0x7, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000140)={0x9}) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000001c0)={0x30, 0x9, 0xd, 0x9, 0x1, 0x20, 0x3, 0x135}) finit_module(r0, &(0x7f0000000100)='vboxnet1eth0em1\x00', 0x1) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 995.167087][ T9366] ? __init_waitqueue_head+0x36/0x90 [ 995.172533][ T9366] hci_register_dev+0x209/0x860 [ 995.177504][ T9366] __vhci_create_device+0x2d0/0x5a0 [ 995.182699][ T9366] vhci_write+0x2d0/0x470 [ 995.187166][ T9366] new_sync_write+0x4d3/0x770 [ 995.192050][ T9366] ? new_sync_read+0x800/0x800 [ 995.196996][ T9366] ? common_file_perm+0x238/0x720 [ 995.202029][ T9366] ? __fget+0x381/0x550 [ 995.206294][ T9366] ? apparmor_file_permission+0x25/0x30 [ 995.211859][ T9366] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 995.218120][ T9366] ? security_file_permission+0x8f/0x380 [ 995.223779][ T9366] __vfs_write+0xe1/0x110 [ 995.228122][ T9366] vfs_write+0x20c/0x580 [ 995.232388][ T9366] ksys_write+0x14f/0x290 [ 995.236826][ T9366] ? __ia32_sys_read+0xb0/0xb0 [ 995.241694][ T9366] ? do_syscall_64+0x26/0x680 [ 995.246388][ T9366] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 995.252643][ T9366] ? do_syscall_64+0x26/0x680 [ 995.257494][ T9366] __x64_sys_write+0x73/0xb0 [ 995.262191][ T9366] do_syscall_64+0xfd/0x680 18:40:11 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) [ 995.266715][ T9366] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 995.272622][ T9366] RIP: 0033:0x4592c9 [ 995.276620][ T9366] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 995.296338][ T9366] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 995.304769][ T9366] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 18:40:11 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) [ 995.312770][ T9366] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 995.320766][ T9366] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 995.328775][ T9366] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 995.336755][ T9366] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:11 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 995.456099][ T9366] Bluetooth: Can't register HCI device 18:40:11 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:11 executing program 4 (fault-call:2 fault-nth:17): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 995.786615][ T9457] FAULT_INJECTION: forcing a failure. [ 995.786615][ T9457] name failslab, interval 1, probability 0, space 0, times 0 [ 995.807602][ T9457] CPU: 1 PID: 9457 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 995.815705][ T9457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 995.825939][ T9457] Call Trace: [ 995.829258][ T9457] dump_stack+0x172/0x1f0 [ 995.833612][ T9457] should_fail.cold+0xa/0x15 [ 995.838318][ T9457] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 995.844256][ T9457] ? ___might_sleep+0x163/0x280 [ 995.849134][ T9457] __should_failslab+0x121/0x190 [ 995.854089][ T9457] should_failslab+0x9/0x14 [ 995.858601][ T9457] kmem_cache_alloc_trace+0x2ce/0x750 [ 995.863976][ T9457] ? rcu_read_lock_sched_held+0x110/0x130 [ 995.869700][ T9457] ? __kmalloc+0x5d2/0x740 [ 995.874135][ T9457] alloc_workqueue_attrs+0x82/0x120 [ 995.879341][ T9457] apply_wqattrs_prepare+0xc8/0x970 [ 995.884557][ T9457] apply_workqueue_attrs_locked+0xcb/0x140 [ 995.890370][ T9457] apply_workqueue_attrs+0x31/0x50 [ 995.895487][ T9457] alloc_workqueue+0x8b9/0xf00 [ 995.900266][ T9457] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 995.906009][ T9457] ? __init_waitqueue_head+0x36/0x90 [ 995.911463][ T9457] hci_register_dev+0x209/0x860 [ 995.916330][ T9457] __vhci_create_device+0x2d0/0x5a0 [ 995.921536][ T9457] vhci_write+0x2d0/0x470 [ 995.925872][ T9457] new_sync_write+0x4d3/0x770 [ 995.930564][ T9457] ? new_sync_read+0x800/0x800 [ 995.935340][ T9457] ? common_file_perm+0x238/0x720 [ 995.940369][ T9457] ? __fget+0x381/0x550 [ 995.944545][ T9457] ? apparmor_file_permission+0x25/0x30 [ 995.950104][ T9457] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 995.956529][ T9457] ? security_file_permission+0x8f/0x380 [ 995.962353][ T9457] __vfs_write+0xe1/0x110 [ 995.966689][ T9457] vfs_write+0x20c/0x580 [ 995.970935][ T9457] ksys_write+0x14f/0x290 [ 995.975299][ T9457] ? __ia32_sys_read+0xb0/0xb0 [ 995.980070][ T9457] ? do_syscall_64+0x26/0x680 [ 995.984751][ T9457] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 995.990816][ T9457] ? do_syscall_64+0x26/0x680 [ 995.995516][ T9457] __x64_sys_write+0x73/0xb0 [ 996.000114][ T9457] do_syscall_64+0xfd/0x680 [ 996.004630][ T9457] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 996.010520][ T9457] RIP: 0033:0x4592c9 [ 996.014513][ T9457] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 996.034171][ T9457] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 996.042737][ T9457] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 996.050711][ T9457] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 996.058788][ T9457] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 996.066757][ T9457] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 996.074725][ T9457] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:12 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x25}}, 0x1c) 18:40:12 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(r0, &(0x7f0000000140)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:12 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:12 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 996.158407][ T9457] Bluetooth: Can't register HCI device 18:40:12 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:12 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:12 executing program 4 (fault-call:2 fault-nth:18): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:12 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000100)) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) setpriority(0x1, r2, 0x7) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000003c0)=""/4096) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(r0, 0x541c, 0x0) 18:40:12 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 996.622071][ T9548] FAULT_INJECTION: forcing a failure. [ 996.622071][ T9548] name failslab, interval 1, probability 0, space 0, times 0 18:40:12 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) [ 996.714595][ T9548] CPU: 0 PID: 9548 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 996.722890][ T9548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 996.732968][ T9548] Call Trace: [ 996.733003][ T9548] dump_stack+0x172/0x1f0 [ 996.733041][ T9548] should_fail.cold+0xa/0x15 [ 996.745355][ T9548] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 996.751178][ T9548] ? ___might_sleep+0x163/0x280 [ 996.751204][ T9548] __should_failslab+0x121/0x190 [ 996.751225][ T9548] should_failslab+0x9/0x14 [ 996.751239][ T9548] kmem_cache_alloc_node+0x261/0x710 [ 996.751270][ T9548] alloc_unbound_pwq+0x4c5/0xcf0 [ 996.776230][ T9548] apply_wqattrs_prepare+0x35e/0x970 [ 996.781697][ T9548] apply_workqueue_attrs_locked+0xcb/0x140 [ 996.787523][ T9548] apply_workqueue_attrs+0x31/0x50 [ 996.792654][ T9548] alloc_workqueue+0x8b9/0xf00 [ 996.797441][ T9548] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 996.803189][ T9548] ? __init_waitqueue_head+0x36/0x90 [ 996.808598][ T9548] hci_register_dev+0x209/0x860 [ 996.813466][ T9548] __vhci_create_device+0x2d0/0x5a0 [ 996.818760][ T9548] vhci_write+0x2d0/0x470 [ 996.823184][ T9548] new_sync_write+0x4d3/0x770 [ 996.827991][ T9548] ? new_sync_read+0x800/0x800 [ 996.832768][ T9548] ? common_file_perm+0x238/0x720 [ 996.837790][ T9548] ? __fget+0x381/0x550 [ 996.842040][ T9548] ? apparmor_file_permission+0x25/0x30 [ 996.847706][ T9548] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 996.853958][ T9548] ? security_file_permission+0x8f/0x380 [ 996.859685][ T9548] __vfs_write+0xe1/0x110 [ 996.864014][ T9548] vfs_write+0x20c/0x580 [ 996.868353][ T9548] ksys_write+0x14f/0x290 [ 996.872773][ T9548] ? __ia32_sys_read+0xb0/0xb0 [ 996.877541][ T9548] ? do_syscall_64+0x26/0x680 [ 996.882316][ T9548] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 996.888399][ T9548] ? do_syscall_64+0x26/0x680 [ 996.893307][ T9548] __x64_sys_write+0x73/0xb0 [ 996.898026][ T9548] do_syscall_64+0xfd/0x680 [ 996.902537][ T9548] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 996.908426][ T9548] RIP: 0033:0x4592c9 [ 996.912421][ T9548] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 996.932201][ T9548] RSP: 002b:00007fd7c51bbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 996.940619][ T9548] RAX: ffffffffffffffda RBX: 00007fd7c51bbc90 RCX: 00000000004592c9 [ 996.948681][ T9548] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 996.956760][ T9548] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 996.964821][ T9548] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51bc6d4 [ 996.972890][ T9548] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 [ 997.048319][ T9548] Bluetooth: Can't register HCI device 18:40:13 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x26}}, 0x1c) 18:40:13 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000100)={0x7e, 0x3ff, 0x8, 0xb, 0xffffffffffffffff, 0x81}) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:13 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:13 executing program 4 (fault-call:2 fault-nth:19): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 997.310680][ T9675] FAULT_INJECTION: forcing a failure. [ 997.310680][ T9675] name failslab, interval 1, probability 0, space 0, times 0 [ 997.395400][ T9675] CPU: 0 PID: 9675 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 997.404030][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 997.414109][ T9675] Call Trace: [ 997.417608][ T9675] dump_stack+0x172/0x1f0 [ 997.422142][ T9675] should_fail.cold+0xa/0x15 [ 997.426765][ T9675] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 997.432598][ T9675] ? ___might_sleep+0x163/0x280 [ 997.432625][ T9675] __should_failslab+0x121/0x190 [ 997.432645][ T9675] should_failslab+0x9/0x14 [ 997.432661][ T9675] __kmalloc_track_caller+0x2d5/0x740 [ 997.432687][ T9675] ? kstrdup_const+0x66/0x80 [ 997.432709][ T9675] kstrdup+0x3a/0x70 [ 997.442658][ T9675] kstrdup_const+0x66/0x80 [ 997.442678][ T9675] kvasprintf_const+0x10e/0x190 [ 997.442700][ T9675] kobject_set_name_vargs+0x5b/0x150 [ 997.442756][ T9675] dev_set_name+0xbb/0xf0 [ 997.442774][ T9675] ? device_initialize+0x440/0x440 [ 997.442801][ T9675] ? simple_release_fs+0xa1/0xd0 18:40:13 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 997.452838][ T9675] ? start_creating+0x163/0x1e0 [ 997.452867][ T9675] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 997.461696][ T9675] hci_register_dev+0x2e0/0x860 [ 997.461726][ T9675] __vhci_create_device+0x2d0/0x5a0 [ 997.461747][ T9675] vhci_write+0x2d0/0x470 [ 997.461769][ T9675] new_sync_write+0x4d3/0x770 [ 997.471209][ T9675] ? new_sync_read+0x800/0x800 [ 997.471239][ T9675] ? common_file_perm+0x238/0x720 [ 997.471254][ T9675] ? __fget+0x381/0x550 [ 997.471276][ T9675] ? apparmor_file_permission+0x25/0x30 18:40:13 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) [ 997.486268][ T9675] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 997.486287][ T9675] ? security_file_permission+0x8f/0x380 [ 997.486308][ T9675] __vfs_write+0xe1/0x110 [ 997.486328][ T9675] vfs_write+0x20c/0x580 [ 997.486349][ T9675] ksys_write+0x14f/0x290 [ 997.486369][ T9675] ? __ia32_sys_read+0xb0/0xb0 [ 997.496246][ T9675] ? do_syscall_64+0x26/0x680 [ 997.496264][ T9675] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 997.496279][ T9675] ? do_syscall_64+0x26/0x680 [ 997.496301][ T9675] __x64_sys_write+0x73/0xb0 [ 997.496320][ T9675] do_syscall_64+0xfd/0x680 [ 997.496341][ T9675] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 997.496369][ T9675] RIP: 0033:0x4592c9 [ 997.517125][ T9675] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 997.517134][ T9675] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 997.517150][ T9675] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 997.517160][ T9675] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 997.517169][ T9675] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 997.517178][ T9675] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 997.517187][ T9675] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:13 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00'}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:13 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) membarrier(0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 997.979770][ T9675] Bluetooth: Can't register HCI device 18:40:14 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x27}}, 0x1c) 18:40:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x101, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0xfd}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:14 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00'}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:14 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:14 executing program 4 (fault-call:2 fault-nth:20): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 998.362226][ T9824] FAULT_INJECTION: forcing a failure. [ 998.362226][ T9824] name failslab, interval 1, probability 0, space 0, times 0 [ 998.443536][ T9824] CPU: 0 PID: 9824 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 998.451489][ T9824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 998.461646][ T9824] Call Trace: [ 998.464977][ T9824] dump_stack+0x172/0x1f0 [ 998.469424][ T9824] should_fail.cold+0xa/0x15 [ 998.474079][ T9824] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 998.480004][ T9824] ? ___might_sleep+0x163/0x280 [ 998.484883][ T9824] __should_failslab+0x121/0x190 [ 998.490108][ T9824] should_failslab+0x9/0x14 [ 998.494629][ T9824] kmem_cache_alloc+0x2af/0x6f0 [ 998.499503][ T9824] ? lookup_one_len+0x10e/0x1a0 [ 998.504589][ T9824] alloc_inode+0x16f/0x1e0 [ 998.509281][ T9824] new_inode_pseudo+0x19/0xf0 [ 998.514170][ T9824] new_inode+0x1f/0x40 [ 998.518486][ T9824] debugfs_get_inode+0x1a/0x130 [ 998.523354][ T9824] debugfs_create_dir+0x7a/0x3a0 [ 998.528308][ T9824] hci_register_dev+0x299/0x860 [ 998.533256][ T9824] __vhci_create_device+0x2d0/0x5a0 [ 998.538455][ T9824] vhci_write+0x2d0/0x470 [ 998.542976][ T9824] new_sync_write+0x4d3/0x770 [ 998.547911][ T9824] ? new_sync_read+0x800/0x800 [ 998.553087][ T9824] ? common_file_perm+0x238/0x720 [ 998.566990][ T9824] ? __fget+0x381/0x550 [ 998.575474][ T9824] ? apparmor_file_permission+0x25/0x30 [ 998.581028][ T9824] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 998.587271][ T9824] ? security_file_permission+0x8f/0x380 [ 998.592923][ T9824] __vfs_write+0xe1/0x110 [ 998.597377][ T9824] vfs_write+0x20c/0x580 [ 998.601613][ T9824] ksys_write+0x14f/0x290 [ 998.605932][ T9824] ? __ia32_sys_read+0xb0/0xb0 [ 998.610691][ T9824] ? do_syscall_64+0x26/0x680 [ 998.615470][ T9824] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 998.621827][ T9824] ? do_syscall_64+0x26/0x680 [ 998.626494][ T9824] __x64_sys_write+0x73/0xb0 [ 998.631073][ T9824] do_syscall_64+0xfd/0x680 [ 998.635667][ T9824] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 998.641569][ T9824] RIP: 0033:0x4592c9 [ 998.645467][ T9824] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 998.665087][ T9824] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 998.673512][ T9824] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 998.681466][ T9824] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 18:40:14 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00'}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) [ 998.689550][ T9824] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 998.697636][ T9824] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 998.705713][ T9824] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:15 executing program 4 (fault-call:2 fault-nth:21): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x7, 0x400300) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f00000001c0)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000100)=""/32, 0x20}], 0x1, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:15 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:15 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 999.156110][ T9859] FAULT_INJECTION: forcing a failure. [ 999.156110][ T9859] name failslab, interval 1, probability 0, space 0, times 0 [ 999.236416][ T9859] CPU: 0 PID: 9859 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 999.244356][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.254427][ T9859] Call Trace: [ 999.257840][ T9859] dump_stack+0x172/0x1f0 [ 999.262288][ T9859] should_fail.cold+0xa/0x15 [ 999.266897][ T9859] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 999.272729][ T9859] ? ___might_sleep+0x163/0x280 [ 999.272753][ T9859] __should_failslab+0x121/0x190 [ 999.272774][ T9859] should_failslab+0x9/0x14 [ 999.272788][ T9859] __kmalloc_track_caller+0x2d5/0x740 [ 999.272811][ T9859] ? console_unlock+0x689/0xec0 [ 999.297343][ T9859] ? find_held_lock+0x35/0x130 [ 999.302213][ T9859] ? kstrdup_const+0x66/0x80 [ 999.306828][ T9859] kstrdup+0x3a/0x70 [ 999.310757][ T9859] kstrdup_const+0x66/0x80 [ 999.315556][ T9859] __kernfs_new_node+0xb1/0x6c0 [ 999.320544][ T9859] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 999.326107][ T9859] ? debug_smp_processor_id+0x3c/0x280 [ 999.331591][ T9859] ? tick_nohz_tick_stopped+0x1a/0x90 [ 999.336982][ T9859] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 999.343241][ T9859] ? __irq_work_queue_local+0xaf/0x170 [ 999.348799][ T9859] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 999.355048][ T9859] ? irq_work_queue+0x30/0x90 [ 999.359736][ T9859] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 999.359754][ T9859] ? wake_up_klogd+0x99/0xd0 [ 999.359776][ T9859] kernfs_new_node+0x96/0x120 [ 999.359804][ T9859] kernfs_create_dir_ns+0x52/0x160 [ 999.380421][ T9859] sysfs_create_dir_ns+0x131/0x2a0 [ 999.385757][ T9859] ? sysfs_create_mount_point+0xa0/0xa0 [ 999.391330][ T9859] ? class_dir_child_ns_type+0xd/0x60 [ 999.396742][ T9859] kobject_add_internal.cold+0x116/0x662 [ 999.402857][ T9859] kobject_add+0x150/0x1c0 [ 999.407293][ T9859] ? kset_create_and_add+0x1a0/0x1a0 [ 999.412708][ T9859] ? kasan_check_read+0x11/0x20 [ 999.417675][ T9859] ? mutex_unlock+0xd/0x10 [ 999.422083][ T9859] device_add+0x3b7/0x17a0 [ 999.426507][ T9859] ? get_device_parent.isra.0+0x560/0x560 [ 999.432241][ T9859] ? start_creating+0x163/0x1e0 [ 999.437096][ T9859] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 999.443339][ T9859] hci_register_dev+0x2e8/0x860 [ 999.448352][ T9859] __vhci_create_device+0x2d0/0x5a0 [ 999.453553][ T9859] vhci_write+0x2d0/0x470 [ 999.457967][ T9859] new_sync_write+0x4d3/0x770 [ 999.462635][ T9859] ? new_sync_read+0x800/0x800 [ 999.467436][ T9859] ? common_file_perm+0x238/0x720 [ 999.472464][ T9859] ? __fget+0x381/0x550 [ 999.476611][ T9859] ? apparmor_file_permission+0x25/0x30 [ 999.482241][ T9859] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 999.488624][ T9859] ? security_file_permission+0x8f/0x380 [ 999.494252][ T9859] __vfs_write+0xe1/0x110 [ 999.498720][ T9859] vfs_write+0x20c/0x580 [ 999.502959][ T9859] ksys_write+0x14f/0x290 [ 999.507449][ T9859] ? __ia32_sys_read+0xb0/0xb0 [ 999.512210][ T9859] ? do_syscall_64+0x26/0x680 [ 999.516882][ T9859] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 999.523023][ T9859] ? do_syscall_64+0x26/0x680 [ 999.529383][ T9859] __x64_sys_write+0x73/0xb0 [ 999.534132][ T9859] do_syscall_64+0xfd/0x680 [ 999.538667][ T9859] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 999.544580][ T9859] RIP: 0033:0x4592c9 [ 999.548493][ T9859] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 999.568558][ T9859] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 999.576973][ T9859] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 999.585041][ T9859] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 999.593187][ T9859] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 999.601283][ T9859] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 999.609251][ T9859] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:15 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x29}}, 0x1c) 18:40:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:15 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x4000) bind$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:15 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) [ 999.643620][ T9859] kobject_add_internal failed for hci2 (error: -12 parent: bluetooth) [ 999.678885][ T9859] Bluetooth: Can't register HCI device 18:40:15 executing program 4 (fault-call:2 fault-nth:22): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:16 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:16 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 999.995062][ T9986] FAULT_INJECTION: forcing a failure. [ 999.995062][ T9986] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.027452][ T9986] CPU: 0 PID: 9986 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1000.035656][ T9986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1000.045805][ T9986] Call Trace: [ 1000.045837][ T9986] dump_stack+0x172/0x1f0 [ 1000.045865][ T9986] should_fail.cold+0xa/0x15 [ 1000.045889][ T9986] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1000.045916][ T9986] ? ___might_sleep+0x163/0x280 [ 1000.070204][ T9986] __should_failslab+0x121/0x190 [ 1000.075162][ T9986] should_failslab+0x9/0x14 [ 1000.075178][ T9986] kmem_cache_alloc_trace+0x2ce/0x750 [ 1000.075203][ T9986] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1000.085066][ T9986] ? refcount_inc_checked+0x2b/0x70 [ 1000.085089][ T9986] device_add+0xf4f/0x17a0 [ 1000.085121][ T9986] ? device_initialize+0x440/0x440 [ 1000.096749][ T9986] ? get_device_parent.isra.0+0x560/0x560 [ 1000.096766][ T9986] ? up_write+0xbe/0x1e0 [ 1000.096792][ T9986] hci_register_dev+0x2e8/0x860 [ 1000.096819][ T9986] __vhci_create_device+0x2d0/0x5a0 [ 1000.106331][ T9986] vhci_write+0x2d0/0x470 [ 1000.106354][ T9986] new_sync_write+0x4d3/0x770 [ 1000.106371][ T9986] ? new_sync_read+0x800/0x800 [ 1000.106398][ T9986] ? common_file_perm+0x238/0x720 [ 1000.116645][ T9986] ? __fget+0x381/0x550 [ 1000.116680][ T9986] ? apparmor_file_permission+0x25/0x30 [ 1000.116699][ T9986] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1000.116715][ T9986] ? security_file_permission+0x8f/0x380 [ 1000.116734][ T9986] __vfs_write+0xe1/0x110 [ 1000.126960][ T9986] vfs_write+0x20c/0x580 [ 1000.126982][ T9986] ksys_write+0x14f/0x290 [ 1000.127000][ T9986] ? __ia32_sys_read+0xb0/0xb0 [ 1000.127022][ T9986] ? do_syscall_64+0x26/0x680 [ 1000.127052][ T9986] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1000.136208][ T9986] ? do_syscall_64+0x26/0x680 [ 1000.136232][ T9986] __x64_sys_write+0x73/0xb0 [ 1000.136251][ T9986] do_syscall_64+0xfd/0x680 [ 1000.136272][ T9986] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1000.136285][ T9986] RIP: 0033:0x4592c9 [ 1000.136306][ T9986] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1000.146084][ T9986] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1000.146100][ T9986] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 1000.146108][ T9986] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1000.146118][ T9986] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1000.146127][ T9986] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1000.146136][ T9986] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) accept$ax25(r1, &(0x7f0000000100)={{0x3, @rose}, [@default, @bcast, @bcast, @netrom, @netrom, @netrom, @bcast, @null]}, &(0x7f0000000180)=0x48) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x92, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x9}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e21, 0x20, @mcast1, 0x6}, @in6={0xa, 0x4e24, 0x759, @local, 0x8}], 0x64) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f00000001c0)={0x1, {0x0, 0x1c9c380}, 0x10001, 0xf4}) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 1000.211634][ T9986] Bluetooth: Can't register HCI device 18:40:16 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:16 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x2a}}, 0x1c) 18:40:16 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, 0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:16 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:16 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)="4a078cb119a4184d180050b82471158d40af2459d6fae463b0fa7955fd59fda15db9c4a5f184466d7932b35419c010494e761b4da23a96a01997b248d5e1d9ea1d196698f2fcfb7948332550545dd2046c979fdb", 0x54}, {&(0x7f00000001c0)="3e883823cd82147841f677890781d952578c284c2ee9573bd023a17e4a6d30e8b4a7bc454ee71780646b875e29774c9cd0943b417365e47e522e343cea14ca4ce8a4e251fc18e4187fc5c32ca037543e545b5d933aec000b99b627e9acc0aedc00f417b292f763f7a6786f248607e6dab6be04fb04072f0039a978c5b34435ceb68b81fd45ca6b482ee7343a6da275c6022516bbfdcbfcc0b6d6709030298e0bd3db95f25a808a8f84bf7f935594d02a5bbf9b5b60493c2262119508fdda09453d5e886fe0c62619643e78aee5a098eea41c9ca7ec07e088cae0461101dec7d096324f2c", 0xe4}, {&(0x7f00000003c0)="762ab43998c17421bf55b3e3b8e6d18dda1e9c0c5a37c2df0179e8f674fa49066389199bf0a122cc6283861f9c7c50e5c08d18b64d090e28d3c99354a373feaa78258c6ef017b36ba97ee93b1ee400cc0fc8e6ece1391e8bb93b086bc8af1fb4d374012f5265fab7387cd343392882f5295f5d9c2a9629ab8048e1dadd855f11e3d158736e42dcc6f3aa13d03764aa975a59bcdd396bde9c88c56e47e3d409255c312f2f2d6b7a3c7858e2bdf3be08f8d6ce5edbe6308cbd89fbbc30be9440822f9ed238ca291c4385dcd56ed18e3671adbcc1b5d3f01fb3dd1e7af30ed882", 0xdf}, {&(0x7f00000004c0)="de6d255d7ed166103cdefb81afde7b73133bd28fe0bfb386d773828bc7d502dc1a2edbb6f8376435f8962eda021a93a1048ea545121570d0e26df3bd587ae2252629be74dcdb2c1a7a38ae996c5e94a3383df5c79c062f127dff7499d54d861d46dd5b3f8d55954dfb47a8bd340ef4c69ca8bc93514a0cc2169b84f4c5d9b72de24c85d3351a04016e2dbb1c0df1b8400ca00b618ddff5c0b4f611bc3dfa3720d7e6a3ab6f7b020d702d08c6dd9be20672d6bddc72c57b9b66591f1f7c2bfbc6e1", 0xc1}, {&(0x7f00000005c0)="b87b6c1c01b0ba49b888788a656b1a4136c6241d3b33b90ba320789b928a7b1e85cb12e4584f6bab954b1ce6c6bbe58bd8f94379f38701c8f22e17262be53cdbd6fa6a9b2376f7160883433039a4216a934d88f1913924c5ecf70d62a84ea87504a6c1d89c92704e88878bd94caa5f0544040b3fcbeaf0ae64929e522098e439153c712f6b3dcd3cfa7adcf3ba2f26987d21198aa3ea1875bf86c3d31be723955f8aab4caf25ec7c7a5e18676458de3a06", 0xb1}], 0x5}, 0x8000) syz_open_dev$vcsa(&(0x7f0000000700)='/dev/vcsa#\x00', 0x6, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000100)=0x3, 0x4) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r2) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:16 executing program 4 (fault-call:2 fault-nth:23): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:17 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1000.902973][T10124] FAULT_INJECTION: forcing a failure. [ 1000.902973][T10124] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.986071][T10124] CPU: 1 PID: 10124 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1000.994108][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1001.004205][T10124] Call Trace: [ 1001.007532][T10124] dump_stack+0x172/0x1f0 [ 1001.014243][T10124] should_fail.cold+0xa/0x15 [ 1001.018867][T10124] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1001.024901][T10124] ? ___might_sleep+0x163/0x280 [ 1001.029968][T10124] __should_failslab+0x121/0x190 [ 1001.035258][T10124] should_failslab+0x9/0x14 [ 1001.039761][T10124] kmem_cache_alloc+0x2af/0x6f0 [ 1001.044736][T10124] __kernfs_new_node+0xf0/0x6c0 [ 1001.049690][T10124] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1001.055190][T10124] ? debug_smp_processor_id+0x3c/0x280 [ 1001.060680][T10124] ? tick_nohz_tick_stopped+0x1a/0x90 [ 1001.066141][T10124] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1001.072493][T10124] ? __irq_work_queue_local+0xaf/0x170 [ 1001.077970][T10124] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1001.084228][T10124] ? irq_work_queue+0x30/0x90 [ 1001.088920][T10124] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1001.095261][T10124] ? wake_up_klogd+0x99/0xd0 [ 1001.099872][T10124] kernfs_new_node+0x96/0x120 [ 1001.104567][T10124] kernfs_create_dir_ns+0x52/0x160 [ 1001.109700][T10124] sysfs_create_dir_ns+0x131/0x2a0 [ 1001.114830][T10124] ? sysfs_create_mount_point+0xa0/0xa0 [ 1001.120462][T10124] kobject_add_internal.cold+0x116/0x662 [ 1001.126164][T10124] kobject_add+0x150/0x1c0 [ 1001.130592][T10124] ? kset_create_and_add+0x1a0/0x1a0 [ 1001.135891][T10124] ? get_device_parent.isra.0+0x34c/0x560 [ 1001.141624][T10124] ? rcu_read_lock_sched_held+0x110/0x130 [ 1001.147363][T10124] ? kmem_cache_alloc_trace+0x351/0x750 [ 1001.153017][T10124] get_device_parent.isra.0+0x413/0x560 [ 1001.158576][T10124] device_add+0x2df/0x17a0 [ 1001.158598][T10124] ? get_device_parent.isra.0+0x560/0x560 [ 1001.158615][T10124] ? start_creating+0x163/0x1e0 [ 1001.158634][T10124] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1001.158654][T10124] hci_register_dev+0x2e8/0x860 18:40:17 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1001.158679][T10124] __vhci_create_device+0x2d0/0x5a0 [ 1001.158700][T10124] vhci_write+0x2d0/0x470 [ 1001.158718][T10124] new_sync_write+0x4d3/0x770 [ 1001.158735][T10124] ? new_sync_read+0x800/0x800 [ 1001.158760][T10124] ? common_file_perm+0x238/0x720 [ 1001.208997][T10124] ? __fget+0x381/0x550 [ 1001.213181][T10124] ? apparmor_file_permission+0x25/0x30 [ 1001.218759][T10124] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1001.225025][T10124] ? security_file_permission+0x8f/0x380 [ 1001.230861][T10124] __vfs_write+0xe1/0x110 [ 1001.235262][T10124] vfs_write+0x20c/0x580 [ 1001.239514][T10124] ksys_write+0x14f/0x290 [ 1001.243863][T10124] ? __ia32_sys_read+0xb0/0xb0 [ 1001.248646][T10124] ? do_syscall_64+0x26/0x680 [ 1001.253347][T10124] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1001.259523][T10124] ? do_syscall_64+0x26/0x680 [ 1001.264223][T10124] __x64_sys_write+0x73/0xb0 [ 1001.268936][T10124] do_syscall_64+0xfd/0x680 [ 1001.273465][T10124] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1001.279396][T10124] RIP: 0033:0x4592c9 18:40:17 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1001.283318][T10124] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1001.302936][T10124] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1001.311447][T10124] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 1001.319598][T10124] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1001.327724][T10124] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1001.327733][T10124] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1001.327742][T10124] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 [ 1001.337302][T10124] kobject_add_internal failed for bluetooth (error: -12 parent: virtual) 18:40:17 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:17 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 1001.434076][T10124] Bluetooth: Can't register HCI device 18:40:17 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, 0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:17 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x2b}}, 0x1c) 18:40:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) statx(r1, &(0x7f0000000100)='./file0\x00', 0x1100, 0x0, &(0x7f0000000140)) 18:40:17 executing program 4 (fault-call:2 fault-nth:24): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:17 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1001.834683][T10264] FAULT_INJECTION: forcing a failure. [ 1001.834683][T10264] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.848115][T10264] CPU: 0 PID: 10264 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1001.856112][T10264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1001.866179][T10264] Call Trace: [ 1001.869508][T10264] dump_stack+0x172/0x1f0 [ 1001.873863][T10264] should_fail.cold+0xa/0x15 [ 1001.878561][T10264] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1001.884646][T10264] __should_failslab+0x121/0x190 [ 1001.889595][T10264] should_failslab+0x9/0x14 [ 1001.894113][T10264] kmem_cache_alloc+0x47/0x6f0 [ 1001.898890][T10264] ? save_stack+0x5c/0x90 [ 1001.903322][T10264] ? save_stack+0x23/0x90 [ 1001.907658][T10264] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1001.913609][T10264] ? kasan_slab_alloc+0xf/0x20 [ 1001.918385][T10264] radix_tree_node_alloc.constprop.0+0x1eb/0x340 [ 1001.918404][T10264] idr_get_free+0x474/0x890 [ 1001.918429][T10264] idr_alloc_u32+0x19e/0x330 [ 1001.918447][T10264] ? __fprop_inc_percpu_max+0x230/0x230 [ 1001.918469][T10264] ? perf_trace_lock+0x4c0/0x4c0 [ 1001.944325][T10264] idr_alloc_cyclic+0x132/0x270 [ 1001.944346][T10264] ? idr_alloc+0x150/0x150 [ 1001.944374][T10264] __kernfs_new_node+0x172/0x6c0 [ 1001.944394][T10264] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1001.953653][T10264] ? debug_smp_processor_id+0x3c/0x280 [ 1001.953677][T10264] ? tick_nohz_tick_stopped+0x1a/0x90 [ 1001.953697][T10264] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1001.953715][T10264] ? __irq_work_queue_local+0xaf/0x170 [ 1001.953736][T10264] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1001.964247][T10264] ? irq_work_queue+0x30/0x90 [ 1001.964267][T10264] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1001.964285][T10264] ? wake_up_klogd+0x99/0xd0 [ 1001.964308][T10264] kernfs_new_node+0x96/0x120 [ 1001.964329][T10264] kernfs_create_dir_ns+0x52/0x160 [ 1001.975158][T10264] sysfs_create_dir_ns+0x131/0x2a0 [ 1001.975178][T10264] ? sysfs_create_mount_point+0xa0/0xa0 [ 1001.975212][T10264] kobject_add_internal.cold+0x116/0x662 [ 1001.975232][T10264] kobject_add+0x150/0x1c0 [ 1002.040195][T10264] ? kset_create_and_add+0x1a0/0x1a0 [ 1002.045501][T10264] ? get_device_parent.isra.0+0x34c/0x560 [ 1002.051321][T10264] ? rcu_read_lock_sched_held+0x110/0x130 [ 1002.057081][T10264] ? kmem_cache_alloc_trace+0x351/0x750 [ 1002.062656][T10264] get_device_parent.isra.0+0x413/0x560 [ 1002.068224][T10264] device_add+0x2df/0x17a0 [ 1002.072695][T10264] ? get_device_parent.isra.0+0x560/0x560 [ 1002.078653][T10264] ? start_creating+0x163/0x1e0 [ 1002.083525][T10264] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1002.089788][T10264] hci_register_dev+0x2e8/0x860 [ 1002.094662][T10264] __vhci_create_device+0x2d0/0x5a0 [ 1002.099879][T10264] vhci_write+0x2d0/0x470 [ 1002.104235][T10264] new_sync_write+0x4d3/0x770 [ 1002.109020][T10264] ? new_sync_read+0x800/0x800 [ 1002.113801][T10264] ? common_file_perm+0x238/0x720 [ 1002.118833][T10264] ? __fget+0x381/0x550 [ 1002.122998][T10264] ? apparmor_file_permission+0x25/0x30 [ 1002.128566][T10264] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 18:40:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:18 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, 0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1002.134824][T10264] ? security_file_permission+0x8f/0x380 [ 1002.140574][T10264] __vfs_write+0xe1/0x110 [ 1002.144920][T10264] vfs_write+0x20c/0x580 [ 1002.149195][T10264] ksys_write+0x14f/0x290 [ 1002.153537][T10264] ? __ia32_sys_read+0xb0/0xb0 [ 1002.158320][T10264] ? do_syscall_64+0x26/0x680 [ 1002.163026][T10264] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1002.163048][T10264] ? do_syscall_64+0x26/0x680 [ 1002.173789][T10264] __x64_sys_write+0x73/0xb0 [ 1002.178411][T10264] do_syscall_64+0xfd/0x680 [ 1002.182929][T10264] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1002.182951][T10264] RIP: 0033:0x4592c9 [ 1002.182969][T10264] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1002.182979][T10264] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1002.182995][T10264] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 1002.183005][T10264] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1002.183014][T10264] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1002.183023][T10264] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1002.183032][T10264] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 [ 1002.327880][T10268] kobject_add_internal failed for hci2 (error: -2 parent: bluetooth) 18:40:18 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200), 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1002.380147][T10268] Bluetooth: Can't register HCI device 18:40:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:18 executing program 4 (fault-call:2 fault-nth:25): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000140)) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 1002.655366][T10302] FAULT_INJECTION: forcing a failure. [ 1002.655366][T10302] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.679972][T10302] CPU: 1 PID: 10302 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1002.688101][T10302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1002.698168][T10302] Call Trace: [ 1002.701492][T10302] dump_stack+0x172/0x1f0 [ 1002.705847][T10302] should_fail.cold+0xa/0x15 [ 1002.710456][T10302] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1002.710479][T10302] ? ___might_sleep+0x163/0x280 [ 1002.710502][T10302] __should_failslab+0x121/0x190 [ 1002.710523][T10302] should_failslab+0x9/0x14 [ 1002.710537][T10302] __kmalloc_track_caller+0x2d5/0x740 [ 1002.710553][T10302] ? console_unlock+0x689/0xec0 [ 1002.710569][T10302] ? find_held_lock+0x35/0x130 [ 1002.710589][T10302] ? kstrdup_const+0x66/0x80 [ 1002.710609][T10302] kstrdup+0x3a/0x70 [ 1002.754933][T10302] kstrdup_const+0x66/0x80 [ 1002.759467][T10302] __kernfs_new_node+0xb1/0x6c0 [ 1002.764504][T10302] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1002.769983][T10302] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1002.776526][T10302] ? irq_work_claim+0x98/0xc0 [ 1002.781643][T10302] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1002.787895][T10302] ? irq_work_queue+0x30/0x90 [ 1002.792664][T10302] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1002.798908][T10302] ? wake_up_klogd+0x99/0xd0 [ 1002.803524][T10302] kernfs_new_node+0x96/0x120 [ 1002.808512][T10302] kernfs_create_dir_ns+0x52/0x160 [ 1002.813722][T10302] sysfs_create_dir_ns+0x131/0x2a0 [ 1002.819284][T10302] ? sysfs_create_mount_point+0xa0/0xa0 [ 1002.825025][T10302] ? class_dir_child_ns_type+0xd/0x60 [ 1002.830410][T10302] kobject_add_internal.cold+0x116/0x662 [ 1002.836149][T10302] kobject_add+0x150/0x1c0 [ 1002.840888][T10302] ? kset_create_and_add+0x1a0/0x1a0 [ 1002.846419][T10302] ? mutex_unlock+0xd/0x10 [ 1002.850875][T10302] device_add+0x3b7/0x17a0 [ 1002.855304][T10302] ? get_device_parent.isra.0+0x560/0x560 [ 1002.861119][T10302] ? start_creating+0x163/0x1e0 [ 1002.865982][T10302] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1002.872501][T10302] hci_register_dev+0x2e8/0x860 [ 1002.877681][T10302] __vhci_create_device+0x2d0/0x5a0 [ 1002.882959][T10302] vhci_write+0x2d0/0x470 [ 1002.887387][T10302] new_sync_write+0x4d3/0x770 [ 1002.892165][T10302] ? new_sync_read+0x800/0x800 [ 1002.896947][T10302] ? common_file_perm+0x238/0x720 [ 1002.901977][T10302] ? __fget+0x381/0x550 [ 1002.906149][T10302] ? apparmor_file_permission+0x25/0x30 [ 1002.911820][T10302] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1002.918084][T10302] ? security_file_permission+0x8f/0x380 [ 1002.923999][T10302] __vfs_write+0xe1/0x110 [ 1002.928368][T10302] vfs_write+0x20c/0x580 [ 1002.932726][T10302] ksys_write+0x14f/0x290 [ 1002.937346][T10302] ? __ia32_sys_read+0xb0/0xb0 [ 1002.942298][T10302] ? do_syscall_64+0x26/0x680 [ 1002.947086][T10302] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1002.953164][T10302] ? do_syscall_64+0x26/0x680 [ 1002.957870][T10302] __x64_sys_write+0x73/0xb0 [ 1002.962644][T10302] do_syscall_64+0xfd/0x680 [ 1002.967163][T10302] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1002.973364][T10302] RIP: 0033:0x4592c9 [ 1002.977379][T10302] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1002.997449][T10302] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1003.005894][T10302] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 1003.013929][T10302] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1003.022012][T10302] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1003.030253][T10302] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1003.038321][T10302] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:19 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x901}}, 0x1c) 18:40:19 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:19 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:19 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200), 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) [ 1003.130613][T10302] kobject_add_internal failed for hci1 (error: -12 parent: bluetooth) 18:40:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000140)={r2, 0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 1003.257694][T10302] Bluetooth: Can't register HCI device 18:40:19 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:19 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:19 executing program 4 (fault-call:2 fault-nth:26): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:19 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200), 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:19 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, 0x0, 0x0) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1003.687576][T10441] FAULT_INJECTION: forcing a failure. [ 1003.687576][T10441] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.769134][T10441] CPU: 1 PID: 10441 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1003.777202][T10441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.787368][T10441] Call Trace: [ 1003.790721][T10441] dump_stack+0x172/0x1f0 [ 1003.795188][T10441] should_fail.cold+0xa/0x15 [ 1003.800053][T10441] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1003.806510][T10441] ? ___might_sleep+0x163/0x280 [ 1003.811570][T10441] __should_failslab+0x121/0x190 18:40:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000100)={0x1, 0x1, [@random="20a5c90513f3"]}) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 1003.816532][T10441] should_failslab+0x9/0x14 [ 1003.821088][T10441] kmem_cache_alloc+0x2af/0x6f0 [ 1003.826092][T10441] ? mutex_unlock+0xd/0x10 [ 1003.830536][T10441] __kernfs_new_node+0xf0/0x6c0 [ 1003.835408][T10441] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1003.841059][T10441] ? perf_trace_lock_acquire+0xf5/0x530 [ 1003.846874][T10441] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1003.853339][T10441] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 1003.859726][T10441] ? find_held_lock+0x35/0x130 [ 1003.864683][T10441] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 1003.870990][T10441] ? kasan_check_write+0x14/0x20 [ 1003.876125][T10441] kernfs_new_node+0x96/0x120 [ 1003.880825][T10441] kernfs_create_link+0xd7/0x250 [ 1003.885962][T10441] sysfs_do_create_link_sd.isra.0+0x90/0x140 [ 1003.892089][T10441] sysfs_create_link+0x65/0xc0 [ 1003.896966][T10441] device_add+0x635/0x17a0 [ 1003.901409][T10441] ? get_device_parent.isra.0+0x560/0x560 [ 1003.907155][T10441] ? start_creating+0x163/0x1e0 [ 1003.912065][T10441] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1003.918515][T10441] hci_register_dev+0x2e8/0x860 [ 1003.923400][T10441] __vhci_create_device+0x2d0/0x5a0 [ 1003.928882][T10441] vhci_write+0x2d0/0x470 [ 1003.933370][T10441] new_sync_write+0x4d3/0x770 [ 1003.938177][T10441] ? new_sync_read+0x800/0x800 [ 1003.942965][T10441] ? common_file_perm+0x238/0x720 [ 1003.942981][T10441] ? __fget+0x381/0x550 [ 1003.943004][T10441] ? apparmor_file_permission+0x25/0x30 [ 1003.943023][T10441] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1003.943039][T10441] ? security_file_permission+0x8f/0x380 18:40:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 1003.943060][T10441] __vfs_write+0xe1/0x110 [ 1003.943080][T10441] vfs_write+0x20c/0x580 [ 1003.943104][T10441] ksys_write+0x14f/0x290 [ 1003.964049][T10441] ? __ia32_sys_read+0xb0/0xb0 [ 1003.964071][T10441] ? do_syscall_64+0x26/0x680 [ 1003.964090][T10441] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1003.964105][T10441] ? do_syscall_64+0x26/0x680 [ 1003.964127][T10441] __x64_sys_write+0x73/0xb0 [ 1003.964149][T10441] do_syscall_64+0xfd/0x680 [ 1003.978376][T10441] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1003.978391][T10441] RIP: 0033:0x4592c9 [ 1003.978409][T10441] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1003.978418][T10441] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1003.978432][T10441] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 1003.978447][T10441] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1003.978457][T10441] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1003.978466][T10441] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1003.978475][T10441] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 [ 1004.148342][T10441] Bluetooth: Can't register HCI device 18:40:20 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0xff03}}, 0x1c) 18:40:20 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, 0x0, 0x0) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:20 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{0x0}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:20 executing program 4 (fault-call:2 fault-nth:27): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x80000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000140)) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0xffff, 0x2) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000080)={0x2, 0x0, 0x1, 0x3, 0x4}) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) write$apparmor_exec(r2, &(0x7f0000000180)={'stack ', '\x00'}, 0x7) 18:40:20 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, 0x0, 0x0) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1004.519600][T10578] FAULT_INJECTION: forcing a failure. [ 1004.519600][T10578] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.542604][T10578] CPU: 1 PID: 10578 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1004.551470][T10578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1004.565841][T10578] Call Trace: [ 1004.565877][T10578] dump_stack+0x172/0x1f0 [ 1004.565905][T10578] should_fail.cold+0xa/0x15 [ 1004.565927][T10578] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1004.565956][T10578] ? ___might_sleep+0x163/0x280 [ 1004.565992][T10578] __should_failslab+0x121/0x190 [ 1004.593963][T10578] should_failslab+0x9/0x14 [ 1004.598487][T10578] kmem_cache_alloc+0x2af/0x6f0 [ 1004.603358][T10578] ? mutex_unlock+0xd/0x10 [ 1004.607799][T10578] __kernfs_new_node+0xf0/0x6c0 [ 1004.612680][T10578] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1004.618241][T10578] ? perf_trace_lock_acquire+0xf5/0x530 [ 1004.623996][T10578] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1004.630346][T10578] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 1004.636763][T10578] ? find_held_lock+0x35/0x130 [ 1004.641551][T10578] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 1004.647809][T10578] ? kasan_check_write+0x14/0x20 [ 1004.652763][T10578] kernfs_new_node+0x96/0x120 [ 1004.657470][T10578] kernfs_create_link+0xd7/0x250 [ 1004.662428][T10578] sysfs_do_create_link_sd.isra.0+0x90/0x140 [ 1004.668443][T10578] sysfs_create_link+0x65/0xc0 [ 1004.673311][T10578] device_add+0x635/0x17a0 [ 1004.677750][T10578] ? get_device_parent.isra.0+0x560/0x560 [ 1004.683486][T10578] ? start_creating+0x163/0x1e0 [ 1004.688356][T10578] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1004.694921][T10578] hci_register_dev+0x2e8/0x860 [ 1004.699892][T10578] __vhci_create_device+0x2d0/0x5a0 [ 1004.705096][T10578] vhci_write+0x2d0/0x470 [ 1004.709445][T10578] new_sync_write+0x4d3/0x770 [ 1004.714246][T10578] ? new_sync_read+0x800/0x800 [ 1004.719276][T10578] ? common_file_perm+0x238/0x720 [ 1004.724309][T10578] ? __fget+0x381/0x550 [ 1004.728481][T10578] ? apparmor_file_permission+0x25/0x30 [ 1004.734235][T10578] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1004.740788][T10578] ? security_file_permission+0x8f/0x380 [ 1004.746593][T10578] __vfs_write+0xe1/0x110 [ 1004.750941][T10578] vfs_write+0x20c/0x580 [ 1004.755184][T10578] ksys_write+0x14f/0x290 [ 1004.759525][T10578] ? __ia32_sys_read+0xb0/0xb0 [ 1004.764305][T10578] ? do_syscall_64+0x26/0x680 [ 1004.768988][T10578] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1004.775246][T10578] ? do_syscall_64+0x26/0x680 [ 1004.779941][T10578] __x64_sys_write+0x73/0xb0 [ 1004.784546][T10578] do_syscall_64+0xfd/0x680 [ 1004.789059][T10578] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1004.794963][T10578] RIP: 0033:0x4592c9 [ 1004.798867][T10578] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1004.818795][T10578] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1004.827552][T10578] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 1004.835730][T10578] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1004.843725][T10578] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1004.851935][T10578] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1004.860095][T10578] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1004.871036][T10578] Bluetooth: Can't register HCI device 18:40:21 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{0x0}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$KDDELIO(r1, 0x4b35, 0x7) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000100)) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:21 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0xffffff80}}, 0x1c) 18:40:21 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{0x0}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:21 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:21 executing program 4 (fault-call:2 fault-nth:28): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 1005.459488][T10717] FAULT_INJECTION: forcing a failure. [ 1005.459488][T10717] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.496381][T10717] CPU: 0 PID: 10717 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1005.504436][T10717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1005.514697][T10717] Call Trace: [ 1005.518014][T10717] dump_stack+0x172/0x1f0 [ 1005.522365][T10717] should_fail.cold+0xa/0x15 [ 1005.527071][T10717] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1005.533030][T10717] ? ___might_sleep+0x163/0x280 [ 1005.537907][T10717] __should_failslab+0x121/0x190 [ 1005.542862][T10717] should_failslab+0x9/0x14 [ 1005.547457][T10717] kmem_cache_alloc+0x2af/0x6f0 [ 1005.552415][T10717] __kernfs_new_node+0xf0/0x6c0 [ 1005.557271][T10717] ? kernfs_activate+0x192/0x1f0 [ 1005.562222][T10717] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1005.567745][T10717] ? kernfs_activate+0x192/0x1f0 [ 1005.573240][T10717] ? lock_downgrade+0x880/0x880 [ 1005.578115][T10717] ? mutex_trylock+0x1e0/0x1e0 [ 1005.582905][T10717] ? lock_downgrade+0x880/0x880 [ 1005.587781][T10717] kernfs_new_node+0x96/0x120 [ 1005.592572][T10717] kernfs_create_dir_ns+0x52/0x160 [ 1005.597787][T10717] internal_create_group+0x7f4/0xc40 [ 1005.603080][T10717] ? mutex_unlock+0xd/0x10 [ 1005.607585][T10717] ? kernfs_activate+0x192/0x1f0 [ 1005.612574][T10717] ? remove_files.isra.0+0x190/0x190 [ 1005.617869][T10717] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1005.624119][T10717] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1005.630453][T10717] ? kernfs_create_link+0x1cc/0x250 [ 1005.635814][T10717] sysfs_create_group+0x20/0x30 [ 1005.640696][T10717] dpm_sysfs_add+0x87/0x270 [ 1005.645408][T10717] device_add+0x9df/0x17a0 [ 1005.649838][T10717] ? get_device_parent.isra.0+0x560/0x560 [ 1005.655578][T10717] ? start_creating+0x163/0x1e0 [ 1005.660442][T10717] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1005.666694][T10717] hci_register_dev+0x2e8/0x860 [ 1005.671565][T10717] __vhci_create_device+0x2d0/0x5a0 [ 1005.676866][T10717] vhci_write+0x2d0/0x470 [ 1005.681245][T10717] new_sync_write+0x4d3/0x770 [ 1005.685949][T10717] ? new_sync_read+0x800/0x800 [ 1005.690828][T10717] ? common_file_perm+0x238/0x720 [ 1005.695951][T10717] ? __fget+0x381/0x550 [ 1005.700430][T10717] ? apparmor_file_permission+0x25/0x30 [ 1005.706072][T10717] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1005.712325][T10717] ? security_file_permission+0x8f/0x380 [ 1005.718146][T10717] __vfs_write+0xe1/0x110 [ 1005.722493][T10717] vfs_write+0x20c/0x580 [ 1005.726755][T10717] ksys_write+0x14f/0x290 [ 1005.731092][T10717] ? __ia32_sys_read+0xb0/0xb0 [ 1005.735862][T10717] ? do_syscall_64+0x26/0x680 [ 1005.740652][T10717] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1005.746907][T10717] ? do_syscall_64+0x26/0x680 [ 1005.751606][T10717] __x64_sys_write+0x73/0xb0 [ 1005.756203][T10717] do_syscall_64+0xfd/0x680 [ 1005.760908][T10717] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1005.766948][T10717] RIP: 0033:0x4592c9 [ 1005.770856][T10717] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1005.790472][T10717] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1005.799156][T10717] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 18:40:22 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) [ 1005.807232][T10717] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1005.815296][T10717] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1005.823408][T10717] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1005.831536][T10717] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x3, &(0x7f0000000480)=[{&(0x7f0000000180)="13b30fd2c4de345d03e07b54ea48ae281bce2d32637d07699140de0bd2d514651c5d1731f63fbb53de59005b7903f9a3b8d62f3896893f407325a243e66dcbb6cd081ac5185ff3ee2ff8ed7231993638ed56bcdc689020cc138421c7fdb267a07f8f4a18117087cd670ab0694a68d75c1268ef0a160996e47ac0899e500389b4ee19de7aa84662ca29e09e688f9c4c375d58f6b9ad03004573facd7507bbfdec9eed19f7a2ac758c43d367af666b5537387a4545cf5efd", 0xb7, 0x800}, {&(0x7f00000003c0)="b2755f814a20f2f1d5c38f8d6457bf609ea125b6637baa16ebae143080393bdc5686dcf44553db7daa5ece4e7967f3d7836bd51cdf8fb8b7544dc0fad58655ad57814da3902f833d6af5f83d1b3d1a288a2f9a32672469dfa9b20667d064a6c68f7f260c6c6adbf3312d693c296e7f4d0e1c928061ac4f5b13842882b2fba4f1f6f213b48149c1d32d", 0x89, 0x9}, {&(0x7f0000000240)="88a9065cf24650566a0e4860d3d397bd88c47bac8e3cd465637699c2cd6e08280ff4f23889598cca323e8fed8836f3cb3ec52b432f527b4d5a028aea784e8f862ea8d1b08ea2", 0x46, 0x336b}], 0x22001, &(0x7f0000000500)={[{@ikeep='ikeep'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@uid_eq={'uid', 0x3d, r1}}, {@seclabel='seclabel'}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@subj_type={'subj_type', 0x3d, '$user}wlan0\x82'}}, {@obj_user={'obj_user', 0x3d, '/dev/vhci\x00'}}]}) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 1005.986575][T10717] Bluetooth: Can't register HCI device 18:40:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:31 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:31 executing program 4 (fault-call:2 fault-nth:29): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:31 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0xffffffbf}}, 0x1c) 18:40:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x4e20, @local}}) request_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='/dev/input/mouse#\x00', 0xfffffffffffffffa) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0)) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:31 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) [ 1015.338224][T10854] FAULT_INJECTION: forcing a failure. [ 1015.338224][T10854] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.360241][T10854] CPU: 0 PID: 10854 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1015.368465][T10854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1015.378650][T10854] Call Trace: [ 1015.378690][T10854] dump_stack+0x172/0x1f0 [ 1015.378719][T10854] should_fail.cold+0xa/0x15 [ 1015.378741][T10854] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1015.378768][T10854] ? ___might_sleep+0x163/0x280 [ 1015.378796][T10854] __should_failslab+0x121/0x190 [ 1015.378822][T10854] should_failslab+0x9/0x14 [ 1015.378837][T10854] kmem_cache_alloc+0x2af/0x6f0 [ 1015.378868][T10854] __kernfs_new_node+0xf0/0x6c0 [ 1015.378884][T10854] ? kernfs_activate+0x192/0x1f0 [ 1015.378906][T10854] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1015.378922][T10854] ? kernfs_activate+0x192/0x1f0 [ 1015.378961][T10854] ? lock_downgrade+0x880/0x880 [ 1015.386590][T10854] ? mutex_trylock+0x1e0/0x1e0 [ 1015.386608][T10854] ? lock_downgrade+0x880/0x880 [ 1015.386631][T10854] kernfs_new_node+0x96/0x120 [ 1015.386652][T10854] kernfs_create_dir_ns+0x52/0x160 [ 1015.386676][T10854] internal_create_group+0x7f4/0xc40 [ 1015.386695][T10854] ? mutex_unlock+0xd/0x10 [ 1015.386711][T10854] ? kernfs_activate+0x192/0x1f0 [ 1015.386738][T10854] ? remove_files.isra.0+0x190/0x190 [ 1015.401989][T10854] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1015.402010][T10854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1015.402028][T10854] ? kernfs_create_link+0x1cc/0x250 [ 1015.402053][T10854] sysfs_create_group+0x20/0x30 [ 1015.402079][T10854] dpm_sysfs_add+0x87/0x270 [ 1015.416731][T10854] device_add+0x9df/0x17a0 [ 1015.416757][T10854] ? get_device_parent.isra.0+0x560/0x560 [ 1015.416776][T10854] ? start_creating+0x163/0x1e0 [ 1015.416797][T10854] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1015.416821][T10854] hci_register_dev+0x2e8/0x860 [ 1015.416850][T10854] __vhci_create_device+0x2d0/0x5a0 [ 1015.416871][T10854] vhci_write+0x2d0/0x470 [ 1015.426925][T10854] new_sync_write+0x4d3/0x770 [ 1015.426952][T10854] ? new_sync_read+0x800/0x800 [ 1015.426981][T10854] ? common_file_perm+0x238/0x720 [ 1015.426995][T10854] ? __fget+0x381/0x550 [ 1015.427017][T10854] ? apparmor_file_permission+0x25/0x30 18:40:31 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1015.427039][T10854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1015.457602][T10854] ? security_file_permission+0x8f/0x380 [ 1015.457632][T10854] __vfs_write+0xe1/0x110 [ 1015.457652][T10854] vfs_write+0x20c/0x580 [ 1015.457671][T10854] ksys_write+0x14f/0x290 [ 1015.457688][T10854] ? __ia32_sys_read+0xb0/0xb0 [ 1015.457707][T10854] ? do_syscall_64+0x26/0x680 [ 1015.457726][T10854] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1015.457739][T10854] ? do_syscall_64+0x26/0x680 [ 1015.457761][T10854] __x64_sys_write+0x73/0xb0 [ 1015.457780][T10854] do_syscall_64+0xfd/0x680 [ 1015.457800][T10854] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1015.457818][T10854] RIP: 0033:0x4592c9 [ 1015.473167][T10854] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1015.473177][T10854] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 18:40:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 1015.473194][T10854] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 1015.473204][T10854] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1015.473213][T10854] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1015.473221][T10854] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1015.473231][T10854] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 [ 1015.566707][T10854] Bluetooth: Can't register HCI device 18:40:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(r0, &(0x7f0000000640)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x1}) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xb) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:32 executing program 4 (fault-call:2 fault-nth:30): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:32 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 1016.081844][T10876] FAULT_INJECTION: forcing a failure. [ 1016.081844][T10876] name failslab, interval 1, probability 0, space 0, times 0 18:40:32 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xd, 0x20, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000240)={0x9c, 0xfffffffffffffffd}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 1016.168578][T10876] CPU: 0 PID: 10876 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1016.177506][T10876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.187872][T10876] Call Trace: [ 1016.191193][T10876] dump_stack+0x172/0x1f0 [ 1016.195635][T10876] should_fail.cold+0xa/0x15 [ 1016.200241][T10876] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1016.206156][T10876] ? ___might_sleep+0x163/0x280 [ 1016.211402][T10876] __should_failslab+0x121/0x190 [ 1016.216562][T10876] should_failslab+0x9/0x14 [ 1016.221092][T10876] kmem_cache_alloc+0x2af/0x6f0 [ 1016.226319][T10876] __kernfs_new_node+0xf0/0x6c0 [ 1016.231540][T10876] ? kernfs_activate+0x192/0x1f0 [ 1016.237209][T10876] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1016.242839][T10876] ? kernfs_activate+0x192/0x1f0 [ 1016.247816][T10876] ? lock_downgrade+0x880/0x880 [ 1016.253499][T10876] ? mutex_trylock+0x1e0/0x1e0 [ 1016.258662][T10876] ? lock_downgrade+0x880/0x880 [ 1016.258683][T10876] kernfs_new_node+0x96/0x120 [ 1016.258702][T10876] kernfs_create_dir_ns+0x52/0x160 [ 1016.258722][T10876] internal_create_group+0x7f4/0xc40 [ 1016.258740][T10876] ? mutex_unlock+0xd/0x10 [ 1016.258753][T10876] ? kernfs_activate+0x192/0x1f0 [ 1016.258772][T10876] ? remove_files.isra.0+0x190/0x190 [ 1016.258791][T10876] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1016.258809][T10876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1016.258829][T10876] ? kernfs_create_link+0x1cc/0x250 [ 1016.314035][T10876] sysfs_create_group+0x20/0x30 [ 1016.318921][T10876] dpm_sysfs_add+0x87/0x270 [ 1016.323728][T10876] device_add+0x9df/0x17a0 [ 1016.328631][T10876] ? get_device_parent.isra.0+0x560/0x560 [ 1016.336281][T10876] ? start_creating+0x163/0x1e0 [ 1016.341259][T10876] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1016.347802][T10876] hci_register_dev+0x2e8/0x860 [ 1016.352688][T10876] __vhci_create_device+0x2d0/0x5a0 [ 1016.358087][T10876] vhci_write+0x2d0/0x470 [ 1016.362996][T10876] new_sync_write+0x4d3/0x770 [ 1016.368361][T10876] ? new_sync_read+0x800/0x800 [ 1016.373285][T10876] ? common_file_perm+0x238/0x720 [ 1016.379132][T10876] ? __fget+0x381/0x550 [ 1016.383668][T10876] ? apparmor_file_permission+0x25/0x30 [ 1016.389857][T10876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1016.396573][T10876] ? security_file_permission+0x8f/0x380 [ 1016.408356][T10876] __vfs_write+0xe1/0x110 [ 1016.412888][T10876] vfs_write+0x20c/0x580 [ 1016.417181][T10876] ksys_write+0x14f/0x290 [ 1016.421623][T10876] ? __ia32_sys_read+0xb0/0xb0 [ 1016.426844][T10876] ? do_syscall_64+0x26/0x680 [ 1016.431537][T10876] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1016.437955][T10876] ? do_syscall_64+0x26/0x680 [ 1016.443850][T10876] __x64_sys_write+0x73/0xb0 [ 1016.448542][T10876] do_syscall_64+0xfd/0x680 [ 1016.453069][T10876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1016.458975][T10876] RIP: 0033:0x4592c9 18:40:32 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:32 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0xffffffc0}}, 0x1c) [ 1016.463169][T10876] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1016.484561][T10876] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1016.484579][T10876] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 1016.484586][T10876] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1016.484594][T10876] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 18:40:32 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1016.484602][T10876] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1016.484610][T10876] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:32 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) r2 = fcntl$getown(r0, 0x9) rt_sigqueueinfo(r2, 0x23, &(0x7f0000000100)={0xf, 0xe8e, 0xffffffffffffffe1}) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 1016.776339][T10876] Bluetooth: Can't register HCI device 18:40:33 executing program 4 (fault-call:2 fault-nth:31): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 1017.102453][T11022] FAULT_INJECTION: forcing a failure. [ 1017.102453][T11022] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.125280][T11022] CPU: 1 PID: 11022 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1017.133823][T11022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1017.144067][T11022] Call Trace: [ 1017.144102][T11022] dump_stack+0x172/0x1f0 18:40:33 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(0x0, 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1017.144132][T11022] should_fail.cold+0xa/0x15 [ 1017.144156][T11022] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1017.162566][T11022] ? ___might_sleep+0x163/0x280 [ 1017.167543][T11022] __should_failslab+0x121/0x190 [ 1017.172593][T11022] should_failslab+0x9/0x14 [ 1017.172611][T11022] kmem_cache_alloc+0x2af/0x6f0 [ 1017.172630][T11022] ? lock_downgrade+0x880/0x880 [ 1017.172644][T11022] ? kasan_check_read+0x11/0x20 [ 1017.172667][T11022] __kernfs_new_node+0xf0/0x6c0 [ 1017.172688][T11022] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1017.172711][T11022] ? wait_for_completion+0x440/0x440 [ 1017.172736][T11022] ? mutex_unlock+0xd/0x10 [ 1017.187380][T11022] ? kernfs_activate+0x192/0x1f0 [ 1017.187400][T11022] kernfs_new_node+0x96/0x120 [ 1017.187421][T11022] __kernfs_create_file+0x51/0x340 [ 1017.197306][T11022] sysfs_add_file_mode_ns+0x222/0x560 [ 1017.197334][T11022] sysfs_merge_group+0x1a0/0x340 [ 1017.197355][T11022] ? sysfs_init_fs_context+0x370/0x370 [ 1017.197374][T11022] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1017.197390][T11022] ? kernfs_create_link+0x1cc/0x250 [ 1017.197417][T11022] dpm_sysfs_add+0x21e/0x270 [ 1017.197447][T11022] device_add+0x9df/0x17a0 [ 1017.210054][T11022] ? get_device_parent.isra.0+0x560/0x560 [ 1017.210074][T11022] ? start_creating+0x163/0x1e0 [ 1017.210096][T11022] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1017.210118][T11022] hci_register_dev+0x2e8/0x860 [ 1017.210153][T11022] __vhci_create_device+0x2d0/0x5a0 [ 1017.219811][T11022] vhci_write+0x2d0/0x470 18:40:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0xffffffff, 0x242) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x400, 0x4) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000180)=""/161) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 1017.219834][T11022] new_sync_write+0x4d3/0x770 [ 1017.219853][T11022] ? new_sync_read+0x800/0x800 [ 1017.219881][T11022] ? common_file_perm+0x238/0x720 [ 1017.219896][T11022] ? __fget+0x381/0x550 [ 1017.219928][T11022] ? apparmor_file_permission+0x25/0x30 [ 1017.304475][T11022] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1017.304494][T11022] ? security_file_permission+0x8f/0x380 [ 1017.304516][T11022] __vfs_write+0xe1/0x110 [ 1017.304539][T11022] vfs_write+0x20c/0x580 [ 1017.324215][T11022] ksys_write+0x14f/0x290 [ 1017.324235][T11022] ? __ia32_sys_read+0xb0/0xb0 [ 1017.324256][T11022] ? do_syscall_64+0x26/0x680 [ 1017.324275][T11022] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1017.324290][T11022] ? do_syscall_64+0x26/0x680 [ 1017.324318][T11022] __x64_sys_write+0x73/0xb0 [ 1017.336391][T11022] do_syscall_64+0xfd/0x680 [ 1017.336415][T11022] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1017.336440][T11022] RIP: 0033:0x4592c9 [ 1017.345008][T11022] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1017.384507][T11022] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1017.384524][T11022] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 1017.384533][T11022] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1017.384554][T11022] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1017.432813][T11022] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1017.432824][T11022] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:33 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0xfffffffb}}, 0x1c) 18:40:33 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(0x0, 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1017.595606][T11022] Bluetooth: Can't register HCI device 18:40:33 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, 0xffffffffffffffff) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:33 executing program 4 (fault-call:2 fault-nth:32): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x46, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) recvmsg(r1, &(0x7f0000000280)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/126, 0x7e}], 0x1, &(0x7f0000000240)=""/47, 0x2f}, 0x12063) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(r1, 0x541c, 0x0) 18:40:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 1018.022708][T11159] FAULT_INJECTION: forcing a failure. [ 1018.022708][T11159] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.061244][T11159] CPU: 0 PID: 11159 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1018.069265][T11159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1018.079333][T11159] Call Trace: [ 1018.079371][T11159] dump_stack+0x172/0x1f0 [ 1018.079400][T11159] should_fail.cold+0xa/0x15 [ 1018.079422][T11159] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1018.079449][T11159] ? ___might_sleep+0x163/0x280 [ 1018.079478][T11159] __should_failslab+0x121/0x190 [ 1018.079503][T11159] should_failslab+0x9/0x14 [ 1018.079519][T11159] kmem_cache_alloc+0x2af/0x6f0 [ 1018.079541][T11159] ? lock_downgrade+0x880/0x880 [ 1018.079557][T11159] ? kasan_check_read+0x11/0x20 [ 1018.079584][T11159] __kernfs_new_node+0xf0/0x6c0 [ 1018.079608][T11159] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1018.079633][T11159] ? wait_for_completion+0x440/0x440 [ 1018.079655][T11159] ? core_id_show+0x80/0xe0 [ 1018.079680][T11159] ? mutex_unlock+0xd/0x10 [ 1018.079698][T11159] ? kernfs_activate+0x192/0x1f0 [ 1018.079724][T11159] kernfs_new_node+0x96/0x120 [ 1018.107606][T11159] __kernfs_create_file+0x51/0x340 18:40:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(0x0, 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1018.107631][T11159] sysfs_add_file_mode_ns+0x222/0x560 [ 1018.107656][T11159] sysfs_merge_group+0x1a0/0x340 [ 1018.107673][T11159] ? sysfs_init_fs_context+0x370/0x370 [ 1018.107693][T11159] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1018.107709][T11159] ? kernfs_create_link+0x1cc/0x250 [ 1018.107734][T11159] dpm_sysfs_add+0x21e/0x270 [ 1018.107754][T11159] device_add+0x9df/0x17a0 [ 1018.107776][T11159] ? get_device_parent.isra.0+0x560/0x560 [ 1018.107801][T11159] ? start_creating+0x163/0x1e0 [ 1018.137431][T11159] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1018.137455][T11159] hci_register_dev+0x2e8/0x860 [ 1018.137483][T11159] __vhci_create_device+0x2d0/0x5a0 [ 1018.137502][T11159] vhci_write+0x2d0/0x470 [ 1018.137522][T11159] new_sync_write+0x4d3/0x770 [ 1018.137539][T11159] ? new_sync_read+0x800/0x800 [ 1018.137567][T11159] ? common_file_perm+0x238/0x720 [ 1018.137581][T11159] ? __fget+0x381/0x550 [ 1018.137602][T11159] ? apparmor_file_permission+0x25/0x30 [ 1018.137618][T11159] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1018.137634][T11159] ? security_file_permission+0x8f/0x380 [ 1018.137652][T11159] __vfs_write+0xe1/0x110 [ 1018.137693][T11159] vfs_write+0x20c/0x580 [ 1018.147479][T11159] ksys_write+0x14f/0x290 [ 1018.147499][T11159] ? __ia32_sys_read+0xb0/0xb0 [ 1018.147523][T11159] ? do_syscall_64+0x26/0x680 [ 1018.147541][T11159] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1018.147554][T11159] ? do_syscall_64+0x26/0x680 [ 1018.147574][T11159] __x64_sys_write+0x73/0xb0 [ 1018.147591][T11159] do_syscall_64+0xfd/0x680 [ 1018.147610][T11159] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1018.147623][T11159] RIP: 0033:0x4592c9 [ 1018.147642][T11159] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1018.147650][T11159] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1018.147666][T11159] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 1018.147675][T11159] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1018.147684][T11159] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1018.147694][T11159] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1018.147703][T11159] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 [ 1018.435778][T11159] Bluetooth: Can't register HCI device 18:40:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) sendto$llc(r1, &(0x7f0000000100)="7600b97ce5a693311ec69c5fd074a89de49a8e150bf41db3818080b0fd6090713e76471c43863a07a48925412cb019728a1b276c247ee1cdf790688fd3660df3d9f455b20014af7706abd72bfa9e8a726c1935d6fffeee8f1962286ba7ddef9a14317678da568318b5ae2677a5a0cce338579e28d2486cc0aa1a1bd44a9cf2e7c93c16942c681833b07ab6e3b839a005868b94a57cb9d8c9ed520c4ed273", 0x9e, 0x4040, &(0x7f00000001c0)={0x1a, 0xffff, 0xb57d, 0x2075, 0x5, 0x8, @dev={[], 0x16}}, 0x10) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:34 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, 0xffffffffffffffff) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:34 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) 18:40:34 executing program 4 (fault-call:2 fault-nth:33): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:35 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1018.823409][T11285] FAULT_INJECTION: forcing a failure. [ 1018.823409][T11285] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.892621][T11285] CPU: 1 PID: 11285 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1018.900732][T11285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1018.900741][T11285] Call Trace: [ 1018.900773][T11285] dump_stack+0x172/0x1f0 [ 1018.900800][T11285] should_fail.cold+0xa/0x15 [ 1018.900824][T11285] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1018.900851][T11285] ? ___might_sleep+0x163/0x280 [ 1018.900884][T11285] __should_failslab+0x121/0x190 [ 1018.914418][T11285] should_failslab+0x9/0x14 [ 1018.929552][T11285] kmem_cache_alloc_trace+0x2ce/0x750 [ 1018.929569][T11285] ? kasan_check_write+0x14/0x20 [ 1018.929588][T11285] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1018.929604][T11285] ? device_pm_check_callbacks+0x112/0x3f0 [ 1018.929632][T11285] kobject_uevent_env+0x387/0x101d [ 1018.970785][T11285] kobject_uevent+0x20/0x26 [ 1018.975486][T11285] device_add+0xad8/0x17a0 [ 1018.979931][T11285] ? get_device_parent.isra.0+0x560/0x560 [ 1018.985658][T11285] ? start_creating+0x163/0x1e0 [ 1018.990521][T11285] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1018.996781][T11285] hci_register_dev+0x2e8/0x860 [ 1019.001662][T11285] __vhci_create_device+0x2d0/0x5a0 [ 1019.006884][T11285] vhci_write+0x2d0/0x470 [ 1019.011273][T11285] new_sync_write+0x4d3/0x770 [ 1019.015978][T11285] ? new_sync_read+0x800/0x800 [ 1019.020774][T11285] ? common_file_perm+0x238/0x720 [ 1019.025818][T11285] ? __fget+0x381/0x550 [ 1019.030020][T11285] ? apparmor_file_permission+0x25/0x30 [ 1019.035618][T11285] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1019.041881][T11285] ? security_file_permission+0x8f/0x380 [ 1019.047525][T11285] __vfs_write+0xe1/0x110 [ 1019.051870][T11285] vfs_write+0x20c/0x580 [ 1019.056129][T11285] ksys_write+0x14f/0x290 [ 1019.060652][T11285] ? __ia32_sys_read+0xb0/0xb0 [ 1019.065466][T11285] ? do_syscall_64+0x26/0x680 [ 1019.070242][T11285] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1019.076333][T11285] ? do_syscall_64+0x26/0x680 [ 1019.081024][T11285] __x64_sys_write+0x73/0xb0 [ 1019.085713][T11285] do_syscall_64+0xfd/0x680 [ 1019.090228][T11285] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1019.096119][T11285] RIP: 0033:0x4592c9 [ 1019.100187][T11285] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1019.119916][T11285] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1019.128341][T11285] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 18:40:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 1019.136324][T11285] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1019.144303][T11285] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1019.152282][T11285] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1019.160268][T11285] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x100, 0x0) 18:40:35 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x3}, 0x1c) 18:40:35 executing program 4 (fault-call:2 fault-nth:34): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:35 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:35 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, 0xffffffffffffffff) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:35 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c) 18:40:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 1019.827613][T11516] FAULT_INJECTION: forcing a failure. [ 1019.827613][T11516] name failslab, interval 1, probability 0, space 0, times 0 18:40:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f0000000140), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 1019.914844][T11516] CPU: 1 PID: 11516 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1019.922884][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1019.933135][T11516] Call Trace: [ 1019.936479][T11516] dump_stack+0x172/0x1f0 [ 1019.940856][T11516] should_fail.cold+0xa/0x15 [ 1019.945500][T11516] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1019.951335][T11516] ? ___might_sleep+0x163/0x280 [ 1019.956219][T11516] __should_failslab+0x121/0x190 [ 1019.961189][T11516] should_failslab+0x9/0x14 [ 1019.965753][T11516] kmem_cache_alloc+0x2af/0x6f0 [ 1019.970632][T11516] ? lock_downgrade+0x880/0x880 [ 1019.970646][T11516] ? kasan_check_read+0x11/0x20 [ 1019.970666][T11516] __kernfs_new_node+0xf0/0x6c0 [ 1019.970683][T11516] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1019.970706][T11516] ? wait_for_completion+0x440/0x440 [ 1019.970726][T11516] ? ip6mr_sk_done+0x2d0/0x3b0 [ 1019.970747][T11516] ? mutex_unlock+0xd/0x10 [ 1020.005706][T11516] ? kernfs_activate+0x192/0x1f0 [ 1020.010678][T11516] kernfs_new_node+0x96/0x120 [ 1020.015477][T11516] __kernfs_create_file+0x51/0x340 [ 1020.020644][T11516] sysfs_add_file_mode_ns+0x222/0x560 [ 1020.026167][T11516] sysfs_merge_group+0x1a0/0x340 [ 1020.031143][T11516] ? sysfs_init_fs_context+0x370/0x370 [ 1020.036888][T11516] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1020.043246][T11516] ? kernfs_create_link+0x1cc/0x250 [ 1020.048499][T11516] dpm_sysfs_add+0x21e/0x270 [ 1020.053219][T11516] device_add+0x9df/0x17a0 [ 1020.057686][T11516] ? get_device_parent.isra.0+0x560/0x560 [ 1020.063644][T11516] ? start_creating+0x163/0x1e0 [ 1020.068534][T11516] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1020.074900][T11516] hci_register_dev+0x2e8/0x860 [ 1020.079831][T11516] __vhci_create_device+0x2d0/0x5a0 [ 1020.085062][T11516] vhci_write+0x2d0/0x470 [ 1020.089427][T11516] new_sync_write+0x4d3/0x770 [ 1020.094137][T11516] ? new_sync_read+0x800/0x800 [ 1020.094167][T11516] ? common_file_perm+0x238/0x720 [ 1020.094183][T11516] ? __fget+0x381/0x550 [ 1020.094204][T11516] ? apparmor_file_permission+0x25/0x30 [ 1020.094232][T11516] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1020.108194][T11516] ? security_file_permission+0x8f/0x380 [ 1020.108216][T11516] __vfs_write+0xe1/0x110 [ 1020.108234][T11516] vfs_write+0x20c/0x580 [ 1020.108255][T11516] ksys_write+0x14f/0x290 [ 1020.108273][T11516] ? __ia32_sys_read+0xb0/0xb0 [ 1020.108295][T11516] ? do_syscall_64+0x26/0x680 [ 1020.108314][T11516] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1020.108329][T11516] ? do_syscall_64+0x26/0x680 [ 1020.108349][T11516] __x64_sys_write+0x73/0xb0 [ 1020.108367][T11516] do_syscall_64+0xfd/0x680 [ 1020.108397][T11516] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1020.120190][T11516] RIP: 0033:0x4592c9 [ 1020.120208][T11516] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1020.120217][T11516] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 18:40:36 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) [ 1020.120233][T11516] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 1020.120241][T11516] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1020.120249][T11516] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1020.120258][T11516] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1020.120266][T11516] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 [ 1020.253667][T11516] Bluetooth: Can't register HCI device 18:40:36 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:36 executing program 4 (fault-call:2 fault-nth:35): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:36 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x6}, 0x1c) 18:40:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1f) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 1020.531998][T11746] FAULT_INJECTION: forcing a failure. [ 1020.531998][T11746] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.609521][T11746] CPU: 0 PID: 11746 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1020.617858][T11746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1020.628026][T11746] Call Trace: [ 1020.631355][T11746] dump_stack+0x172/0x1f0 [ 1020.635808][T11746] should_fail.cold+0xa/0x15 [ 1020.640557][T11746] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1020.646400][T11746] ? ___might_sleep+0x163/0x280 [ 1020.651417][T11746] __should_failslab+0x121/0x190 [ 1020.656397][T11746] should_failslab+0x9/0x14 [ 1020.660975][T11746] kmem_cache_alloc+0x2af/0x6f0 [ 1020.665854][T11746] ? lock_downgrade+0x880/0x880 [ 1020.671080][T11746] ? kasan_check_read+0x11/0x20 [ 1020.676175][T11746] __kernfs_new_node+0xf0/0x6c0 [ 1020.681058][T11746] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1020.686556][T11746] ? wait_for_completion+0x440/0x440 [ 1020.691999][T11746] ? mutex_unlock+0xd/0x10 [ 1020.696721][T11746] ? kernfs_activate+0x192/0x1f0 [ 1020.701803][T11746] kernfs_new_node+0x96/0x120 [ 1020.706503][T11746] __kernfs_create_file+0x51/0x340 [ 1020.711643][T11746] sysfs_add_file_mode_ns+0x222/0x560 [ 1020.717258][T11746] sysfs_merge_group+0x1a0/0x340 [ 1020.722438][T11746] ? sysfs_init_fs_context+0x370/0x370 [ 1020.727943][T11746] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1020.734217][T11746] ? kernfs_create_link+0x1cc/0x250 [ 1020.739462][T11746] dpm_sysfs_add+0x21e/0x270 [ 1020.744075][T11746] device_add+0x9df/0x17a0 [ 1020.744097][T11746] ? get_device_parent.isra.0+0x560/0x560 [ 1020.744114][T11746] ? start_creating+0x163/0x1e0 [ 1020.744135][T11746] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1020.744158][T11746] hci_register_dev+0x2e8/0x860 [ 1020.744187][T11746] __vhci_create_device+0x2d0/0x5a0 [ 1020.744208][T11746] vhci_write+0x2d0/0x470 [ 1020.744229][T11746] new_sync_write+0x4d3/0x770 [ 1020.744251][T11746] ? new_sync_read+0x800/0x800 [ 1020.790538][T11746] ? common_file_perm+0x238/0x720 [ 1020.795670][T11746] ? __fget+0x381/0x550 [ 1020.795692][T11746] ? apparmor_file_permission+0x25/0x30 18:40:36 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x7}, 0x1c) [ 1020.795711][T11746] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1020.795726][T11746] ? security_file_permission+0x8f/0x380 [ 1020.795747][T11746] __vfs_write+0xe1/0x110 [ 1020.795766][T11746] vfs_write+0x20c/0x580 [ 1020.795788][T11746] ksys_write+0x14f/0x290 [ 1020.795806][T11746] ? __ia32_sys_read+0xb0/0xb0 [ 1020.795827][T11746] ? do_syscall_64+0x26/0x680 [ 1020.795846][T11746] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1020.795861][T11746] ? do_syscall_64+0x26/0x680 [ 1020.795884][T11746] __x64_sys_write+0x73/0xb0 18:40:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1020.846360][T11746] do_syscall_64+0xfd/0x680 [ 1020.846385][T11746] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1020.846398][T11746] RIP: 0033:0x4592c9 [ 1020.846416][T11746] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1020.846425][T11746] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1020.846439][T11746] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 1020.846448][T11746] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1020.846458][T11746] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1020.846467][T11746] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1020.846476][T11746] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:37 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) dup2(r0, r1) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1021.066975][T11746] Bluetooth: Can't register HCI device 18:40:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000100)={0x1, 0x4, 0x2, 0x2, 0x1ff, "8d6a31e7f6307e70817498cf996fa9a45c533d", 0x8000, 0xffffffffffffffff}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:37 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) 18:40:37 executing program 4 (fault-call:2 fault-nth:36): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 1021.456183][T11987] FAULT_INJECTION: forcing a failure. [ 1021.456183][T11987] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1021.470018][T11987] CPU: 1 PID: 11987 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1021.478188][T11987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.488271][T11987] Call Trace: [ 1021.491604][T11987] dump_stack+0x172/0x1f0 [ 1021.495983][T11987] should_fail.cold+0xa/0x15 [ 1021.500716][T11987] ? console_unlock+0x781/0xec0 [ 1021.505608][T11987] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1021.511446][T11987] ? mark_held_locks+0xf0/0xf0 [ 1021.511465][T11987] should_fail_alloc_page+0x50/0x60 [ 1021.511480][T11987] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1021.511493][T11987] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1021.511511][T11987] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1021.511523][T11987] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1021.511546][T11987] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1021.511568][T11987] cache_grow_begin+0x9d/0x650 [ 1021.556203][T11987] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1021.562603][T11987] kmem_cache_alloc_trace+0x67c/0x750 [ 1021.568011][T11987] ? kasan_check_write+0x14/0x20 [ 1021.573071][T11987] kobject_uevent_env+0x387/0x101d [ 1021.578218][T11987] kobject_uevent+0x20/0x26 [ 1021.582832][T11987] device_add+0xad8/0x17a0 [ 1021.587400][T11987] ? get_device_parent.isra.0+0x560/0x560 [ 1021.593154][T11987] ? start_creating+0x163/0x1e0 [ 1021.598165][T11987] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1021.604453][T11987] hci_register_dev+0x2e8/0x860 [ 1021.609426][T11987] __vhci_create_device+0x2d0/0x5a0 [ 1021.614660][T11987] vhci_write+0x2d0/0x470 [ 1021.619011][T11987] new_sync_write+0x4d3/0x770 [ 1021.623808][T11987] ? new_sync_read+0x800/0x800 [ 1021.628608][T11987] ? common_file_perm+0x238/0x720 [ 1021.633645][T11987] ? __fget+0x381/0x550 [ 1021.637820][T11987] ? apparmor_file_permission+0x25/0x30 [ 1021.643565][T11987] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1021.649811][T11987] ? security_file_permission+0x8f/0x380 18:40:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) [ 1021.655468][T11987] __vfs_write+0xe1/0x110 [ 1021.659901][T11987] vfs_write+0x20c/0x580 [ 1021.664257][T11987] ksys_write+0x14f/0x290 [ 1021.668829][T11987] ? __ia32_sys_read+0xb0/0xb0 [ 1021.673626][T11987] ? do_syscall_64+0x26/0x680 [ 1021.678321][T11987] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1021.684402][T11987] ? do_syscall_64+0x26/0x680 [ 1021.684427][T11987] __x64_sys_write+0x73/0xb0 [ 1021.693709][T11987] do_syscall_64+0xfd/0x680 [ 1021.698313][T11987] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1021.704387][T11987] RIP: 0033:0x4592c9 [ 1021.708307][T11987] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1021.728157][T11987] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1021.736595][T11987] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 1021.744589][T11987] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 18:40:37 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x9}, 0x1c) [ 1021.752594][T11987] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1021.760588][T11987] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1021.768582][T11987] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:37 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(r0, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:38 executing program 4 (fault-call:2 fault-nth:37): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:38 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) dup2(r0, r1) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:40:38 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0xa}, 0x1c) 18:40:38 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x80000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r0, 0x0, 0x12, &(0x7f0000000100)='/dev/input/mouse#\x00', 0xffffffffffffffff}, 0x30) syz_open_procfs(r5, &(0x7f0000000180)='net/dev\x00') close(r1) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 1022.302685][T12217] FAULT_INJECTION: forcing a failure. [ 1022.302685][T12217] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.386058][T12217] CPU: 0 PID: 12217 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1022.394102][T12217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.410683][T12217] Call Trace: [ 1022.414015][T12217] dump_stack+0x172/0x1f0 [ 1022.418382][T12217] should_fail.cold+0xa/0x15 [ 1022.424093][T12217] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1022.437151][T12217] ? ___might_sleep+0x163/0x280 [ 1022.442137][T12217] __should_failslab+0x121/0x190 [ 1022.447156][T12217] should_failslab+0x9/0x14 [ 1022.451689][T12217] kmem_cache_alloc_node_trace+0x26d/0x720 [ 1022.457543][T12217] __kmalloc_node_track_caller+0x3d/0x70 [ 1022.463327][T12217] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1022.468751][T12217] __alloc_skb+0x10b/0x5e0 [ 1022.473215][T12217] ? skb_trim+0x190/0x190 [ 1022.477705][T12217] ? kasan_check_read+0x11/0x20 18:40:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 1022.482725][T12217] alloc_uevent_skb+0x83/0x1e2 [ 1022.487526][T12217] kobject_uevent_env+0xaa3/0x101d [ 1022.492677][T12217] kobject_uevent+0x20/0x26 [ 1022.497284][T12217] device_add+0xad8/0x17a0 [ 1022.501735][T12217] ? get_device_parent.isra.0+0x560/0x560 [ 1022.507491][T12217] ? start_creating+0x163/0x1e0 [ 1022.512372][T12217] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1022.518641][T12217] hci_register_dev+0x2e8/0x860 [ 1022.523672][T12217] __vhci_create_device+0x2d0/0x5a0 [ 1022.528900][T12217] vhci_write+0x2d0/0x470 [ 1022.533253][T12217] new_sync_write+0x4d3/0x770 [ 1022.537962][T12217] ? new_sync_read+0x800/0x800 [ 1022.542891][T12217] ? common_file_perm+0x238/0x720 [ 1022.548022][T12217] ? __fget+0x381/0x550 [ 1022.552202][T12217] ? apparmor_file_permission+0x25/0x30 [ 1022.557861][T12217] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1022.564121][T12217] ? security_file_permission+0x8f/0x380 [ 1022.570032][T12217] __vfs_write+0xe1/0x110 [ 1022.574384][T12217] vfs_write+0x20c/0x580 [ 1022.578743][T12217] ksys_write+0x14f/0x290 [ 1022.583086][T12217] ? __ia32_sys_read+0xb0/0xb0 [ 1022.587866][T12217] ? do_syscall_64+0x26/0x680 [ 1022.592557][T12217] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1022.598643][T12217] ? do_syscall_64+0x26/0x680 [ 1022.603475][T12217] __x64_sys_write+0x73/0xb0 [ 1022.608260][T12217] do_syscall_64+0xfd/0x680 [ 1022.612873][T12217] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1022.618777][T12217] RIP: 0033:0x4592c9 18:40:38 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0xe}, 0x1c) [ 1022.622685][T12217] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1022.642619][T12217] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1022.651046][T12217] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 1022.659125][T12217] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1022.667465][T12217] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1022.675446][T12217] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1022.683507][T12217] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:40:39 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x15}, 0x1c) 18:40:39 executing program 4 (fault-call:2 fault-nth:38): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x2000) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:39 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) dup2(r0, r1) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) [ 1023.109337][T12453] FAULT_INJECTION: forcing a failure. [ 1023.109337][T12453] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1023.122800][T12453] CPU: 0 PID: 12453 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1023.130799][T12453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.140882][T12453] Call Trace: [ 1023.144228][T12453] dump_stack+0x172/0x1f0 [ 1023.148733][T12453] should_fail.cold+0xa/0x15 [ 1023.153357][T12453] ? console_unlock+0x781/0xec0 [ 1023.158281][T12453] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1023.164145][T12453] ? mark_held_locks+0xf0/0xf0 [ 1023.168964][T12453] should_fail_alloc_page+0x50/0x60 [ 1023.174221][T12453] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1023.179752][T12453] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1023.185633][T12453] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1023.191381][T12453] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1023.191411][T12453] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1023.191434][T12453] cache_grow_begin+0x9d/0x650 [ 1023.191455][T12453] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1023.191475][T12453] kmem_cache_alloc_trace+0x67c/0x750 [ 1023.191501][T12453] ? kasan_check_write+0x14/0x20 [ 1023.224634][T12453] kobject_uevent_env+0x387/0x101d [ 1023.229819][T12453] kobject_uevent+0x20/0x26 [ 1023.229840][T12453] device_add+0xad8/0x17a0 [ 1023.229862][T12453] ? get_device_parent.isra.0+0x560/0x560 [ 1023.229879][T12453] ? start_creating+0x163/0x1e0 [ 1023.229898][T12453] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1023.229918][T12453] hci_register_dev+0x2e8/0x860 [ 1023.229952][T12453] __vhci_create_device+0x2d0/0x5a0 [ 1023.229974][T12453] vhci_write+0x2d0/0x470 [ 1023.229994][T12453] new_sync_write+0x4d3/0x770 [ 1023.230010][T12453] ? new_sync_read+0x800/0x800 [ 1023.230034][T12453] ? common_file_perm+0x238/0x720 [ 1023.230048][T12453] ? __fget+0x381/0x550 [ 1023.230070][T12453] ? apparmor_file_permission+0x25/0x30 [ 1023.230086][T12453] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1023.230101][T12453] ? security_file_permission+0x8f/0x380 [ 1023.230121][T12453] __vfs_write+0xe1/0x110 [ 1023.230141][T12453] vfs_write+0x20c/0x580 [ 1023.230166][T12453] ksys_write+0x14f/0x290 [ 1023.270451][T12453] ? __ia32_sys_read+0xb0/0xb0 [ 1023.270472][T12453] ? do_syscall_64+0x26/0x680 [ 1023.270489][T12453] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1023.270502][T12453] ? do_syscall_64+0x26/0x680 [ 1023.270522][T12453] __x64_sys_write+0x73/0xb0 [ 1023.270541][T12453] do_syscall_64+0xfd/0x680 [ 1023.270560][T12453] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1023.270572][T12453] RIP: 0033:0x4592c9 [ 1023.270596][T12453] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1023.307105][T12453] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1023.307123][T12453] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 1023.307130][T12453] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1023.307139][T12453] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1023.307148][T12453] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1023.307157][T12453] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:39 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x58}, 0x1c) 18:40:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:39 executing program 4 (fault-call:2 fault-nth:39): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:39 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 1023.841164][T12677] FAULT_INJECTION: forcing a failure. [ 1023.841164][T12677] name failslab, interval 1, probability 0, space 0, times 0 18:40:40 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x5c}, 0x1c) 18:40:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100)=0xfffffffffffffffe, 0x4) [ 1023.937510][T12677] CPU: 0 PID: 12677 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1023.945626][T12677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.955801][T12677] Call Trace: [ 1023.959151][T12677] dump_stack+0x172/0x1f0 [ 1023.963524][T12677] should_fail.cold+0xa/0x15 [ 1023.968314][T12677] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1023.974142][T12677] ? ___might_sleep+0x163/0x280 [ 1023.979190][T12677] __should_failslab+0x121/0x190 [ 1023.984157][T12677] should_failslab+0x9/0x14 [ 1023.988707][T12677] kmem_cache_alloc_node_trace+0x26d/0x720 [ 1023.994553][T12677] __kmalloc_node_track_caller+0x3d/0x70 [ 1024.000400][T12677] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1024.005790][T12677] __alloc_skb+0x10b/0x5e0 [ 1024.010303][T12677] ? skb_trim+0x190/0x190 [ 1024.014657][T12677] ? kasan_check_read+0x11/0x20 [ 1024.019610][T12677] alloc_uevent_skb+0x83/0x1e2 [ 1024.024384][T12677] kobject_uevent_env+0xaa3/0x101d [ 1024.029604][T12677] kobject_uevent+0x20/0x26 [ 1024.034123][T12677] device_add+0xad8/0x17a0 [ 1024.038674][T12677] ? get_device_parent.isra.0+0x560/0x560 [ 1024.044407][T12677] ? start_creating+0x163/0x1e0 [ 1024.049281][T12677] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1024.055543][T12677] hci_register_dev+0x2e8/0x860 [ 1024.060606][T12677] __vhci_create_device+0x2d0/0x5a0 [ 1024.065835][T12677] vhci_write+0x2d0/0x470 [ 1024.070181][T12677] new_sync_write+0x4d3/0x770 [ 1024.075113][T12677] ? new_sync_read+0x800/0x800 [ 1024.080009][T12677] ? common_file_perm+0x238/0x720 [ 1024.085151][T12677] ? __fget+0x381/0x550 [ 1024.089324][T12677] ? apparmor_file_permission+0x25/0x30 [ 1024.094921][T12677] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1024.101197][T12677] ? security_file_permission+0x8f/0x380 [ 1024.106962][T12677] __vfs_write+0xe1/0x110 [ 1024.111327][T12677] vfs_write+0x20c/0x580 [ 1024.115590][T12677] ksys_write+0x14f/0x290 [ 1024.120038][T12677] ? __ia32_sys_read+0xb0/0xb0 [ 1024.124822][T12677] ? do_syscall_64+0x26/0x680 [ 1024.129541][T12677] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1024.135885][T12677] ? do_syscall_64+0x26/0x680 [ 1024.140713][T12677] __x64_sys_write+0x73/0xb0 [ 1024.145321][T12677] do_syscall_64+0xfd/0x680 [ 1024.149843][T12677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1024.155785][T12677] RIP: 0033:0x4592c9 [ 1024.159693][T12677] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1024.179631][T12677] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 18:40:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1024.188069][T12677] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 1024.196097][T12677] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1024.204356][T12677] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1024.212366][T12677] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1024.220358][T12677] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:40 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x0, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x70, 0x2, 0x8, 0xfff, 0xfff, 0x0, 0x1, 0x40000, 0x9, 0x1, 0x20, 0x3, 0x1f, 0x4, 0x9, 0x100000001, 0x9, 0x0, 0x3, 0x1000, 0x0, 0x3, 0x7fffffff, 0x4, 0xf9, 0xde5, 0xb2b, 0x7f, 0x9, 0x6, 0x4, 0x6, 0x2, 0x1, 0x8, 0x280, 0x7fff, 0x0, 0x7fffffff, 0x6, @perf_config_ext={0x3, 0x9}, 0x110, 0x57c55536, 0x7, 0x7, 0x88, 0x80000000, 0x8}, r1, 0xf, 0xffffffffffffffff, 0x2) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000180)={0x8, 0x120, 0xfa00, {0x2, {0x5, 0x1, "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", 0x87, 0x78, 0x7, 0x2, 0x14dfd32e, 0xffffffffffffff99, 0x7, 0x1}, r2}}, 0x128) 18:40:40 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x60}, 0x1c) 18:40:40 executing program 4 (fault-call:2 fault-nth:40): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:41 executing program 1: r0 = socket(0x17, 0x80000, 0xfff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e20, 0x6, @mcast1, 0x3}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @multicast2}], 0x5c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f0000000200), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x37}) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000240)) 18:40:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:41 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0xfc}, 0x1c) 18:40:41 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1025.204231][T12927] FAULT_INJECTION: forcing a failure. [ 1025.204231][T12927] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.275610][T12927] CPU: 1 PID: 12927 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1025.286245][T12927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1025.297778][T12927] Call Trace: [ 1025.301642][T12927] dump_stack+0x172/0x1f0 [ 1025.306670][T12927] should_fail.cold+0xa/0x15 [ 1025.311932][T12927] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1025.318584][T12927] ? ___might_sleep+0x163/0x280 [ 1025.324268][T12927] __should_failslab+0x121/0x190 [ 1025.330008][T12927] should_failslab+0x9/0x14 [ 1025.334942][T12927] kmem_cache_alloc+0x2af/0x6f0 [ 1025.340441][T12927] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 1025.347916][T12927] ? lock_downgrade+0x880/0x880 [ 1025.353873][T12927] skb_clone+0x154/0x3d0 [ 1025.359073][T12927] netlink_broadcast_filtered+0x86e/0xb20 [ 1025.365140][T12927] netlink_broadcast+0x3a/0x50 [ 1025.371092][T12927] kobject_uevent_env+0xad4/0x101d [ 1025.377745][T12927] kobject_uevent+0x20/0x26 [ 1025.382575][T12927] device_add+0xad8/0x17a0 [ 1025.388273][T12927] ? get_device_parent.isra.0+0x560/0x560 [ 1025.396169][T12927] ? start_creating+0x163/0x1e0 [ 1025.401421][T12927] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1025.408331][T12927] hci_register_dev+0x2e8/0x860 [ 1025.414002][T12927] __vhci_create_device+0x2d0/0x5a0 [ 1025.420964][T12927] vhci_write+0x2d0/0x470 [ 1025.426101][T12927] new_sync_write+0x4d3/0x770 [ 1025.431941][T12927] ? new_sync_read+0x800/0x800 [ 1025.437754][T12927] ? common_file_perm+0x238/0x720 [ 1025.443274][T12927] ? __fget+0x381/0x550 [ 1025.447991][T12927] ? apparmor_file_permission+0x25/0x30 [ 1025.454389][T12927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1025.461024][T12927] ? security_file_permission+0x8f/0x380 [ 1025.467163][T12927] __vfs_write+0xe1/0x110 [ 1025.472932][T12927] vfs_write+0x20c/0x580 [ 1025.477794][T12927] ksys_write+0x14f/0x290 [ 1025.482630][T12927] ? __ia32_sys_read+0xb0/0xb0 [ 1025.488708][T12927] ? do_syscall_64+0x26/0x680 [ 1025.494743][T12927] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1025.502197][T12927] ? do_syscall_64+0x26/0x680 [ 1025.507380][T12927] __x64_sys_write+0x73/0xb0 [ 1025.512378][T12927] do_syscall_64+0xfd/0x680 [ 1025.517404][T12927] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1025.524573][T12927] RIP: 0033:0x4592c9 [ 1025.529104][T12927] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1025.558342][T12927] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1025.567866][T12927] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 18:40:41 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) mq_open(&(0x7f0000000100)='/dev/vhci\x00', 0x2, 0x0, &(0x7f0000000140)={0xff, 0x2, 0xda9a, 0x80000000, 0x800, 0x0, 0x6, 0x2}) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r0, 0x0, 0x0, 0xe3) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:41 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x1f4}, 0x1c) [ 1025.576541][T12927] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1025.585404][T12927] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1025.595190][T12927] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1025.603764][T12927] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:41 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x0, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:41 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:41 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x300}, 0x1c) 18:40:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:42 executing program 4 (fault-call:2 fault-nth:41): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x4}}, 0x10) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 1025.961526][T13200] FAULT_INJECTION: forcing a failure. [ 1025.961526][T13200] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.998050][T13200] CPU: 1 PID: 13200 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1026.007439][T13200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.007448][T13200] Call Trace: [ 1026.007485][T13200] dump_stack+0x172/0x1f0 [ 1026.007511][T13200] should_fail.cold+0xa/0x15 [ 1026.007533][T13200] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1026.007560][T13200] ? ___might_sleep+0x163/0x280 [ 1026.007589][T13200] __should_failslab+0x121/0x190 [ 1026.007614][T13200] should_failslab+0x9/0x14 [ 1026.007642][T13200] kmem_cache_alloc_node_trace+0x26d/0x720 [ 1026.061775][T13200] __kmalloc_node_track_caller+0x3d/0x70 [ 1026.061806][T13200] ? led_trigger_unregister+0x2f0/0x2f0 [ 1026.061827][T13200] __devres_alloc_node+0x69/0x160 [ 1026.061845][T13200] devm_led_trigger_register+0x36/0xd0 [ 1026.061873][T13200] hci_leds_init+0xee/0x1c0 [ 1026.061893][T13200] hci_register_dev+0x30c/0x860 [ 1026.061919][T13200] __vhci_create_device+0x2d0/0x5a0 [ 1026.061939][T13200] vhci_write+0x2d0/0x470 18:40:42 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x3e8}, 0x1c) [ 1026.061961][T13200] new_sync_write+0x4d3/0x770 [ 1026.061979][T13200] ? new_sync_read+0x800/0x800 [ 1026.062005][T13200] ? common_file_perm+0x238/0x720 [ 1026.085826][T13200] ? __fget+0x381/0x550 [ 1026.085853][T13200] ? apparmor_file_permission+0x25/0x30 [ 1026.085873][T13200] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1026.085889][T13200] ? security_file_permission+0x8f/0x380 [ 1026.085911][T13200] __vfs_write+0xe1/0x110 [ 1026.085930][T13200] vfs_write+0x20c/0x580 [ 1026.085959][T13200] ksys_write+0x14f/0x290 [ 1026.107017][T13200] ? __ia32_sys_read+0xb0/0xb0 [ 1026.107040][T13200] ? do_syscall_64+0x26/0x680 [ 1026.107058][T13200] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1026.107073][T13200] ? do_syscall_64+0x26/0x680 [ 1026.107097][T13200] __x64_sys_write+0x73/0xb0 [ 1026.135961][T13200] do_syscall_64+0xfd/0x680 [ 1026.135985][T13200] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1026.135998][T13200] RIP: 0033:0x4592c9 [ 1026.136017][T13200] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1026.136026][T13200] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1026.136041][T13200] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 1026.136050][T13200] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 18:40:42 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x500}, 0x1c) [ 1026.136058][T13200] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1026.136067][T13200] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1026.136076][T13200] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:42 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000100)=[0x1, 0x2], 0x2) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000140)) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:42 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x600}, 0x1c) 18:40:42 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x0, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:42 executing program 4 (fault-call:2 fault-nth:42): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:42 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) 18:40:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) bind$vsock_dgram(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 1026.854961][T13498] FAULT_INJECTION: forcing a failure. [ 1026.854961][T13498] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.917488][T13498] CPU: 1 PID: 13498 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1026.926558][T13498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.937805][T13498] Call Trace: [ 1026.941655][T13498] dump_stack+0x172/0x1f0 [ 1026.946506][T13498] should_fail.cold+0xa/0x15 [ 1026.951715][T13498] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1026.958019][T13498] ? ___might_sleep+0x163/0x280 [ 1026.963554][T13498] __should_failslab+0x121/0x190 [ 1026.969272][T13498] should_failslab+0x9/0x14 [ 1026.974600][T13498] kmem_cache_alloc_node_trace+0x26d/0x720 [ 1026.981234][T13498] ? refcount_dec_and_test_checked+0x1b/0x20 [ 1026.988544][T13498] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1026.995180][T13498] ? kobject_put+0x84/0xe0 [ 1027.000201][T13498] __kmalloc_node_track_caller+0x3d/0x70 [ 1027.006309][T13498] devm_kmalloc+0x92/0x1a0 [ 1027.011294][T13498] hci_leds_init+0x32/0x1c0 [ 1027.016179][T13498] hci_register_dev+0x30c/0x860 [ 1027.021514][T13498] __vhci_create_device+0x2d0/0x5a0 [ 1027.027484][T13498] vhci_write+0x2d0/0x470 [ 1027.032730][T13498] new_sync_write+0x4d3/0x770 [ 1027.037893][T13498] ? new_sync_read+0x800/0x800 [ 1027.042900][T13498] ? common_file_perm+0x238/0x720 [ 1027.048657][T13498] ? __fget+0x381/0x550 [ 1027.053387][T13498] ? apparmor_file_permission+0x25/0x30 [ 1027.059158][T13498] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1027.066257][T13498] ? security_file_permission+0x8f/0x380 [ 1027.072300][T13498] __vfs_write+0xe1/0x110 [ 1027.077414][T13498] vfs_write+0x20c/0x580 [ 1027.082246][T13498] ksys_write+0x14f/0x290 [ 1027.087211][T13498] ? __ia32_sys_read+0xb0/0xb0 [ 1027.093364][T13498] ? do_syscall_64+0x26/0x680 [ 1027.098556][T13498] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1027.105693][T13498] ? do_syscall_64+0x26/0x680 [ 1027.110827][T13498] __x64_sys_write+0x73/0xb0 [ 1027.116660][T13498] do_syscall_64+0xfd/0x680 [ 1027.122529][T13498] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1027.129086][T13498] RIP: 0033:0x4592c9 [ 1027.134421][T13498] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1027.155809][T13498] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 18:40:43 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x700}, 0x1c) [ 1027.164871][T13498] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 1027.173652][T13498] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1027.182707][T13498] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1027.191235][T13498] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1027.199781][T13498] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:43 executing program 4 (fault-call:2 fault-nth:43): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000540)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x1) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) connect$packet(r1, &(0x7f0000000200)={0x11, 0x11, r2, 0x1, 0x40}, 0x14) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:43 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) 18:40:43 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x900}, 0x1c) [ 1027.500959][T13709] FAULT_INJECTION: forcing a failure. [ 1027.500959][T13709] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.551177][T13709] CPU: 0 PID: 13709 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1027.559750][T13709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1027.570851][T13709] Call Trace: [ 1027.574587][T13709] dump_stack+0x172/0x1f0 [ 1027.579814][T13709] should_fail.cold+0xa/0x15 [ 1027.585440][T13709] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1027.594001][T13709] ? ___might_sleep+0x163/0x280 [ 1027.600328][T13709] __should_failslab+0x121/0x190 [ 1027.607669][T13709] should_failslab+0x9/0x14 [ 1027.612852][T13709] kmem_cache_alloc_node_trace+0x26d/0x720 [ 1027.619965][T13709] ? refcount_dec_and_test_checked+0x1b/0x20 [ 1027.627026][T13709] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1027.633971][T13709] ? kobject_put+0x84/0xe0 [ 1027.639665][T13709] __kmalloc_node_track_caller+0x3d/0x70 [ 1027.646016][T13709] devm_kmalloc+0x92/0x1a0 [ 1027.650842][T13709] hci_leds_init+0x32/0x1c0 [ 1027.655743][T13709] hci_register_dev+0x30c/0x860 [ 1027.661270][T13709] __vhci_create_device+0x2d0/0x5a0 [ 1027.666974][T13709] vhci_write+0x2d0/0x470 [ 1027.672158][T13709] new_sync_write+0x4d3/0x770 [ 1027.677555][T13709] ? new_sync_read+0x800/0x800 [ 1027.683570][T13709] ? common_file_perm+0x238/0x720 [ 1027.689163][T13709] ? __fget+0x381/0x550 [ 1027.694483][T13709] ? apparmor_file_permission+0x25/0x30 [ 1027.701059][T13709] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1027.707866][T13709] ? security_file_permission+0x8f/0x380 [ 1027.714197][T13709] __vfs_write+0xe1/0x110 [ 1027.719262][T13709] vfs_write+0x20c/0x580 [ 1027.724551][T13709] ksys_write+0x14f/0x290 [ 1027.729451][T13709] ? __ia32_sys_read+0xb0/0xb0 [ 1027.734872][T13709] ? do_syscall_64+0x26/0x680 [ 1027.740633][T13709] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1027.746965][T13709] ? do_syscall_64+0x26/0x680 [ 1027.752313][T13709] __x64_sys_write+0x73/0xb0 [ 1027.757235][T13709] do_syscall_64+0xfd/0x680 [ 1027.762062][T13709] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1027.768701][T13709] RIP: 0033:0x4592c9 [ 1027.773156][T13709] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1027.796465][T13709] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1027.806424][T13709] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 1027.815363][T13709] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1027.823703][T13709] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1027.832383][T13709] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1027.840889][T13709] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(r0, &(0x7f0000000180)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) close(r1) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0xa) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:44 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, 0x0) 18:40:44 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(0xffffffffffffffff) 18:40:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:44 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0xa00}, 0x1c) 18:40:44 executing program 4 (fault-call:2 fault-nth:44): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:44 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") write(r0, &(0x7f000018efdc)="2400000032001f0014f9f407000904000a00071008000100feffffff0800000000000000", 0x24) 18:40:44 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0xe00}, 0x1c) [ 1028.310221][T13943] FAULT_INJECTION: forcing a failure. [ 1028.310221][T13943] name failslab, interval 1, probability 0, space 0, times 0 18:40:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) socket$kcm(0x29, 0x2, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0xc43, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, r2, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x70000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x435ef3f0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3eef}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x0) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 1028.363503][T13945] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1028.390188][T13943] CPU: 0 PID: 13943 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1028.399747][T13943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1028.417827][T13943] Call Trace: [ 1028.421546][T13943] dump_stack+0x172/0x1f0 [ 1028.426862][T13943] should_fail.cold+0xa/0x15 [ 1028.432081][T13943] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1028.439557][T13943] ? ___might_sleep+0x163/0x280 [ 1028.445230][T13943] __should_failslab+0x121/0x190 [ 1028.450991][T13943] should_failslab+0x9/0x14 [ 1028.456778][T13943] __kmalloc_track_caller+0x2d5/0x740 [ 1028.463201][T13943] ? pointer+0x750/0x750 [ 1028.468644][T13943] ? kvasprintf_const+0x65/0x190 [ 1028.474986][T13943] kvasprintf+0xc8/0x170 [ 1028.480283][T13943] ? bust_spinlocks+0xe0/0xe0 [ 1028.480306][T13943] ? __mutex_lock+0x3cd/0x1310 [ 1028.480347][T13943] ? rfkill_register+0x3a/0xb50 [ 1028.480366][T13943] kvasprintf_const+0x65/0x190 [ 1028.480384][T13943] kobject_set_name_vargs+0x5b/0x150 [ 1028.480402][T13943] dev_set_name+0xbb/0xf0 [ 1028.480417][T13943] ? device_initialize+0x440/0x440 [ 1028.480433][T13943] ? lockdep_init_map+0x1be/0x6d0 [ 1028.480453][T13943] ? __init_waitqueue_head+0x36/0x90 [ 1028.480475][T13943] rfkill_register+0xf0/0xb50 [ 1028.502980][T13943] hci_register_dev+0x369/0x860 [ 1028.503007][T13943] __vhci_create_device+0x2d0/0x5a0 [ 1028.503032][T13943] vhci_write+0x2d0/0x470 [ 1028.557428][T13943] new_sync_write+0x4d3/0x770 [ 1028.562857][T13943] ? new_sync_read+0x800/0x800 [ 1028.569245][T13943] ? common_file_perm+0x238/0x720 [ 1028.576631][T13943] ? __fget+0x381/0x550 [ 1028.576655][T13943] ? apparmor_file_permission+0x25/0x30 [ 1028.576716][T13943] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1028.576733][T13943] ? security_file_permission+0x8f/0x380 [ 1028.576753][T13943] __vfs_write+0xe1/0x110 [ 1028.576772][T13943] vfs_write+0x20c/0x580 [ 1028.576792][T13943] ksys_write+0x14f/0x290 [ 1028.576815][T13943] ? __ia32_sys_read+0xb0/0xb0 [ 1028.628216][T13943] ? do_syscall_64+0x26/0x680 [ 1028.633965][T13943] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1028.642267][T13943] ? do_syscall_64+0x26/0x680 [ 1028.642291][T13943] __x64_sys_write+0x73/0xb0 [ 1028.642309][T13943] do_syscall_64+0xfd/0x680 [ 1028.642332][T13943] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1028.642345][T13943] RIP: 0033:0x4592c9 [ 1028.642364][T13943] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1028.642371][T13943] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 18:40:44 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'rose0\x00', 0x8}) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 1028.642385][T13943] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 1028.642393][T13943] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1028.642401][T13943] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1028.642410][T13943] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1028.642419][T13943] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 18:40:44 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x1500}, 0x1c) 18:40:45 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) 18:40:45 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, 0x0) 18:40:45 executing program 4 (fault-call:2 fault-nth:45): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:45 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x400002, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bic\x00', 0x4) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x80) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r4 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r3) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 18:40:45 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x2000}, 0x1c) [ 1029.120182][T14167] FAULT_INJECTION: forcing a failure. [ 1029.120182][T14167] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.194930][T14167] CPU: 1 PID: 14167 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1029.209751][T14167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1029.209760][T14167] Call Trace: [ 1029.209793][T14167] dump_stack+0x172/0x1f0 [ 1029.209823][T14167] should_fail.cold+0xa/0x15 [ 1029.209846][T14167] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1029.272011][T14167] ? ___might_sleep+0x163/0x280 [ 1029.272035][T14167] __should_failslab+0x121/0x190 [ 1029.272059][T14167] should_failslab+0x9/0x14 [ 1029.272073][T14167] kmem_cache_alloc_trace+0x2ce/0x750 [ 1029.272095][T14167] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1029.272111][T14167] ? refcount_inc_checked+0x2b/0x70 [ 1029.272131][T14167] device_add+0xf4f/0x17a0 [ 1029.272145][T14167] ? device_initialize+0x440/0x440 [ 1029.272158][T14167] ? lockdep_init_map+0x1be/0x6d0 [ 1029.272176][T14167] ? get_device_parent.isra.0+0x560/0x560 [ 1029.272202][T14167] rfkill_register+0x1bf/0xb50 [ 1029.321577][T14167] hci_register_dev+0x369/0x860 [ 1029.321605][T14167] __vhci_create_device+0x2d0/0x5a0 18:40:45 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005b40)=""/4096, 0x1000}, {&(0x7f0000006b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/4096, 0x1040}, {&(0x7f0000004b40)=""/4096, 0x1000}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa048b5bdb4cb904e473730e55cff26d1b0e001d80fffffff05e510befccd7", 0x2e}], 0x1}, 0x0) [ 1029.321626][T14167] vhci_write+0x2d0/0x470 [ 1029.321648][T14167] new_sync_write+0x4d3/0x770 [ 1029.321665][T14167] ? new_sync_read+0x800/0x800 [ 1029.321691][T14167] ? common_file_perm+0x238/0x720 [ 1029.321704][T14167] ? __fget+0x381/0x550 [ 1029.321724][T14167] ? apparmor_file_permission+0x25/0x30 [ 1029.321751][T14167] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1029.337899][T14167] ? security_file_permission+0x8f/0x380 18:40:45 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x3f00}, 0x1c) [ 1029.337921][T14167] __vfs_write+0xe1/0x110 [ 1029.337939][T14167] vfs_write+0x20c/0x580 [ 1029.337959][T14167] ksys_write+0x14f/0x290 [ 1029.337977][T14167] ? __ia32_sys_read+0xb0/0xb0 [ 1029.337997][T14167] ? do_syscall_64+0x26/0x680 [ 1029.338015][T14167] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1029.338030][T14167] ? do_syscall_64+0x26/0x680 [ 1029.338051][T14167] __x64_sys_write+0x73/0xb0 [ 1029.338068][T14167] do_syscall_64+0xfd/0x680 [ 1029.338086][T14167] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1029.338100][T14167] RIP: 0033:0x4592c9 [ 1029.338127][T14167] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1029.444883][T14283] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 1029.446188][T14167] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1029.446205][T14167] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 [ 1029.446213][T14167] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1029.446222][T14167] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1029.446231][T14167] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1029.446241][T14167] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 [ 1029.578666][T14283] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 1029.602751][T14180] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 1029.676974][T14219] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 1029.710275][T14279] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 18:40:45 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x4000}, 0x1c) 18:40:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:46 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab02) 18:40:46 executing program 4 (fault-call:2 fault-nth:46): r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:46 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, 0x0) 18:40:46 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x5800}, 0x1c) [ 1030.092614][T14467] FAULT_INJECTION: forcing a failure. [ 1030.092614][T14467] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.165222][T14467] CPU: 1 PID: 14467 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #38 [ 1030.177532][T14467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1030.192625][T14467] Call Trace: [ 1030.198780][T14467] dump_stack+0x172/0x1f0 [ 1030.204964][T14467] should_fail.cold+0xa/0x15 [ 1030.211524][T14467] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1030.223176][T14467] ? ___might_sleep+0x163/0x280 [ 1030.236053][T14467] __should_failslab+0x121/0x190 [ 1030.236079][T14467] should_failslab+0x9/0x14 [ 1030.236093][T14467] kmem_cache_alloc+0x2af/0x6f0 [ 1030.236105][T14467] ? memcpy+0x46/0x50 [ 1030.236126][T14467] ? kstrdup+0x5a/0x70 [ 1030.236156][T14467] __kernfs_new_node+0xf0/0x6c0 [ 1030.294253][T14467] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1030.294279][T14467] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1030.294298][T14467] ? irq_work_claim+0x98/0xc0 [ 1030.294314][T14467] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1030.294337][T14467] ? irq_work_queue+0x30/0x90 [ 1030.343506][T14467] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1030.358460][T14467] ? wake_up_klogd+0x99/0xd0 [ 1030.358482][T14467] kernfs_new_node+0x96/0x120 [ 1030.358506][T14467] kernfs_create_dir_ns+0x52/0x160 [ 1030.358526][T14467] sysfs_create_dir_ns+0x131/0x2a0 [ 1030.358542][T14467] ? sysfs_create_mount_point+0xa0/0xa0 18:40:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:46 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x5c00}, 0x1c) [ 1030.358576][T14467] kobject_add_internal.cold+0x116/0x662 [ 1030.358594][T14467] kobject_add+0x150/0x1c0 [ 1030.358609][T14467] ? kset_create_and_add+0x1a0/0x1a0 [ 1030.358627][T14467] ? lockdep_init_map+0x1be/0x6d0 [ 1030.358650][T14467] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1030.358676][T14467] device_add+0x3b7/0x17a0 [ 1030.397450][T14467] ? get_device_parent.isra.0+0x560/0x560 [ 1030.397480][T14467] rfkill_register+0x1bf/0xb50 [ 1030.397508][T14467] hci_register_dev+0x369/0x860 [ 1030.397538][T14467] __vhci_create_device+0x2d0/0x5a0 [ 1030.397558][T14467] vhci_write+0x2d0/0x470 [ 1030.397583][T14467] new_sync_write+0x4d3/0x770 [ 1030.428009][T14467] ? new_sync_read+0x800/0x800 [ 1030.428040][T14467] ? common_file_perm+0x238/0x720 [ 1030.428055][T14467] ? __fget+0x381/0x550 [ 1030.428077][T14467] ? apparmor_file_permission+0x25/0x30 [ 1030.428097][T14467] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1030.428111][T14467] ? security_file_permission+0x8f/0x380 [ 1030.428129][T14467] __vfs_write+0xe1/0x110 [ 1030.428146][T14467] vfs_write+0x20c/0x580 [ 1030.428174][T14467] ksys_write+0x14f/0x290 [ 1030.443368][T14467] ? __ia32_sys_read+0xb0/0xb0 [ 1030.443392][T14467] ? do_syscall_64+0x26/0x680 [ 1030.443411][T14467] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1030.443426][T14467] ? do_syscall_64+0x26/0x680 [ 1030.443454][T14467] __x64_sys_write+0x73/0xb0 [ 1030.443472][T14467] do_syscall_64+0xfd/0x680 [ 1030.443498][T14467] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1030.459311][T14467] RIP: 0033:0x4592c9 [ 1030.459329][T14467] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1030.459338][T14467] RSP: 002b:00007fd7c51dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1030.459354][T14467] RAX: ffffffffffffffda RBX: 00007fd7c51dcc90 RCX: 00000000004592c9 18:40:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000100)={0x14, 0x11, 0x2, {0x40, 0x2, 0x3}}, 0x14) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x16b}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='status\x00') preadv(r1, &(0x7f00000017c0), 0x3cc, 0x1f000000) 18:40:46 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x5dc0}, 0x1c) [ 1030.459363][T14467] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 1030.459372][T14467] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1030.459381][T14467] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c51dd6d4 [ 1030.459391][T14467] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 0000000000000004 [ 1030.611336][T14467] kobject_add_internal failed for rfkill337 (error: -12 parent: hci2) 18:40:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000100)=[0x1, 0x2], 0x2) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000140)) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:47 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x6000}, 0x1c) 18:40:47 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu}) 18:40:47 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:47 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000140)={0x0, 0xfffffffffffffe32, 0x9}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x8000, 0x0, 0x1, 0x5}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000240)={0x0, r3}) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0)=0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, 0x0) close(r1) fchown(r0, r4, r5) fgetxattr(r2, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:47 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x7f00}, 0x1c) 18:40:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x4}}, 0x10) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:47 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x3) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:47 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x80fe}, 0x1c) 18:40:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000100)={0x5}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:47 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000140)={0x0, 0xfffffffffffffe32, 0x9}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x8000, 0x0, 0x1, 0x5}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000240)={0x0, r3}) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0)=0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, 0x0) close(r1) fchown(r0, r4, r5) fgetxattr(r2, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:48 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu}) 18:40:48 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x300) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0xffffffffffffffff) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f0000000300), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:48 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0xc05d}, 0x1c) 18:40:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x80, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000580)={{{@in=@local, @in=@local}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000003c0)={0x15, 0x110, 0xfa00, {r3, 0x200, 0x0, 0x0, 0x0, @ib={0x1b, 0xffffffff, 0x100000001, {"79ac9290fded95aafaa3cd33b819c0c7"}, 0x3, 0x1, 0x3b5d}, @ib={0x1b, 0x7, 0x2, {"b53e94c8eeac92df0767f0a310695644"}, 0x7, 0x8, 0x1}}}, 0x118) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000240)={0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x80) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000140)={0x7, 0x4d, 0x1}, 0x7) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='io\x00') write$FUSE_DIRENT(r4, &(0x7f0000000680)={0x190, 0xfffffffffffffffe, 0x7, [{0x2, 0x439c, 0x12, 0xfffffffffffffffd, '/dev/input/mouse#\x00'}, {0x3, 0x101, 0x29, 0x389c, '%selinuxsystemem0system,\xc5lo[wlan0eth1%,%&'}, {0x0, 0x8c, 0x29, 0xffff, '%selinuxsystemem0system,\xc5lo[wlan0eth1%,%&'}, {0x2, 0x3f, 0x18, 0x59c, '/dev/infiniband/rdma_cm\x00'}, {0x0, 0x9, 0xa, 0x9105, '{\'%ppp1+)B'}, {0x4, 0x8, 0x0, 0x8000}, {0x4, 0x1, 0x9, 0x5b4, '!{--wlan0'}, {0x0, 0x4, 0xa, 0xfffffffffffffff8, '/dev/vhci\x00'}]}, 0x190) 18:40:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:48 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0xc0fe}, 0x1c) 18:40:48 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x364) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:40:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:48 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0xe803}, 0x1c) 18:40:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:49 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu}) 18:40:49 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x370) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:49 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:49 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0xf401}, 0x1c) 18:40:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x8000) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x480000) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000001c0)={0x8001, {{0xa, 0x4e23, 0x2, @mcast1, 0xe3aa}}}, 0x88) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:49 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0xfc00}, 0x1c) 18:40:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) chdir(&(0x7f0000000100)='./file0\x00') write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000140)=""/232) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:49 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x372) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:49 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xd, 0x20, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000240)={0x9c, 0xfffffffffffffffd}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x40081, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0xfffffe89) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000200)=""/173) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) 18:40:50 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0xfe80}, 0x1c) 18:40:50 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x373) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:50 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)="4a078cb119a4184d180050b82471158d40af2459d6fae463b0fa7955fd59fda15db9c4a5f184466d7932b35419c010494e761b4da23a96a01997b248d5e1d9ea1d196698f2fcfb7948332550545dd2046c979fdb", 0x54}, {&(0x7f00000001c0)="3e883823cd82147841f677890781d952578c284c2ee9573bd023a17e4a6d30e8b4a7bc454ee71780646b875e29774c9cd0943b417365e47e522e343cea14ca4ce8a4e251fc18e4187fc5c32ca037543e545b5d933aec000b99b627e9acc0aedc00f417b292f763f7a6786f248607e6dab6be04fb04072f0039a978c5b34435ceb68b81fd45ca6b482ee7343a6da275c6022516bbfdcbfcc0b6d6709030298e0bd3db95f25a808a8f84bf7f935594d02a5bbf9b5b60493c2262119508fdda09453d5e886fe0c62619643e78aee5a098eea41c9ca7ec07e088cae0461101dec7d096324f2c", 0xe4}, {&(0x7f00000003c0)="762ab43998c17421bf55b3e3b8e6d18dda1e9c0c5a37c2df0179e8f674fa49066389199bf0a122cc6283861f9c7c50e5c08d18b64d090e28d3c99354a373feaa78258c6ef017b36ba97ee93b1ee400cc0fc8e6ece1391e8bb93b086bc8af1fb4d374012f5265fab7387cd343392882f5295f5d9c2a9629ab8048e1dadd855f11e3d158736e42dcc6f3aa13d03764aa975a59bcdd396bde9c88c56e47e3d409255c312f2f2d6b7a3c7858e2bdf3be08f8d6ce5edbe6308cbd89fbbc30be9440822f9ed238ca291c4385dcd56ed18e3671adbcc1b5d3f01fb3dd1e7af30ed882", 0xdf}, {&(0x7f00000004c0)="de6d255d7ed166103cdefb81afde7b73133bd28fe0bfb386d773828bc7d502dc1a2edbb6f8376435f8962eda021a93a1048ea545121570d0e26df3bd587ae2252629be74dcdb2c1a7a38ae996c5e94a3383df5c79c062f127dff7499d54d861d46dd5b3f8d55954dfb47a8bd340ef4c69ca8bc93514a0cc2169b84f4c5d9b72de24c85d3351a04016e2dbb1c0df1b8400ca00b618ddff5c0b4f611bc3dfa3720d7e6a3ab6f7b020d702d08c6dd9be20672d6bddc72c57b9b66591f1f7c2bfbc6e1", 0xc1}, {&(0x7f00000005c0)="b87b6c1c01b0ba49b888788a656b1a4136c6241d3b33b90ba320789b928a7b1e85cb12e4584f6bab954b1ce6c6bbe58bd8f94379f38701c8f22e17262be53cdbd6fa6a9b2376f7160883433039a4216a934d88f1913924c5ecf70d62a84ea87504a6c1d89c92704e88878bd94caa5f0544040b3fcbeaf0ae64929e522098e439153c712f6b3dcd3cfa7adcf3ba2f26987d21198aa3ea1875bf86c3d31be723955f8aab4caf25ec7c7a5e18676458de3a06", 0xb1}], 0x5}, 0x8000) syz_open_dev$vcsa(&(0x7f0000000700)='/dev/vcsa#\x00', 0x6, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000100)=0x3, 0x4) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r2) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:50 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:50 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0xfec0}, 0x1c) 18:40:50 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0xfdef) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)=0x0) getpgid(r2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000000c0)={0x6}) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000140)=""/183) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000200)) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000000100)) close(r0) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) mlockall(0x2) 18:40:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x82500, 0x0) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f00000003c0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @local}}, [0x994, 0x3, 0x8aca, 0xa50, 0x8, 0x0, 0x18000, 0x14dcce4, 0xac, 0x9e, 0x8, 0x8031, 0x10001, 0x8, 0x1]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000280)={r2, 0x2, 0x7, 0x4800000, 0x401, 0x8}, &(0x7f0000000300)=0x14) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(r1, &(0x7f0000000480)) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:50 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(r0, &(0x7f0000000400)) r2 = syz_open_dev$mouse(&(0x7f00000003c0)='/dev/input/mouse#\x00', 0xa, 0x200001) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000280)=@ccm_128={{0x307}, "7822b9b0982527bc", "64eaa2975c98910fa2d26ff2ed60d55b", "731761ca", "1235a05cdcff4247"}, 0x28) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x8}) close(r1) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x310, 0x70bd2a, 0x1, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xe739}}, ["", "", "", "", "", ""]}, 0x24}}, 0x80) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:50 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0xff00}, 0x1c) 18:40:50 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x20000002) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) readlinkat(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)=""/145, 0x91) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'ifb0\x00', {0x2, 0x4e23, @empty}}) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) openat(r1, &(0x7f0000000140)='./file0\x00', 0x800, 0x44) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:51 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0xfffffdef) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x6, 0x4000000000000400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) accept4$netrom(r1, &(0x7f0000000100)={{0x3, @netrom}, [@rose, @remote, @remote, @remote, @netrom, @null, @default, @null]}, &(0x7f0000000180)=0x48, 0x800) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:40:51 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x1000000}, 0x1c) 18:40:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.advise\x00') write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0)=0x0, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0xce96, 0x30201) ioctl$TUNSETGROUP(r3, 0x400454ce, r2) r4 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r4) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x6d8e, 0x200040) setuid(r1) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0x6, 0x7e1}]}, 0xc, 0x1) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000240)={0x1, 0xfffffffeffffffff, 0x903, 0x7023}, 0x8) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000380)) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x6, 0x4000000000000400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) accept4$netrom(r1, &(0x7f0000000100)={{0x3, @netrom}, [@rose, @remote, @remote, @remote, @netrom, @null, @default, @null]}, &(0x7f0000000180)=0x48, 0x800) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:51 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0xfffffffffffffdef) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:51 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x2000000}, 0x1c) 18:40:51 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 18:40:51 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x200) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000140)=ANY=[@ANYBLOB="0002000000000000030000000000000000000000000000000900000000000000810000000000000094004301000000000000000000000000000000000000000000000000000000000000000000000000010100000000000008000000000000003f0000000000000008000870000000000000000000000000000000000000002f1b6093000000000000000000000000003700000000000000060000000000000001010000000000002a3505f6000000000000000000000000000000000000000000000000000008000000000000000000"]) fgetxattr(r0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:51 executing program 0 (fault-call:3 fault-nth:0): socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:52 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x3000000}, 0x1c) 18:40:52 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x2800, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x4) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:52 executing program 2 (fault-call:2 fault-nth:0): r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) socket$caif_seqpacket(0x25, 0x5, 0x1105) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:52 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x4000000}, 0x1c) 18:40:52 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1036.170975][T16317] FAULT_INJECTION: forcing a failure. [ 1036.170975][T16317] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.260759][T16317] CPU: 1 PID: 16317 Comm: syz-executor.0 Not tainted 5.2.0-rc5+ #38 [ 1036.269800][T16317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1036.281871][T16317] Call Trace: [ 1036.285487][T16317] dump_stack+0x172/0x1f0 [ 1036.290056][T16317] should_fail.cold+0xa/0x15 [ 1036.295101][T16317] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1036.301826][T16317] ? ___might_sleep+0x163/0x280 [ 1036.307332][T16317] __should_failslab+0x121/0x190 [ 1036.307356][T16317] should_failslab+0x9/0x14 [ 1036.307372][T16317] kmem_cache_alloc_node+0x261/0x710 [ 1036.307398][T16317] __alloc_skb+0xd5/0x5e0 [ 1036.307415][T16317] ? skb_trim+0x190/0x190 [ 1036.307450][T16317] ? if_nlmsg_size+0x4ad/0x9e0 [ 1036.307486][T16317] rtmsg_ifinfo_build_skb+0x74/0x1a0 [ 1036.318966][T16317] rtmsg_ifinfo_event.part.0+0x43/0xe0 [ 1036.318986][T16317] rtmsg_ifinfo+0x8d/0xa0 18:40:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x2, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "072521d9dea9233d", "cedb6dc109af5bafbbc44896712c9a47", "ca816c32", "50d7cccc0449c1cc"}, 0x28) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x103) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) [ 1036.319007][T16317] dev_close_many+0x322/0x6f0 [ 1036.319023][T16317] ? __queue_work+0x536/0x1200 [ 1036.319038][T16317] ? __queue_work+0x567/0x1200 [ 1036.319055][T16317] ? netdev_master_upper_dev_link+0x50/0x50 [ 1036.319069][T16317] ? __queue_work+0x567/0x1200 [ 1036.319092][T16317] rollback_registered_many+0x43b/0xfc0 [ 1036.319112][T16317] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1036.319142][T16317] ? generic_xdp_install+0x3d0/0x3d0 [ 1036.334714][T16317] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1036.334747][T16317] rollback_registered+0x109/0x1d0 [ 1036.334764][T16317] ? rollback_registered_many+0xfc0/0xfc0 [ 1036.334785][T16317] ? kasan_check_read+0x1/0x20 [ 1036.334809][T16317] unregister_netdevice_queue+0x1ee/0x2c0 [ 1036.346067][T16317] __tun_detach+0xd8a/0x1040 [ 1036.346099][T16317] tun_chr_close+0xe0/0x180 [ 1036.346118][T16317] __fput+0x2ff/0x890 18:40:52 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x5000000}, 0x1c) [ 1036.346136][T16317] ? __tun_detach+0x1040/0x1040 [ 1036.346155][T16317] ____fput+0x16/0x20 [ 1036.346172][T16317] task_work_run+0x145/0x1c0 [ 1036.346200][T16317] exit_to_usermode_loop+0x273/0x2c0 [ 1036.363386][T16317] do_syscall_64+0x58e/0x680 [ 1036.363412][T16317] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1036.363426][T16317] RIP: 0033:0x4592c9 18:40:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 1036.363451][T16317] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1036.363460][T16317] RSP: 002b:00007f220ec78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1036.363476][T16317] RAX: 0000000000000064 RBX: 00007f220ec78c90 RCX: 00000000004592c9 [ 1036.363486][T16317] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000005 [ 1036.363496][T16317] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1036.363505][T16317] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f220ec796d4 [ 1036.363515][T16317] R13: 00000000004c63de R14: 00000000004daef8 R15: 0000000000000006 18:40:52 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f00000003c0)={0x2a3, 0x57b38eb9, @name="6ce17c7356bf2e50b5c699b8bdf429e667ed159b3c3e5550ec42a8daf4c5e17c"}) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000400)={0x3, 0x6}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000408}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, r3, 0x312, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x68}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000000000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x10001}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40800}, 0x10) 18:40:52 executing program 0 (fault-call:3 fault-nth:1): socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:53 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x6000000}, 0x1c) 18:40:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0xc0000000, 0x100, "960528ae9fd9d626f0debe67ea9260d88092f54eeb4921adf3029636d9aea9c9", 0x10000000000, 0x3, 0x8, 0x3ff, 0x4, 0x3, 0xdda, 0x5, [0x401, 0x3ff, 0x1, 0x1]}) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x5, 0x80000003fc) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffb000/0x3000)=nil) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:53 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x370) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:53 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:53 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:53 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000100)=0x5) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:53 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) write$binfmt_elf64(r1, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x180000, 0x2e, 0x3, 0x6, 0xfffffffffffff801, 0x3, 0x7, 0x4, 0x1fc, 0x40, 0x3c5, 0xb2, 0x4, 0x38, 0x1, 0x3b, 0x7, 0x3}, [{0x0, 0x49b, 0x0, 0x10001, 0x1, 0x7, 0x0, 0x1e6}, {0x7, 0x0, 0x5585, 0x80000000, 0xffffffffffff23ba, 0x9, 0x9, 0xffff}], "5f8a016d21fbc63da2d0def00198b5a8499eae5674923ccd618c2de9244390273f87d66a7bf0664b576ab90de496775a3138d4724adf9bc90d086b6e899b79b6d9719d8018ac03342e8f3fd730fe5b8f36509e75e97013a496b5b7ed4df6491c30c3adc7b142a039964ed02f567c45d8c331f3dcbab28ae38507677e10020e8501402507df367964b932abc13151b98c5e3d61c2", [[]]}, 0x244) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000140)) close(r1) 18:40:53 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x7000000}, 0x1c) 18:40:53 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x20000002) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:53 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:53 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x8000000}, 0x1c) 18:40:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@local, 0x7fffffff, 0x3, 0x3, 0x9, 0x6, 0xfe02}, 0x20) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x401, 0x101000) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000180)=0x1002) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f00000001c0)) close(r0) 18:40:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:53 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) getgroups(0x7, &(0x7f00000000c0)=[0xee01, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee01, 0xee01]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r2, r3, r4) 18:40:53 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xa}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:54 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x9000000}, 0x1c) 18:40:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) fgetxattr(r0, 0x0, 0x0, 0xffffffffffffff05) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:54 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, "cd6b2d928930808513280eac7b46ffe3c97b6abcda280826abea0c6daccd311a6c0be8a29c2e81624eea71ff869fa56be8e4ef25daa11d9b69b139ad28f1ccca6d55dfd08d92c36b04063ffa8a7c0c86a8515c63c0412758178e6499a4687e903208fc64b0f58689b3c08af2bf4c76f1291a016b30fb9d50e0ed70ab4c2d23a21d503492a1c90c5634ec90428ea5f17297f0bd6732aa0b94dbf3776c877db35c2b2893c36d7f18386e851c3e98b8e281"}, 0xb1) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0)=0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000000c0)={0x1}) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0xa, &(0x7f00000016c0)=[{&(0x7f0000000180)="4661122e180b7c6389ea781b00c8cf808e65e8409974a6d480c935889429d66047f658376f64f6f7f8033a8a52b552485b259e265dc7d9273bb9c053424c62e27dc9716bafe35da504c80330c8a3438e6c6b6ebeb0d00cb73ede095eafc77601fbe9200387557c63c59673b21026a9c422636dd808b486e0b80933f26d1b197c313c8a90d791ed6b5d4b0bdcab494f327da21bc0b60b26c08b5a040e74b4f189d2c76081de12993d9c9e2b355a01dfab651b50018051e81256f801220e7fc913ee0e087d7513b7446e7aca836b38f22219e5b605a09be8da11def053d00cb83ab5fef58139cfec6958104773fbd0ba03fba445f3eb885b666b", 0xf9}, {&(0x7f0000000280)="6c1f838293191480449f409fd41b3243e972d3b141466c8389abc457c523059549", 0x21, 0x800}, {&(0x7f0000000300)="84fad02b9b02fa8e01afe739e6632ae8108ddb29811f4da4e66a2d0012e8a255ca8dec8b99ec109d5c96b20702efce46", 0x30, 0x94}, {&(0x7f00000003c0)="44281e844fedd2c34bcda87047ae890301ff6eab3858247958a037a4cf41def27837cd8b90409d82ed062c2e8081b400a3ca396180c31e6483e7945936c883cbca5f90e14cb069196bf80714c90a65bdae6d273347319e35620f08aaa977ffe7492dfc7dd53c2e6ac70df69b761d4fec1b308a89aaf52fbb6edd11fb1d7b9cdfee074171674eddf6", 0x88, 0x1}, {&(0x7f0000000480)="f70e461c24a904fb7f61ffb2ce68e608198e845cf6f74fb4916f933e4f4fb30c42c28db7050e6eec1affeeec9e1be969edad5160129eebf97c86d9099841d0694b4d771e36db59fc9005e31b16c50f14063db30fb8e6df9b11117b1cc4817738588b77", 0x63, 0x30e96aca}, {&(0x7f0000000500)="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", 0x1000, 0x1}, {&(0x7f0000001500)="7ad2fc12cbd155bc", 0x8, 0x20}, {&(0x7f0000001540)="c93da510b58475695aacc295552020958620e31e38c94fcac8d83a524ee35c0325317e2ee9e2dd29660fe8b4e28e1e779044bfcaa4e1661bbe9ebcb90f", 0x3d, 0x4}, {&(0x7f0000001580)="546cc87e15c646e1cc1e2be906a7f75a80b743a8375f8fbe4b17377c96e728d07ef2c17fe621a9237bc8145d722b7b7a737e470016f5842c5a2625fd9976a22217950a5fe5a2c72be607c21a84d2d3b0d6a484461fffae62235d73d5b108267cbd0972eedc52217c758e74448a134953ca5899ed662d71d7439cd437913d8f7fde28c97920c7b0c972b87941feb5d5ad606b784ec1ee663c94fa15740c34c80413a3426d5a5e4a59b1ed59e10391c6eff102206bb21f028881ffa3d5", 0xbc, 0x7de3}, {&(0x7f0000001640)="9b1297f5ccf854e05e377a5e42bc10c67df81e337814513c7c313cb1be22c219d9f37dcba18af3ef44bae190236ccdcc2ba50a0108d514d8324acebf1e1ef7115bff1bf6070134d9a4", 0x49, 0x8}], 0x10000, &(0x7f00000017c0)={[{@shortname_mixed='shortname=mixed'}, {@shortname_win95='shortname=win95'}, {@uni_xlateno='uni_xlate=0'}, {@utf8='utf8=1'}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@shortname_mixed='shortname=mixed'}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@subj_type={'subj_type'}}, {@subj_user={'subj_user', 0x3d, '/dev/vhci\x00'}}, {@uid_lt={'uid<', r2}}, {@uid_eq={'uid', 0x3d, r1}}, {@measure='measure'}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x3d, 0x34, 0x39, 0x0, 0x33, 0x38, 0x62], 0x2d, [0x62, 0x3f, 0xb974d24dc0fdde2f, 0x61], 0x2d, [0x7f, 0x37, 0x37, 0x77], 0x2d, [0x61, 0x0, 0x38, 0x64], 0x2d, [0x0, 0x0, 0x7f, 0x65, 0x36, 0x30, 0x77, 0x35]}}}, {@uid_gt={'uid>', r2}}, {@euid_lt={'euid<', r2}}]}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:54 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0xa000000}, 0x1c) 18:40:54 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0xfffffffffffffffd, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:54 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) prctl$PR_SET_PTRACER(0x59616d61, r3) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:54 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0x64}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:54 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x311000) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1038.500554][T17165] FAT-fs (loop1): Unrecognized mount option "fscontext=user_u" or missing value 18:40:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:54 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0xe000000}, 0x1c) 18:40:54 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) [ 1038.692770][T17165] FAT-fs (loop1): Unrecognized mount option "fscontext=user_u" or missing value 18:40:54 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='cpuset\x00') write$cgroup_int(r2, &(0x7f0000000140)=0x800000000000000, 0x12) fstat(0xffffffffffffffff, &(0x7f0000000340)) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80002800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x606, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) write$cgroup_type(r2, &(0x7f0000000180)='threaded\x00', 0x9) 18:40:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:55 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x15000000}, 0x1c) 18:40:55 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f0000000180), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:55 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0x20000f8a}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(r1, 0x0, 0x0, 0xfffffdd7) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000100)={0xfffffffffffffff8, 0x100000001}) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:55 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:55 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x9}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000180)={r3, 0x3}, 0x8) 18:40:55 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x20000000}, 0x1c) 18:40:55 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:55 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x1000) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) close(r0) 18:40:55 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000140)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4e0, 0x2b0, 0x1b8, 0x380, 0x2b0, 0x1b8, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, &(0x7f0000000180), {[{{@ip={@local, @loopback, 0xff000000, 0xffffff00, 'syz_tun\x00', 'vcan0\x00', {0xff}, {0xff}, 0x1, 0x3, 0x40}, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xffff}}}, {{@ip={@loopback, @broadcast, 0xffffff00, 0xffffffff, 'eql\x00', 'hsr0\x00', {}, {}, 0x6c, 0x1, 0x2}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x811, 0x950, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4f, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4e24}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xb}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x800, 0x100000000, 0x7}, {0xe7, 0xe19, 0x3f}, {0x3, 0x0, 0xe656}, 0x400, 0xf64}}}, {{@ip={@multicast2, @loopback, 0xffffff00, 0xffffffff, '\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x6f, 0x3, 0x4c}, 0x0, 0x98, 0xd0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x20, 0x9}, {0x1ff, 0x3, 0x6}, {0x9, 0xd9f, 0x1}, 0x7, 0x5}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'rose0\x00', 'bond0\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x2c}, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x480000, @broadcast, 0x4e20}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) sendto$ax25(r3, &(0x7f0000000900)="72f7a98125da56ab30c2f84567fd11e258a2db000920aeae04f571831a7fbb8ae318d545c1dadda82f58543f82849a7498102863c2677f4f36b41802207d723a51056d48d919d491c79a4d81008b4be59023b4d95a5fe7e3a62307763263c450d42e0328b465e3d26b4972f186d90497b46433c9cfa0ddbae856936917926c8532a948c9b4083eb4ee8783df7d31d2a0fbab94dbac5b76d2991299185f2fa795cc40ffacd0b1f5505f911f426b753540ed97f6f771f95a423d8d28fb5d5cca551ed442d8fd6a6c09a561941a4004684909ff55", 0xd3, 0x1, &(0x7f0000000200)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) close(r2) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff31) ioctl$TIOCLINUX6(r1, 0x541c, 0x0) 18:40:55 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x3f000000}, 0x1c) 18:40:55 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0x7ffff000}], 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:56 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) read$rfkill(r2, &(0x7f0000000140), 0x8) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000180)=r2) close(r1) 18:40:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={r1, r1, 0x0, 0x1}, 0x10) close(r0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) read(r1, &(0x7f0000000140)=""/140, 0x8c) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000, 0x1}) 18:40:56 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x101, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x5) getresuid(0x0, &(0x7f00000000c0)=0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000140)={0x3, @bcast, r3}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) write$P9_RFLUSH(r4, &(0x7f00000001c0)={0x7, 0x6d, 0x1}, 0x7) close(r1) 18:40:56 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x40000000}, 0x1c) 18:40:56 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x67707b14) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x8eb5, 0x40) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000400)={{0x66, @broadcast, 0x4e24, 0x1, 'lblcr\x00', 0x1, 0x8, 0x29}, {@rand_addr=0x69c2, 0x0, 0x3, 0x5, 0x6, 0x5}}, 0x44) getresuid(0x0, &(0x7f00000002c0), 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x3f}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000480)=@assoc_value={r4, 0x7ff}, &(0x7f00000004c0)=0x8) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f0000000580)=0x100) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', r5}) close(r0) ioctl$CAPI_CLR_FLAGS(r3, 0x80044325, &(0x7f0000000540)) openat$cgroup_type(r3, &(0x7f0000000500)='cgroup.type\x00', 0x2, 0x0) 18:40:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) r2 = semget$private(0x0, 0x3, 0x40) semctl$GETVAL(r2, 0x3, 0xc, &(0x7f0000000100)=""/105) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:56 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x2, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:56 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x58000000}, 0x1c) 18:40:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x200, 0x400300) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x800, 0x7f}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x101, 0x1}, 0x8) fgetxattr(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="62747271eb11e98d21d71b60d5a6fab58f3966732e2f6465762f7668636900"], &(0x7f0000000100)=""/34, 0x22) getresuid(0x0, &(0x7f00000002c0), 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 18:40:57 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f0000000140), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0x400}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r1) 18:40:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f0000000300), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) 18:40:57 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x400000006, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x94) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x5c000000}, 0x1c) 18:40:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 18:40:57 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0x4, 0xfffffffffffffffc, 0x40, [], &(0x7f0000000180)={0x99096a, 0x9, [], @value=0x80000000}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getresuid(0x0, &(0x7f00000002c0), 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x400) ioctl$CAPI_GET_FLAGS(r3, 0x80044323, &(0x7f00000000c0)) socket$can_raw(0x1d, 0x3, 0x1) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r2) 18:40:57 executing program 0: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x3, 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) 18:40:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 1041.237760][T18050] WARNING: CPU: 1 PID: 18050 at fs/kernfs/dir.c:493 kernfs_get.part.0+0x73/0x90 [ 1041.246973][T18050] Kernel panic - not syncing: panic_on_warn set ... [ 1041.253688][T18050] CPU: 1 PID: 18050 Comm: syz-executor.2 Not tainted 5.2.0-rc5+ #38 [ 1041.255449][T17951] kobject: 'hci2' (0000000076e4c673): kobject_cleanup, parent 00000000b6fe4364 [ 1041.261770][T18050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1041.261778][T18050] Call Trace: [ 1041.261813][T18050] dump_stack+0x172/0x1f0 [ 1041.261837][T18050] ? kernfs_get.part.0+0x60/0x90 [ 1041.261882][T18050] panic+0x2cb/0x744 [ 1041.275160][ T3879] kobject: 'loop3' (00000000cc4275e8): kobject_uevent_env [ 1041.281192][T18050] ? __warn_printk+0xf3/0xf3 [ 1041.281217][T18050] ? kernfs_get.part.0+0x73/0x90 [ 1041.281235][T18050] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1041.281257][T18050] ? __warn.cold+0x5/0x4d [ 1041.290816][ T3879] kobject: 'loop3' (00000000cc4275e8): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1041.293833][T18050] ? kernfs_get.part.0+0x73/0x90 [ 1041.293853][T18050] __warn.cold+0x20/0x4d [ 1041.293870][T18050] ? kernfs_get.part.0+0x73/0x90 [ 1041.293894][T18050] report_bug+0x263/0x2b0 [ 1041.303595][T17951] kobject: 'hci2' (0000000076e4c673): calling ktype release [ 1041.305018][T18050] do_error_trap+0x11b/0x200 [ 1041.305041][T18050] do_invalid_op+0x37/0x50 [ 1041.318940][T17951] kobject: 'hci2': free name [ 1041.320893][T18050] ? kernfs_get.part.0+0x73/0x90 [ 1041.320916][T18050] invalid_op+0x14/0x20 [ 1041.320937][T18050] RIP: 0010:kernfs_get.part.0+0x73/0x90 [ 1041.389835][T18050] Code: e6 e8 c1 9d 99 ff 45 85 e4 74 1a e8 37 9c 99 ff be 04 00 00 00 48 89 df e8 aa 22 d2 ff f0 ff 03 5b 41 5c 5d c3 e8 1d 9c 99 ff <0f> 0b eb dd 48 89 df e8 81 48 d2 ff eb c1 0f 1f 44 00 00 66 2e 0f [ 1041.409816][T18050] RSP: 0018:ffff888053047818 EFLAGS: 00010212 [ 1041.415908][T18050] RAX: 0000000000040000 RBX: ffff8880a49d02a0 RCX: ffffc9000a21b000 [ 1041.423893][T18050] RDX: 000000000000715f RSI: ffffffff81d72513 RDI: 0000000000000005 [ 1041.432004][T18050] RBP: ffff888053047828 R08: ffff888084598380 R09: ffffed101493a055 [ 1041.440316][T18050] R10: ffffed101493a054 R11: ffff8880a49d02a3 R12: 0000000000000000 [ 1041.448298][T18050] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88821b6f0ee0 [ 1041.456492][T18050] ? kernfs_get.part.0+0x73/0x90 [ 1041.461471][T18050] ? kernfs_get.part.0+0x73/0x90 [ 1041.466470][T18050] kernfs_new_node+0xb6/0x120 [ 1041.471312][T18050] kernfs_create_dir_ns+0x52/0x160 [ 1041.476462][T18050] sysfs_create_dir_ns+0x131/0x2a0 [ 1041.494380][T18050] ? sysfs_create_mount_point+0xa0/0xa0 [ 1041.500235][T18050] ? kobject_namespace+0x44/0x190 [ 1041.505292][T18050] ? class_dir_child_ns_type+0xd/0x60 [ 1041.510693][T18050] kobject_add_internal.cold+0x116/0x662 [ 1041.516662][T18050] kobject_add+0x150/0x1c0 [ 1041.521238][T18050] ? kset_create_and_add+0x1a0/0x1a0 [ 1041.526558][T18050] ? kasan_check_read+0x11/0x20 [ 1041.531451][T18050] ? mutex_unlock+0xd/0x10 [ 1041.541569][T18050] device_add+0x3b7/0x17a0 [ 1041.546028][T18050] ? get_device_parent.isra.0+0x560/0x560 [ 1041.551865][T18050] ? start_creating+0x163/0x1e0 [ 1041.556743][T18050] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1041.563098][T18050] hci_register_dev+0x2e8/0x860 [ 1041.568089][T18050] __vhci_create_device+0x2d0/0x5a0 [ 1041.573815][T18050] vhci_write+0x2d0/0x470 [ 1041.578274][T18050] new_sync_write+0x4d3/0x770 [ 1041.583092][T18050] ? new_sync_read+0x800/0x800 [ 1041.587894][T18050] ? common_file_perm+0x238/0x720 [ 1041.592935][T18050] ? __fget+0x381/0x550 [ 1041.597284][T18050] ? apparmor_file_permission+0x25/0x30 [ 1041.602881][T18050] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1041.609230][T18050] ? security_file_permission+0x8f/0x380 [ 1041.615241][T18050] __vfs_write+0xe1/0x110 [ 1041.619591][T18050] vfs_write+0x20c/0x580 [ 1041.623856][T18050] ksys_write+0x14f/0x290 [ 1041.628332][T18050] ? __ia32_sys_read+0xb0/0xb0 [ 1041.633203][T18050] ? do_syscall_64+0x26/0x680 [ 1041.637895][T18050] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1041.643997][T18050] ? do_syscall_64+0x26/0x680 [ 1041.648701][T18050] __x64_sys_write+0x73/0xb0 [ 1041.653339][T18050] do_syscall_64+0xfd/0x680 [ 1041.657958][T18050] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1041.663859][T18050] RIP: 0033:0x4592c9 [ 1041.667942][T18050] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1041.687563][T18050] RSP: 002b:00007f53dbfaac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1041.696143][T18050] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004592c9 [ 1041.704187][T18050] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000005 [ 1041.712195][T18050] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1041.720354][T18050] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f53dbfab6d4 [ 1041.728568][T18050] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 00000000ffffffff [ 1041.739336][T18050] Kernel Offset: disabled [ 1041.744131][T18050] Rebooting in 86400 seconds..