[  OK  ] Started Permit User Sessions.
[  OK  ] Found device /dev/ttyS0.
[  OK  ] Started System Logging Service.
[   ***] (1 of 2) A start job is running for…Shell server (1min 25s / 2min 43s)
[  *** ] (1 of 2) A start job is running for…Shell server (1min 26s / 2min 43s)[  126.456121][ T8144] sshd (8144) used greatest stack depth: 4048 bytes left

[ ***  ] (2 of 2) A start job is running for…ot available (1min 28s / no limit)
[***   ] (2 of 2) A start job is running for…ot available (1min 29s / no limit)
[  OK  ] Started getty on tty2-tty6 if dbus and logind are not available.
[  OK  ] Started OpenBSD Secure Shell server.
Warning: Permanently added '10.128.0.162' (ECDSA) to the list of known hosts.
[  OK  ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch.
[  OK  ] Started Getty on tty6.
[  OK  ] Started Getty on tty5.
[  OK  ] Started Getty on tty4.
[  OK  ] Started Getty on tty3.
[  OK  ] Started Getty on tty2.
[  OK  ] Started Getty on tty1.
[  OK  ] Started Serial Getty on ttyS0.
[  OK  ] Reached target Login Prompts.
[  OK  ] Reached target Multi-User System.
[  OK  ] Reached target Graphical Interface.
         Starting Update UTMP about System Runlevel Changes...
         Starting Load/Save RF Kill Switch Status...
[  OK  ] Started Update UTMP about System Runlevel Changes.
[  OK  ] Started Load/Save RF Kill Switch Status.


Debian GNU/Linux 9 syzkaller ttyS0

2020/08/08 00:16:20 fuzzer started
2020/08/08 00:16:21 dialing manager at 10.128.0.26:45451
2020/08/08 00:16:21 syscalls: 3255
2020/08/08 00:16:21 code coverage: enabled
2020/08/08 00:16:21 comparison tracing: enabled
2020/08/08 00:16:21 extra coverage: enabled
2020/08/08 00:16:21 setuid sandbox: enabled
2020/08/08 00:16:21 namespace sandbox: enabled
2020/08/08 00:16:21 Android sandbox: enabled
2020/08/08 00:16:21 fault injection: enabled
2020/08/08 00:16:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/08/08 00:16:21 net packet injection: enabled
2020/08/08 00:16:21 net device setup: enabled
2020/08/08 00:16:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/08/08 00:16:21 devlink PCI setup: PCI device 0000:00:10.0 is not available
2020/08/08 00:16:21 USB emulation: enabled
2020/08/08 00:16:21 hci packet injection: enabled
00:18:40 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f00000004c0)="32d415f6a3", 0x5)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

syzkaller login: [  303.472470][   T28] audit: type=1400 audit(1596845920.072:8): avc:  denied  { execmem } for  pid=8497 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[  303.833394][ T8498] IPVS: ftp: loaded support on port[0] = 21
[  304.088623][ T8498] chnl_net:caif_netlink_parms(): no params data found
[  304.222455][ T8498] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.229878][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.239317][ T8498] device bridge_slave_0 entered promiscuous mode
[  304.253497][ T8498] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.260842][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.270411][ T8498] device bridge_slave_1 entered promiscuous mode
[  304.321233][ T8498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.338981][ T8498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.389175][ T8498] team0: Port device team_slave_0 added
[  304.402590][ T8498] team0: Port device team_slave_1 added
[  304.448636][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.455960][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.482621][ T8498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.500792][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.507865][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.534724][ T8498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.604036][ T8498] device hsr_slave_0 entered promiscuous mode
[  304.614234][ T8498] device hsr_slave_1 entered promiscuous mode
[  304.895578][ T8498] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  304.915406][ T8498] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  304.936814][ T8498] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  304.963247][ T8498] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  305.281349][ T8498] 8021q: adding VLAN 0 to HW filter on device bond0
[  305.315207][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  305.324274][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  305.346655][ T8498] 8021q: adding VLAN 0 to HW filter on device team0
[  305.367790][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  305.378162][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  305.388658][ T3226] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.396014][ T3226] bridge0: port 1(bridge_slave_0) entered forwarding state
[  305.453706][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  305.463217][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  305.473265][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  305.482795][ T3226] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.490135][ T3226] bridge0: port 2(bridge_slave_1) entered forwarding state
[  305.499049][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  305.510081][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  305.534033][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  305.544698][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  305.563025][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  305.573880][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  305.584449][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  305.607431][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  305.617223][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  305.649377][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  305.659107][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  305.683557][ T8498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  305.747604][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  305.755982][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  305.794058][ T8498] 8021q: adding VLAN 0 to HW filter on device batadv0
[  305.862393][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  305.872835][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  305.947028][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  305.956977][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  305.982527][ T8498] device veth0_vlan entered promiscuous mode
[  305.991733][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  306.000819][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  306.034576][ T8498] device veth1_vlan entered promiscuous mode
[  306.082481][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  306.092244][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  306.129745][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  306.140236][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  306.162990][ T8498] device veth0_macvtap entered promiscuous mode
[  306.184556][ T8498] device veth1_macvtap entered promiscuous mode
[  306.237416][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_0
[  306.245485][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  306.255359][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  306.264834][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  306.274966][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  306.301658][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_1
[  306.331250][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  306.343004][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
00:18:44 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f00000004c0)="32d415f6a3", 0x5)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:18:45 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f00000004c0)="32d415f6a3", 0x5)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:18:45 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f00000004c0)="32d415f6a3", 0x5)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:18:45 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:18:46 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  309.701180][   T27] Bluetooth: hci0: command 0x0409 tx timeout
00:18:46 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:18:46 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:18:46 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:18:47 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:18:48 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  311.779151][   T12] Bluetooth: hci0: command 0x041b tx timeout
00:18:48 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  312.277529][ T8757] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
00:18:49 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  312.812468][ T8761] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
00:18:49 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  313.385816][ T8766] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
[  313.859000][   T12] Bluetooth: hci0: command 0x040f tx timeout
00:18:50 executing program 0:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  314.122871][ T8770] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
00:18:51 executing program 0:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  314.690984][ T8774] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
00:18:51 executing program 0:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  315.219641][ T8778] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
[  315.521644][ T8778] not chained 10000 origins
[  315.526209][ T8778] CPU: 1 PID: 8778 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0
[  315.534802][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  315.544881][ T8778] Call Trace:
[  315.548275][ T8778]  dump_stack+0x21c/0x280
[  315.552686][ T8778]  kmsan_internal_chain_origin+0x6f/0x130
[  315.558430][ T8778]  ? kmsan_get_metadata+0x116/0x180
[  315.563647][ T8778]  ? kmsan_set_origin_checked+0x95/0xf0
[  315.569215][ T8778]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[  315.575302][ T8778]  ? kmsan_get_metadata+0x116/0x180
[  315.580514][ T8778]  ? kmsan_set_origin_checked+0x95/0xf0
[  315.586073][ T8778]  ? kmsan_get_metadata+0x116/0x180
[  315.591270][ T8778]  ? kmsan_set_origin_checked+0x95/0xf0
[  315.596801][ T8778]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[  315.602917][ T8778]  ? _copy_from_user+0x201/0x310
[  315.607845][ T8778]  ? kmsan_get_metadata+0x116/0x180
[  315.613043][ T8778]  __msan_chain_origin+0x50/0x90
[  315.618058][ T8778]  __get_compat_msghdr+0x6db/0x9d0
[  315.623181][ T8778]  get_compat_msghdr+0x108/0x2b0
[  315.628148][ T8778]  __sys_sendmmsg+0x755/0xf70
[  315.632821][ T8778]  ? kmsan_internal_check_memory+0xb1/0x3d0
[  315.638701][ T8778]  ? __msan_poison_alloca+0xf0/0x120
[  315.644064][ T8778]  ? put_old_timespec32+0x231/0x2d0
[  315.649262][ T8778]  ? kmsan_get_metadata+0x116/0x180
[  315.654443][ T8778]  ? kmsan_get_metadata+0x116/0x180
[  315.659637][ T8778]  ? kmsan_get_metadata+0x116/0x180
[  315.664840][ T8778]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  315.670304][ T8778]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  315.675894][ T8778]  __do_fast_syscall_32+0x2af/0x480
[  315.681253][ T8778]  do_fast_syscall_32+0x6b/0xd0
[  315.686126][ T8778]  do_SYSENTER_32+0x73/0x90
[  315.690665][ T8778]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  315.697073][ T8778] RIP: 0023:0xf7f44549
[  315.701147][ T8778] Code: Bad RIP value.
[  315.705194][ T8778] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159
[  315.713588][ T8778] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140
[  315.721543][ T8778] RDX: 0000000092492805 RSI: 0000000000000000 RDI: 0000000000000000
[  315.729515][ T8778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  315.737507][ T8778] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  315.745483][ T8778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  315.753461][ T8778] Uninit was stored to memory at:
[  315.758477][ T8778]  kmsan_internal_chain_origin+0xad/0x130
[  315.764178][ T8778]  __msan_chain_origin+0x50/0x90
[  315.769100][ T8778]  __get_compat_msghdr+0x6db/0x9d0
[  315.774212][ T8778]  get_compat_msghdr+0x108/0x2b0
[  315.779145][ T8778]  __sys_sendmmsg+0x755/0xf70
[  315.783801][ T8778]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  315.789168][ T8778]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  315.794706][ T8778]  __do_fast_syscall_32+0x2af/0x480
[  315.799885][ T8778]  do_fast_syscall_32+0x6b/0xd0
[  315.804716][ T8778]  do_SYSENTER_32+0x73/0x90
[  315.809199][ T8778]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  315.815496][ T8778] 
[  315.817804][ T8778] Uninit was stored to memory at:
[  315.822826][ T8778]  kmsan_internal_chain_origin+0xad/0x130
[  315.828547][ T8778]  __msan_chain_origin+0x50/0x90
[  315.833508][ T8778]  __get_compat_msghdr+0x6db/0x9d0
[  315.838611][ T8778]  get_compat_msghdr+0x108/0x2b0
[  315.843529][ T8778]  __sys_sendmmsg+0x755/0xf70
[  315.848184][ T8778]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  315.853555][ T8778]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  315.859097][ T8778]  __do_fast_syscall_32+0x2af/0x480
[  315.864291][ T8778]  do_fast_syscall_32+0x6b/0xd0
[  315.869120][ T8778]  do_SYSENTER_32+0x73/0x90
[  315.873620][ T8778]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  315.879924][ T8778] 
[  315.882244][ T8778] Uninit was stored to memory at:
[  315.887296][ T8778]  kmsan_internal_chain_origin+0xad/0x130
[  315.892996][ T8778]  __msan_chain_origin+0x50/0x90
[  315.897913][ T8778]  __get_compat_msghdr+0x6db/0x9d0
[  315.903017][ T8778]  get_compat_msghdr+0x108/0x2b0
[  315.907966][ T8778]  __sys_sendmmsg+0x755/0xf70
[  315.912623][ T8778]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  315.917977][ T8778]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  315.923506][ T8778]  __do_fast_syscall_32+0x2af/0x480
[  315.928697][ T8778]  do_fast_syscall_32+0x6b/0xd0
[  315.933558][ T8778]  do_SYSENTER_32+0x73/0x90
[  315.938061][ T8778]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  315.944377][ T8778] 
[  315.946702][ T8778] Uninit was stored to memory at:
[  315.951740][ T8778]  kmsan_internal_chain_origin+0xad/0x130
[  315.957455][ T8778]  __msan_chain_origin+0x50/0x90
[  315.962389][ T8778]  __get_compat_msghdr+0x6db/0x9d0
[  315.967941][ T8778]  get_compat_msghdr+0x108/0x2b0
[  315.972870][ T8778]  __sys_sendmmsg+0x755/0xf70
[  315.977556][ T8778]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  315.983041][ T8778]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  315.988581][ T8778]  __do_fast_syscall_32+0x2af/0x480
[  315.993769][ T8778]  do_fast_syscall_32+0x6b/0xd0
[  315.998625][ T8778]  do_SYSENTER_32+0x73/0x90
[  316.003202][ T8778]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  316.009519][ T8778] 
[  316.011843][ T8778] Uninit was stored to memory at:
[  316.016896][ T8778]  kmsan_internal_chain_origin+0xad/0x130
[  316.022633][ T8778]  __msan_chain_origin+0x50/0x90
[  316.027557][ T8778]  __get_compat_msghdr+0x6db/0x9d0
[  316.032653][ T8778]  get_compat_msghdr+0x108/0x2b0
[  316.037572][ T8778]  __sys_sendmmsg+0x755/0xf70
[  316.042231][ T8778]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  316.047614][ T8778]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  316.053142][ T8778]  __do_fast_syscall_32+0x2af/0x480
[  316.058319][ T8778]  do_fast_syscall_32+0x6b/0xd0
[  316.063164][ T8778]  do_SYSENTER_32+0x73/0x90
[  316.067648][ T8778]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  316.074045][ T8778] 
[  316.076361][ T8778] Uninit was stored to memory at:
[  316.081389][ T8778]  kmsan_internal_chain_origin+0xad/0x130
[  316.087092][ T8778]  __msan_chain_origin+0x50/0x90
[  316.092035][ T8778]  __get_compat_msghdr+0x6db/0x9d0
[  316.097142][ T8778]  get_compat_msghdr+0x108/0x2b0
[  316.102193][ T8778]  __sys_sendmmsg+0x755/0xf70
[  316.106894][ T8778]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  316.112390][ T8778]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  316.117946][ T8778]  __do_fast_syscall_32+0x2af/0x480
[  316.123133][ T8778]  do_fast_syscall_32+0x6b/0xd0
[  316.127982][ T8778]  do_SYSENTER_32+0x73/0x90
[  316.132495][ T8778]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  316.138806][ T8778] 
[  316.141147][ T8778] Uninit was stored to memory at:
[  316.146157][ T8778]  kmsan_internal_chain_origin+0xad/0x130
[  316.152121][ T8778]  __msan_chain_origin+0x50/0x90
[  316.157052][ T8778]  __get_compat_msghdr+0x6db/0x9d0
[  316.162171][ T8778]  get_compat_msghdr+0x108/0x2b0
[  316.167091][ T8778]  __sys_sendmmsg+0x755/0xf70
[  316.171748][ T8778]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  316.177103][ T8778]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  316.182644][ T8778]  __do_fast_syscall_32+0x2af/0x480
[  316.187834][ T8778]  do_fast_syscall_32+0x6b/0xd0
[  316.192665][ T8778]  do_SYSENTER_32+0x73/0x90
[  316.197149][ T8778]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  316.203567][ T8778] 
[  316.205895][ T8778] Local variable ----msg_sys@__sys_sendmmsg created at:
[  316.212830][ T8778]  __sys_sendmmsg+0xbb/0xf70
[  316.217512][ T8778]  __sys_sendmmsg+0xbb/0xf70
00:18:52 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  316.254977][   T12] Bluetooth: hci0: command 0x0419 tx timeout
00:18:53 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  316.672286][ T8783] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
[  316.924077][ T8784] IPVS: ftp: loaded support on port[0] = 21
00:18:54 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  317.490521][ T8784] chnl_net:caif_netlink_parms(): no params data found
[  317.687813][ T8784] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.696076][ T8784] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.706029][ T8784] device bridge_slave_0 entered promiscuous mode
[  317.727235][ T8916] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
[  317.823947][ T8784] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.831468][ T8784] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.841087][ T8784] device bridge_slave_1 entered promiscuous mode
[  317.999978][ T8784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  318.054067][ T8784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  318.197665][ T8784] team0: Port device team_slave_0 added
[  318.225299][ T8784] team0: Port device team_slave_1 added
00:18:54 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  318.306121][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  318.314292][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.340464][ T8784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  318.369530][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  318.376712][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.403918][ T8784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.477858][ T8784] device hsr_slave_0 entered promiscuous mode
[  318.520940][ T8784] device hsr_slave_1 entered promiscuous mode
[  318.530109][ T8784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  318.537738][ T8784] Cannot create hsr debugfs directory
[  318.603468][ T8954] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
[  319.060822][ T8784] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  319.087814][ T8784] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  319.120770][ T8784] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  319.160823][ T8784] netdevsim netdevsim1 netdevsim3: renamed from eth3
00:18:56 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  319.589944][ T9003] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
[  319.772532][ T8784] 8021q: adding VLAN 0 to HW filter on device bond0
[  319.885500][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  319.894649][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  319.933512][ T8784] 8021q: adding VLAN 0 to HW filter on device team0
[  319.981175][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  319.991623][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  320.001444][ T8707] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.008796][ T8707] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.061216][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  320.070531][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  320.080410][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  320.090194][ T8707] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.097449][ T8707] bridge0: port 2(bridge_slave_1) entered forwarding state
[  320.106617][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  320.139654][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  320.183944][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  320.194480][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  320.264717][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  320.274960][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  320.285428][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  320.295806][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  320.305460][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  320.314992][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  320.324644][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  320.343142][ T8784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  320.417921][ T8784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  320.436706][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  320.445227][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
00:18:57 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  320.575214][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  320.586042][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  320.653745][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  320.663213][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  320.712000][ T8784] device veth0_vlan entered promiscuous mode
[  320.721643][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  320.730886][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  320.794704][ T8784] device veth1_vlan entered promiscuous mode
[  320.819631][ T9007] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
[  320.951656][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  320.961209][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  320.970745][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  320.980755][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  321.027242][ T8784] device veth0_macvtap entered promiscuous mode
[  321.112452][ T8784] device veth1_macvtap entered promiscuous mode
[  321.224064][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  321.234698][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.248715][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  321.264910][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  321.274495][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  321.284120][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  321.294308][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  321.329676][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  321.340275][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.354092][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  321.365279][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  321.375846][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
00:18:58 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  321.957980][ T9013] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
00:18:59 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  322.509748][ T9017] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
00:18:59 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8004000}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x8200)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
fsetxattr$security_evm(r1, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_PIT(r1, 0xae71, &(0x7f0000000200)={[{0x0, 0x0, 0x1, 0x0, 0xb8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]})

00:19:00 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  323.450945][ T9029] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  323.495482][    C0] hrtimer: interrupt took 111480 ns
[  323.655291][ T9038] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
00:19:00 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80046601, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
ftruncate(r1, 0x8200)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x145042, 0x170cc4b760f4525d)
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4000fff})
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)

00:19:00 executing program 1:
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
flistxattr(r0, 0x0, 0x0)

00:19:00 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  324.732034][ T9054] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
[  324.749702][ T9011] Bluetooth: hci1: command 0x0409 tx timeout
00:19:01 executing program 1:
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40001, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
flistxattr(r0, &(0x7f0000000040), 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200), 0x0)

00:19:01 executing program 1:
syz_mount_image$jfs(&(0x7f0000000380)='jfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='errors=continue,nointegrity,grpquota,quota'])
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))

00:19:02 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
lchown(&(0x7f0000000300)='./file1\x00', 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket$inet6(0xa, 0x5, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000280)=0x8)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="2403000024001d0f00"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0x58, 0x0, 0x708, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004000)
setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x82, &(0x7f0000000000)={r4}, 0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={<r7=>r4, 0x7}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e21, 0x40, @private2, 0x6}}, 0x1, 0x8}, 0x88)

00:19:02 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  325.983359][ T9071] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
[  326.087128][ T9069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9069 comm=syz-executor.1
[  326.182466][ T9073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9073 comm=syz-executor.1
[  326.235936][ T9071] not chained 20000 origins
[  326.240519][ T9071] CPU: 1 PID: 9071 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0
[  326.249102][ T9071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  326.259161][ T9071] Call Trace:
[  326.262470][ T9071]  dump_stack+0x21c/0x280
[  326.266820][ T9071]  kmsan_internal_chain_origin+0x6f/0x130
[  326.272556][ T9071]  ? kmsan_get_metadata+0x116/0x180
[  326.277768][ T9071]  ? kmsan_set_origin_checked+0x95/0xf0
[  326.283326][ T9071]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[  326.289403][ T9071]  ? kmsan_get_metadata+0x116/0x180
[  326.294610][ T9071]  ? kmsan_set_origin_checked+0x95/0xf0
[  326.300169][ T9071]  ? kmsan_get_metadata+0x116/0x180
[  326.305383][ T9071]  ? kmsan_set_origin_checked+0x95/0xf0
[  326.310943][ T9071]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[  326.317020][ T9071]  ? _copy_from_user+0x201/0x310
[  326.321991][ T9071]  ? kmsan_get_metadata+0x116/0x180
[  326.327212][ T9071]  __msan_chain_origin+0x50/0x90
[  326.332164][ T9071]  __get_compat_msghdr+0x6db/0x9d0
[  326.337317][ T9071]  get_compat_msghdr+0x108/0x2b0
[  326.342278][ T9071]  __sys_sendmmsg+0x755/0xf70
[  326.346988][ T9071]  ? kmsan_internal_check_memory+0xb1/0x3d0
[  326.352891][ T9071]  ? __msan_poison_alloca+0xf0/0x120
[  326.358207][ T9071]  ? put_old_timespec32+0x231/0x2d0
[  326.363415][ T9071]  ? kmsan_get_metadata+0x116/0x180
[  326.368618][ T9071]  ? kmsan_get_metadata+0x116/0x180
[  326.373822][ T9071]  ? kmsan_get_metadata+0x116/0x180
[  326.379040][ T9071]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  326.384800][ T9071]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  326.390364][ T9071]  __do_fast_syscall_32+0x2af/0x480
[  326.395578][ T9071]  do_fast_syscall_32+0x6b/0xd0
[  326.400435][ T9071]  do_SYSENTER_32+0x73/0x90
[  326.404949][ T9071]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  326.411291][ T9071] RIP: 0023:0xf7f44549
[  326.415629][ T9071] Code: Bad RIP value.
[  326.419698][ T9071] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159
[  326.428111][ T9071] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140
[  326.436089][ T9071] RDX: 0000000092492805 RSI: 0000000000000000 RDI: 0000000000000000
[  326.444068][ T9071] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  326.452064][ T9071] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  326.460041][ T9071] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  326.468019][ T9071] Uninit was stored to memory at:
[  326.473145][ T9071]  kmsan_internal_chain_origin+0xad/0x130
[  326.478878][ T9071]  __msan_chain_origin+0x50/0x90
[  326.483819][ T9071]  __get_compat_msghdr+0x6db/0x9d0
[  326.488930][ T9071]  get_compat_msghdr+0x108/0x2b0
[  326.493874][ T9071]  __sys_sendmmsg+0x755/0xf70
[  326.498577][ T9071]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  326.503951][ T9071]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  326.509502][ T9071]  __do_fast_syscall_32+0x2af/0x480
[  326.514706][ T9071]  do_fast_syscall_32+0x6b/0xd0
[  326.519564][ T9071]  do_SYSENTER_32+0x73/0x90
[  326.524073][ T9071]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  326.530388][ T9071] 
[  326.532712][ T9071] Uninit was stored to memory at:
[  326.537750][ T9071]  kmsan_internal_chain_origin+0xad/0x130
[  326.543480][ T9071]  __msan_chain_origin+0x50/0x90
[  326.548419][ T9071]  __get_compat_msghdr+0x6db/0x9d0
[  326.553534][ T9071]  get_compat_msghdr+0x108/0x2b0
[  326.558476][ T9071]  __sys_sendmmsg+0x755/0xf70
[  326.563166][ T9071]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  326.568557][ T9071]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  326.574114][ T9071]  __do_fast_syscall_32+0x2af/0x480
[  326.579319][ T9071]  do_fast_syscall_32+0x6b/0xd0
[  326.584179][ T9071]  do_SYSENTER_32+0x73/0x90
[  326.588694][ T9071]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  326.595004][ T9071] 
[  326.597325][ T9071] Uninit was stored to memory at:
[  326.602351][ T9071]  kmsan_internal_chain_origin+0xad/0x130
[  326.608071][ T9071]  __msan_chain_origin+0x50/0x90
[  326.613005][ T9071]  __get_compat_msghdr+0x6db/0x9d0
[  326.618112][ T9071]  get_compat_msghdr+0x108/0x2b0
[  326.623047][ T9071]  __sys_sendmmsg+0x755/0xf70
[  326.627721][ T9071]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  326.633089][ T9071]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  326.638641][ T9071]  __do_fast_syscall_32+0x2af/0x480
[  326.643835][ T9071]  do_fast_syscall_32+0x6b/0xd0
[  326.648680][ T9071]  do_SYSENTER_32+0x73/0x90
[  326.653181][ T9071]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  326.659516][ T9071] 
[  326.661861][ T9071] Uninit was stored to memory at:
[  326.666915][ T9071]  kmsan_internal_chain_origin+0xad/0x130
[  326.672644][ T9071]  __msan_chain_origin+0x50/0x90
[  326.677585][ T9071]  __get_compat_msghdr+0x6db/0x9d0
[  326.682696][ T9071]  get_compat_msghdr+0x108/0x2b0
[  326.687633][ T9071]  __sys_sendmmsg+0x755/0xf70
[  326.692310][ T9071]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  326.697681][ T9071]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  326.703228][ T9071]  __do_fast_syscall_32+0x2af/0x480
[  326.708437][ T9071]  do_fast_syscall_32+0x6b/0xd0
[  326.713289][ T9071]  do_SYSENTER_32+0x73/0x90
[  326.717792][ T9071]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  326.724109][ T9071] 
[  326.726427][ T9071] Uninit was stored to memory at:
[  326.731453][ T9071]  kmsan_internal_chain_origin+0xad/0x130
[  326.737192][ T9071]  __msan_chain_origin+0x50/0x90
[  326.742137][ T9071]  __get_compat_msghdr+0x6db/0x9d0
[  326.747254][ T9071]  get_compat_msghdr+0x108/0x2b0
[  326.752198][ T9071]  __sys_sendmmsg+0x755/0xf70
[  326.756884][ T9071]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  326.762258][ T9071]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  326.767805][ T9071]  __do_fast_syscall_32+0x2af/0x480
[  326.773004][ T9071]  do_fast_syscall_32+0x6b/0xd0
[  326.777860][ T9071]  do_SYSENTER_32+0x73/0x90
[  326.782361][ T9071]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  326.788672][ T9071] 
[  326.790990][ T9071] Uninit was stored to memory at:
[  326.796108][ T9071]  kmsan_internal_chain_origin+0xad/0x130
[  326.801824][ T9071]  __msan_chain_origin+0x50/0x90
[  326.806761][ T9071]  __get_compat_msghdr+0x6db/0x9d0
[  326.811869][ T9071]  get_compat_msghdr+0x108/0x2b0
[  326.816804][ T9071]  __sys_sendmmsg+0x755/0xf70
[  326.821566][ T9071]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  326.826950][ T9071]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  326.832496][ T9071]  __do_fast_syscall_32+0x2af/0x480
[  326.837692][ T9071]  do_fast_syscall_32+0x6b/0xd0
[  326.842542][ T9071]  do_SYSENTER_32+0x73/0x90
[  326.847050][ T9071]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  326.853361][ T9071] 
[  326.855679][ T9071] Uninit was stored to memory at:
[  326.860710][ T9071]  kmsan_internal_chain_origin+0xad/0x130
[  326.866427][ T9071]  __msan_chain_origin+0x50/0x90
[  326.871369][ T9071]  __get_compat_msghdr+0x6db/0x9d0
[  326.876487][ T9071]  get_compat_msghdr+0x108/0x2b0
[  326.881422][ T9071]  __sys_sendmmsg+0x755/0xf70
[  326.886119][ T9071]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  326.891499][ T9071]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  326.897051][ T9071]  __do_fast_syscall_32+0x2af/0x480
[  326.902248][ T9071]  do_fast_syscall_32+0x6b/0xd0
[  326.907105][ T9071]  do_SYSENTER_32+0x73/0x90
[  326.911611][ T9071]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  326.917936][ T9071] 
[  326.920260][ T9071] Local variable ----msg_sys@__sys_sendmmsg created at:
[  326.927192][ T9071]  __sys_sendmmsg+0xbb/0xf70
[  326.931779][ T9071]  __sys_sendmmsg+0xbb/0xf70
[  326.955369][ T9011] Bluetooth: hci1: command 0x041b tx timeout
00:19:03 executing program 1:
r0 = socket(0x21, 0x2, 0x80000)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'vlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x17}})

00:19:04 executing program 1:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ftruncate(r1, 0x2008001)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x2, 0x4)
r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0)
read(r2, &(0x7f0000000180)=""/19, 0xfffffe47)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
socketpair$unix(0x1, 0x1, 0x0, 0x0)

00:19:04 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  327.970859][ T9082] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
00:19:05 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  328.859759][   T28] audit: type=1804 audit(1596845945.455:9): pid=9080 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir138924194/syzkaller.2a9m9h/8/bus" dev="sda1" ino=15745 res=1
[  328.978419][ T9011] Bluetooth: hci1: command 0x040f tx timeout
[  329.088386][ T9086] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
[  329.401222][   T28] audit: type=1804 audit(1596845945.995:10): pid=9087 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir138924194/syzkaller.2a9m9h/8/bus" dev="sda1" ino=15745 res=1
00:19:06 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000", 0x10}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  330.379102][ T9092] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
[  330.694519][   T28] audit: type=1800 audit(1596845947.285:11): pid=9087 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15745 res=0
[  331.058457][    T5] Bluetooth: hci1: command 0x0419 tx timeout
00:19:07 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000100)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@huge_advise={'huge=advise', 0x3d, '\xfa'}}], [{@hash='hash'}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r0)
ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000000)=0x3)

00:19:07 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000", 0x10}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  331.410085][ T9096] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
[  331.504726][ T9098] tmpfs: Bad value for 'huge'
00:19:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x6b, 0x0, 0x2, [0x6]}]}}}], 0x14}, 0x48094)

00:19:08 executing program 1:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=<r0=>0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x57, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0xff90, 0x8}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000140000480012800b0001006964676500003800028008001c00720000000500260001000000050019007e73000005002b0002000000050017"], 0x70}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492778, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r1)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000400)={0x0, 0x6})
fchdir(r1)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000240), &(0x7f00000003c0)=0x4)
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r7, r5, r6)
setgid(r6)
r8 = openat2(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x540, 0x60, 0x11}, 0x18)
sendmsg$IPSET_CMD_TYPE(r8, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000018410294cd0a3bc40579000d06010100000000000000000000000416000300686173683a6e65742c706f72742c6e65740000000e0003006269746d61703a69700000000500010007000000"], 0x44}, 0x1, 0x0, 0x0, 0xc020}, 0x804)

00:19:09 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000", 0x10}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  332.457164][   T28] audit: type=1400 audit(1596845949.045:12): avc:  denied  { write } for  pid=9110 comm="syz-executor.1" name="map_files" dev="proc" ino=35405 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1
[  332.481225][   T28] audit: type=1400 audit(1596845949.045:13): avc:  denied  { add_name } for  pid=9110 comm="syz-executor.1" name="file0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1
[  332.503293][   T28] audit: type=1400 audit(1596845949.055:14): avc:  denied  { create } for  pid=9110 comm="syz-executor.1" name="file0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1
00:19:09 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
r3 = socket$inet(0x2, 0x5, 0x9)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$netlink(r0, &(0x7f0000000380)={&(0x7f00000002c0)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300), 0x0, &(0x7f0000000340)=[@rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @rights={{0x10, 0x1, 0x1, [r4]}}], 0x2c, 0x4002000}, 0x4010)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400000000000000be5da9cf4d", @ANYRES32=r7, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005001900000000000500290000000000"], 0x44}}, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r8)
ioctl$VHOST_GET_VRING_ENDIAN(r8, 0x4008af14, &(0x7f0000000200)={0x1, 0x7ff})
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000140)=r7)
splice(r0, 0x0, r2, 0x0, 0x8001, 0x0)

[  332.738186][ T9116] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
00:19:10 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000", 0x18}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  333.637455][ T9126] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
00:19:10 executing program 1:
syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0xb402, 0x6, &(0x7f0000000440)=[{&(0x7f0000000180)="65672aec57bc443953b7", 0xa, 0x6}, {&(0x7f00000001c0)="825a7ba51893f5e3ca4c0f98730eee3b7ca53eb9946706c8af6ddb3175e05ba0ca1af220e5a9977d23f373cb610652da008e5e010954", 0x36, 0x9}, {&(0x7f0000000200)="b20e5f679f182847ce6b4b15174fbbf8a0fb68823704284e7046455608df3645ef366176833d6bab9b348cc7dc7bc254b27fb3e121ac9d53e25cb857c255729feb66acb33cba44b1926f175bb5b8f17a4011a9f61df5e06ca6327bcb54156ad86c8f37d07bfc1580d3b727a631431e81d49bbec1e792ee854cb0", 0x7a, 0x9}, {&(0x7f0000000280)="f37a1e51de1ce70ca4ee5c35f685b09279b6fe1c1710477b4c725efb3e178146736dd95ed0ecd351b543e4e6eb291f5b19ff515777498b9dabc01bb2f29d132c76d4291f93cd2579aeea7d9e4ccd6e03045cf57c9099678990e365ec9693dce3b637d72e06920543ce2fd63fdec3feed7b867d6d19034ad58ee32e0e9a3b7014bf5b083ce44775d4773cc156a9326578bb86e3b6e4b36d76c250f87719c6e11f2773f822b2972cf0e6e967ff735d1b01703ff465db764b719bb9", 0xba, 0xfffffffc}, {&(0x7f0000000340)="52f68a01e4cf823b06cdbc437e8349296b", 0x11, 0xfffff800}, {&(0x7f0000000380)="a923f2989a5d5586eefd9d0f468b482711d0a4fa192f8b9798eab5d1e2f283a30620ae34d3767dbd2ccce5b3e1b5bd8b0056400aef9394bb306e73758e6449b1df98b7087071ffb48d5496495628bc730fc299348dcd00b2294a181d8fde49faa75407b790fc5bc6e6538145bd1287da934d868dcceabfa7a7cca9ba99260235f7bf8c92c27f", 0x86, 0x5}], 0x80000, &(0x7f00000004c0)=ANY=[@ANYBLOB="75716e6f6555abc1c6b6c49f5d34ff5a6561657572652c646f6e745f61707072616973652c736d61636b66736861743d5d2600"/63])
socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x3, 0x84)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x84)
r2 = gettid()
tkill(r2, 0x34)
perf_event_open(&(0x7f0000000540)={0x1545e507c9fad1a2, 0x70, 0x3f, 0xd7, 0x81, 0x27, 0x0, 0x4, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xdaa2, 0x7}, 0x20a, 0x9, 0x8, 0x1, 0x7, 0x86, 0x401}, r2, 0xa, 0xffffffffffffffff, 0x1)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000080)=r0, 0x1d7)
sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0)

00:19:10 executing program 1:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = openat$dlm_control(0xffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x10001, 0x0)
getsockname$unix(r2, &(0x7f0000000140), &(0x7f00000001c0)=0x6e)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[], 0x48}], 0x1}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="00010000003f0000000000000000"], 0x83888904}}, 0x0)

00:19:11 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000", 0x18}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:19:11 executing program 1:
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@sb={'sb'}, 0x22}]})

[  334.695447][ T9138] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
[  334.789867][ T9140] EXT4-fs: Invalid sb specification: sb=0x0000000000000000",errors=continue
[  334.816643][ T9140] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[  334.906515][ T9140] EXT4-fs: Invalid sb specification: sb=0x0000000000000000",errors=continue
[  334.927659][ T9140] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
00:19:11 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000", 0x18}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:19:11 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="4604ff00", @ANYRES16, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r1], 0x4}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8880)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x8, r3}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r5)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000040)={0x80, 0x401})
getsockopt$packet_buf(r2, 0x107, 0xd, &(0x7f0000000040), &(0x7f0000000200))
r6 = socket(0x1, 0x803, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000240)={@ipv4={[], [], @multicast2}, 0x7d, r3})
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0xc040)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0)

[  335.440771][ T9147] device bond0 entered promiscuous mode
[  335.446477][ T9147] device bond_slave_0 entered promiscuous mode
[  335.453314][ T9147] device bond_slave_1 entered promiscuous mode
[  335.461819][ T9147] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  335.531123][ T9147] device bond0 left promiscuous mode
[  335.536624][ T9147] device bond_slave_0 left promiscuous mode
[  335.543441][ T9147] device bond_slave_1 left promiscuous mode
[  335.759457][ T9151] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
[  335.865524][ T9147] device bond0 entered promiscuous mode
[  335.871383][ T9147] device bond_slave_0 entered promiscuous mode
[  335.878321][ T9147] device bond_slave_1 entered promiscuous mode
[  335.886704][ T9147] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  335.969184][ T9147] device bond0 left promiscuous mode
[  335.974750][ T9147] device bond_slave_0 left promiscuous mode
[  335.981941][ T9147] device bond_slave_1 left promiscuous mode
00:19:12 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="4604ff00", @ANYRES16, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r1], 0x4}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8880)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x8, r3}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r5)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000040)={0x80, 0x401})
getsockopt$packet_buf(r2, 0x107, 0xd, &(0x7f0000000040), &(0x7f0000000200))
r6 = socket(0x1, 0x803, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000240)={@ipv4={[], [], @multicast2}, 0x7d, r3})
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0xc040)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0)

00:19:13 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9", 0x1c}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  336.574545][ T9162] device bond0 entered promiscuous mode
[  336.581383][ T9162] device bond_slave_0 entered promiscuous mode
[  336.588303][ T9162] device bond_slave_1 entered promiscuous mode
[  336.596640][ T9162] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  336.623419][ T9162] device bond0 left promiscuous mode
[  336.629027][ T9162] device bond_slave_0 left promiscuous mode
[  336.635564][ T9162] device bond_slave_1 left promiscuous mode
00:19:13 executing program 2:
r0 = openat$null(0xffffff9c, &(0x7f0000000700)='/dev/null\x00', 0x501040, 0x0)
ioctl$SIOCRSACCEPT(r0, 0x89e3)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
setsockopt$inet_dccp_int(r1, 0x21, 0xa, &(0x7f0000001800)=0x9f4c, 0x4)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000001840)=@generic={0x0, 0x2e22, 0x8})
r2 = creat(&(0x7f0000001880)='./file0\x00', 0x0)
ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f00000018c0))
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000001b00)={&(0x7f0000001900), 0xc, &(0x7f0000001ac0)={&(0x7f0000001940)={0x150, 0x1, 0x3, 0x201, 0x0, 0x0, {0xa}, [@NFQA_CT={0x13c, 0xb, 0x0, 0x1, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_NAT_DST={0xc8, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x41}, 0x21)
r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000001b40)='/dev/nvme-fabrics\x00', 0x400000, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x38, 0x1412, 0x20, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c856}, 0x800)
socket$xdp(0x2c, 0x3, 0x0)
r4 = fsmount(0xffffffffffffffff, 0x0, 0xf8)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0)='nl80211\x00')
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6tnl0\x00', &(0x7f0000001d00)={'sit0\x00', <r6=>0x0, 0x4, 0x3, 0x80, 0x2, 0x18, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x80, 0x0, 0x8}})
sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000001e40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x2c, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040044}, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000001f00)={0x0, 0x68, &(0x7f0000001e80)=[@in6={0xa, 0x4e21, 0x81, @mcast2, 0x20}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x86, @loopback, 0x7}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000001f40)=0xc)
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000001f80)={{0x32, @multicast1, 0x4e23, 0x0, 'sh\x00', 0x0, 0x7fffffff, 0x35}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x10000, 0xffffffe0, 0x4, 0x4}}, 0x44)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x1010040}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x10, 0x3f2, 0x1, 0x70bd2a, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48010}, 0x24040804)

[  336.872758][ T9166] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
00:19:13 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="4604ff00", @ANYRES16, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r1], 0x4}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8880)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x8, r3}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r5)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000040)={0x80, 0x401})
getsockopt$packet_buf(r2, 0x107, 0xd, &(0x7f0000000040), &(0x7f0000000200))
r6 = socket(0x1, 0x803, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000240)={@ipv4={[], [], @multicast2}, 0x7d, r3})
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0xc040)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0)

[  337.459488][ T9175] device bond0 entered promiscuous mode
[  337.465152][ T9175] device bond_slave_0 entered promiscuous mode
[  337.473290][ T9175] device bond_slave_1 entered promiscuous mode
[  337.481751][ T9175] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  337.509380][ T9175] device bond0 left promiscuous mode
[  337.514902][ T9175] device bond_slave_0 left promiscuous mode
[  337.521777][ T9175] device bond_slave_1 left promiscuous mode
00:19:14 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9", 0x1c}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:19:14 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="4604ff00", @ANYRES16, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r1], 0x4}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8880)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x8, r3}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r5)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000040)={0x80, 0x401})
getsockopt$packet_buf(r2, 0x107, 0xd, &(0x7f0000000040), &(0x7f0000000200))
r6 = socket(0x1, 0x803, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000240)={@ipv4={[], [], @multicast2}, 0x7d, r3})
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0xc040)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0)

[  338.150003][ T9181] IPVS: ftp: loaded support on port[0] = 21
[  338.325696][ T9204] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
[  338.374620][ T9205] device bond0 entered promiscuous mode
[  338.380383][ T9205] device bond_slave_0 entered promiscuous mode
[  338.388589][ T9205] device bond_slave_1 entered promiscuous mode
[  338.397052][ T9205] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  338.490557][ T9205] device bond0 left promiscuous mode
[  338.496017][ T9205] device bond_slave_0 left promiscuous mode
[  338.502960][ T9205] device bond_slave_1 left promiscuous mode
[  338.942023][ T9204] not chained 30000 origins
[  338.946590][ T9204] CPU: 1 PID: 9204 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0
[  338.955176][ T9204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  338.965237][ T9204] Call Trace:
[  338.968540][ T9204]  dump_stack+0x21c/0x280
[  338.972887][ T9204]  kmsan_internal_chain_origin+0x6f/0x130
[  338.978624][ T9204]  ? kmsan_get_metadata+0x116/0x180
[  338.983829][ T9204]  ? kmsan_set_origin_checked+0x95/0xf0
[  338.989390][ T9204]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[  338.995490][ T9204]  ? kmsan_get_metadata+0x116/0x180
[  339.000705][ T9204]  ? kmsan_set_origin_checked+0x95/0xf0
[  339.006261][ T9204]  ? kmsan_get_metadata+0x116/0x180
[  339.011479][ T9204]  ? kmsan_set_origin_checked+0x95/0xf0
[  339.017044][ T9204]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[  339.023145][ T9204]  ? _copy_from_user+0x201/0x310
[  339.028105][ T9204]  ? kmsan_get_metadata+0x116/0x180
[  339.033335][ T9204]  __msan_chain_origin+0x50/0x90
[  339.038289][ T9204]  __get_compat_msghdr+0x6db/0x9d0
[  339.043433][ T9204]  get_compat_msghdr+0x108/0x2b0
[  339.048410][ T9204]  __sys_sendmmsg+0x755/0xf70
[  339.053127][ T9204]  ? kmsan_internal_check_memory+0xb1/0x3d0
[  339.059034][ T9204]  ? __msan_poison_alloca+0xf0/0x120
[  339.064359][ T9204]  ? put_old_timespec32+0x231/0x2d0
[  339.069570][ T9204]  ? kmsan_get_metadata+0x116/0x180
[  339.074776][ T9204]  ? kmsan_get_metadata+0x116/0x180
[  339.079982][ T9204]  ? kmsan_get_metadata+0x116/0x180
[  339.085188][ T9204]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  339.090578][ T9204]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  339.096145][ T9204]  __do_fast_syscall_32+0x2af/0x480
[  339.101370][ T9204]  do_fast_syscall_32+0x6b/0xd0
[  339.106240][ T9204]  do_SYSENTER_32+0x73/0x90
[  339.110761][ T9204]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  339.117090][ T9204] RIP: 0023:0xf7f44549
[  339.121154][ T9204] Code: Bad RIP value.
[  339.125220][ T9204] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159
[  339.133640][ T9204] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140
[  339.141635][ T9204] RDX: 0000000092492805 RSI: 0000000000000000 RDI: 0000000000000000
[  339.149613][ T9204] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  339.157592][ T9204] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  339.165568][ T9204] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  339.173549][ T9204] Uninit was stored to memory at:
[  339.178586][ T9204]  kmsan_internal_chain_origin+0xad/0x130
[  339.184317][ T9204]  __msan_chain_origin+0x50/0x90
[  339.189269][ T9204]  __get_compat_msghdr+0x6db/0x9d0
[  339.194378][ T9204]  get_compat_msghdr+0x108/0x2b0
[  339.199314][ T9204]  __sys_sendmmsg+0x755/0xf70
[  339.203989][ T9204]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  339.209363][ T9204]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  339.214908][ T9204]  __do_fast_syscall_32+0x2af/0x480
[  339.220106][ T9204]  do_fast_syscall_32+0x6b/0xd0
[  339.224954][ T9204]  do_SYSENTER_32+0x73/0x90
[  339.229479][ T9204]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  339.235795][ T9204] 
[  339.238117][ T9204] Uninit was stored to memory at:
[  339.243149][ T9204]  kmsan_internal_chain_origin+0xad/0x130
[  339.248864][ T9204]  __msan_chain_origin+0x50/0x90
[  339.253798][ T9204]  __get_compat_msghdr+0x6db/0x9d0
[  339.258992][ T9204]  get_compat_msghdr+0x108/0x2b0
[  339.263923][ T9204]  __sys_sendmmsg+0x755/0xf70
[  339.268596][ T9204]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  339.273965][ T9204]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  339.279529][ T9204]  __do_fast_syscall_32+0x2af/0x480
[  339.284728][ T9204]  do_fast_syscall_32+0x6b/0xd0
[  339.289582][ T9204]  do_SYSENTER_32+0x73/0x90
[  339.294092][ T9204]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  339.300406][ T9204] 
[  339.302725][ T9204] Uninit was stored to memory at:
[  339.307753][ T9204]  kmsan_internal_chain_origin+0xad/0x130
[  339.313467][ T9204]  __msan_chain_origin+0x50/0x90
[  339.318401][ T9204]  __get_compat_msghdr+0x6db/0x9d0
[  339.323511][ T9204]  get_compat_msghdr+0x108/0x2b0
[  339.328444][ T9204]  __sys_sendmmsg+0x755/0xf70
[  339.333123][ T9204]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  339.338578][ T9204]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  339.344123][ T9204]  __do_fast_syscall_32+0x2af/0x480
[  339.349322][ T9204]  do_fast_syscall_32+0x6b/0xd0
[  339.354184][ T9204]  do_SYSENTER_32+0x73/0x90
[  339.358685][ T9204]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  339.364996][ T9204] 
[  339.367313][ T9204] Uninit was stored to memory at:
[  339.372345][ T9204]  kmsan_internal_chain_origin+0xad/0x130
[  339.378064][ T9204]  __msan_chain_origin+0x50/0x90
[  339.382999][ T9204]  __get_compat_msghdr+0x6db/0x9d0
[  339.388109][ T9204]  get_compat_msghdr+0x108/0x2b0
[  339.393044][ T9204]  __sys_sendmmsg+0x755/0xf70
[  339.397718][ T9204]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  339.403174][ T9204]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  339.408717][ T9204]  __do_fast_syscall_32+0x2af/0x480
[  339.413913][ T9204]  do_fast_syscall_32+0x6b/0xd0
[  339.418762][ T9204]  do_SYSENTER_32+0x73/0x90
[  339.423266][ T9204]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  339.429575][ T9204] 
[  339.431914][ T9204] Uninit was stored to memory at:
[  339.436939][ T9204]  kmsan_internal_chain_origin+0xad/0x130
[  339.442653][ T9204]  __msan_chain_origin+0x50/0x90
[  339.447589][ T9204]  __get_compat_msghdr+0x6db/0x9d0
[  339.452698][ T9204]  get_compat_msghdr+0x108/0x2b0
[  339.457630][ T9204]  __sys_sendmmsg+0x755/0xf70
[  339.462307][ T9204]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  339.467678][ T9204]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  339.473220][ T9204]  __do_fast_syscall_32+0x2af/0x480
[  339.478423][ T9204]  do_fast_syscall_32+0x6b/0xd0
[  339.483273][ T9204]  do_SYSENTER_32+0x73/0x90
[  339.487777][ T9204]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  339.494091][ T9204] 
[  339.496405][ T9204] Uninit was stored to memory at:
[  339.501431][ T9204]  kmsan_internal_chain_origin+0xad/0x130
[  339.507163][ T9204]  __msan_chain_origin+0x50/0x90
[  339.512108][ T9204]  __get_compat_msghdr+0x6db/0x9d0
[  339.517215][ T9204]  get_compat_msghdr+0x108/0x2b0
[  339.522151][ T9204]  __sys_sendmmsg+0x755/0xf70
[  339.526838][ T9204]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  339.532223][ T9204]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  339.537785][ T9204]  __do_fast_syscall_32+0x2af/0x480
[  339.542988][ T9204]  do_fast_syscall_32+0x6b/0xd0
[  339.547839][ T9204]  do_SYSENTER_32+0x73/0x90
[  339.552343][ T9204]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  339.558665][ T9204] 
[  339.560989][ T9204] Uninit was stored to memory at:
[  339.566011][ T9204]  kmsan_internal_chain_origin+0xad/0x130
[  339.571730][ T9204]  __msan_chain_origin+0x50/0x90
[  339.576663][ T9204]  __get_compat_msghdr+0x6db/0x9d0
[  339.581792][ T9204]  get_compat_msghdr+0x108/0x2b0
[  339.586729][ T9204]  __sys_sendmmsg+0x755/0xf70
[  339.591420][ T9204]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  339.596811][ T9204]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  339.602372][ T9204]  __do_fast_syscall_32+0x2af/0x480
[  339.607576][ T9204]  do_fast_syscall_32+0x6b/0xd0
[  339.612427][ T9204]  do_SYSENTER_32+0x73/0x90
[  339.616929][ T9204]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  339.623240][ T9204] 
[  339.625562][ T9204] Local variable ----msg_sys@__sys_sendmmsg created at:
[  339.632591][ T9204]  __sys_sendmmsg+0xbb/0xf70
[  339.637197][ T9204]  __sys_sendmmsg+0xbb/0xf70
00:19:16 executing program 1:
pipe(0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x175a83d6137b3860}, 0x8000)
r2 = openat$nvram(0xffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0xa400, 0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x53)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="ff000000000000001c0012000c000100626f6e64000200000c0002000800010004"], 0x3c}}, 0x0)

[  339.801672][ T9221] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  339.885915][ T9221] 8021q: adding VLAN 0 to HW filter on device bond1
[  340.137642][ T9181] chnl_net:caif_netlink_parms(): no params data found
[  340.202548][ T9330] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  340.229299][ T9330] bond2 (uninitialized): Released all slaves
00:19:17 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0c480e000d000000e8bd6efb250309000e000100250d48ff050005001201", 0x2e}], 0x1}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @empty}})
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000400)={'syz_tun\x00', {0x2, 0x0, @rand_addr=0xc0000000}})
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4)

00:19:17 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9", 0x1c}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  340.512348][ T9358] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
[  340.602590][ T9181] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.610511][ T9181] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.620131][ T9181] device bridge_slave_0 entered promiscuous mode
[  340.705747][ T9181] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.713202][ T9181] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.723331][ T9181] device bridge_slave_1 entered promiscuous mode
[  341.056933][ T9181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  341.199913][ T9181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
00:19:18 executing program 1:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='9p\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=', @ANYRESHEX, @ANYBLOB=',posixacl,msize=0x000000007fff'])
r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x81, 0x2, 0x0, "d5dbacaef7ae8f855e8b2a795b659f2bd57fbceaa626c3651cfa9e6c5530df2c", 0x30314142})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @empty}})
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000400)={'syz_tun\x00', {0x2, 0x0, @rand_addr=0xc0000000}})
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x6, 0x1f, 0x101, 0x5, 0x4}, 0x14)

[  341.340970][ T9181] team0: Port device team_slave_0 added
[  341.403500][ T9181] team0: Port device team_slave_1 added
00:19:18 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c91300", 0x1e}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  341.493418][ T9181] batman_adv: batadv0: Adding interface: batadv_slave_0
[  341.501076][ T9181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.527199][ T9181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  341.601912][ T9181] batman_adv: batadv0: Adding interface: batadv_slave_1
[  341.609205][ T9181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.635376][ T9181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  341.659442][ T9395] 9pnet: Could not find request transport: 0xffffffffffffffff
[  341.966984][ T9181] device hsr_slave_0 entered promiscuous mode
[  341.980812][ T9181] device hsr_slave_1 entered promiscuous mode
[  341.990740][ T9181] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  341.998645][ T9181] Cannot create hsr debugfs directory
00:19:19 executing program 1:
set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f0000000000)}, 0x9c40, &(0x7f0000000180)={&(0x7f0000000140)}}, 0xc)
socket$unix(0x1, 0x1, 0x0)
socket$inet(0x2, 0x2, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$bt_sco(r0, &(0x7f0000000080), 0x8)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$inet(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000074774270600fd57215400f32e54b93d8dee322ae0f340218008fb7896964e22705e519bbeeb51cbc08596fb7364939c3c5e8e26d2491302f0c784e93cd83f4a02d4dce6df777d3966f9892abc0955cf83e7ab7209459c594d6b221e275c6b9d7ee92e849454d8eef355996aca2e959237f062afaf6dd699d171301f27213415c368d6ff72ed9e539c6436d27f275e021ad8", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100000000000000008000a0009d35b"], 0x50}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0)

[  342.834202][ T9449] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'.
[  342.891018][ T9455] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'.
00:19:19 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c91300", 0x1e}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  342.991396][ T9181] netdevsim netdevsim2 netdevsim0: renamed from eth0
00:19:19 executing program 1:
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000001900050200000000000000001d01090050001000df030064cdea487315c7a0439f57bec83837980f1a7ec92cd4045b1fc1a8ac63fdf0460f65b2cce146db1e441f604424038c5bcdafa9aa3e6d8b9a66276888de640da6e9ab4004009c"], 0x64}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000004d80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="7f9d130a39831f2cb8d7e046972e50679d11e4885e14e326349fc79e1b4786aa10b71ef3f4108d036ed012e259eeea5dff6ccdb6d0d10a015d3a55edde30ef7b88f76ea8c452c0fcf56efcf8a0128fb4841b8172cd1ae72c98426ccc75de73d3e0c87995cfeef82fbe061063340a0906f09453cf6679658179e20a6b94b8e697685e8b73ab3b867e116ff3051a4a380827d99131cff8b66e072bb2b5d2a90b3badc2d8360cae4f93bd671d52", 0xac}], 0x1, &(0x7f0000000340)=[@op={0x10, 0x117, 0x3, 0x1}, @op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0xb4, 0x117, 0x2, 0xa2, "a46dc14e026a97a221f7f7c2a9991c4716f691ee9a0136ecbf75641b4c9f0ca027019706668d5837d518a28cc5daa54dc08459fb0ca44c0b04fd8c8e175e4b8b2c5ff9601cf1fc14140d44d702155ec2f348611f4284c85bb9e610fee9fca603f7ff60900776c376ae09f507a2dae1902911a995b4a2ad63a0f02393c9d606c44f4413b327d735ea1417c2833c0611e42d4377c7cd7e905313ea667c52cf05510345"}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x7}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0x1}], 0x134, 0x4000}, {0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000500)="63fd8b2ed3ad47973bbc35d55db87c350443b127f193e9321c45ff973496066daac327ce472e00160e4be26b00d3a76007de702ed3dd0fba8bc26f61304e156dcb073a0b86b16c4916c572943561f13920eee45ab393e4ee9d22cc18dfd54c9a63207b7ecec09aa53fd79db3c2b04d1c4d0d5c4b52f645ce633b545b18c5a9eb7f9faebc0cfad21ba964d6ea7541344b3cb8c0031c29e0f30dc7fbe2643a29709845ce79243c759f8a1ea4f3baa4c55de0c7e5b06d9555bf371d7b67fedd069b3ed47bb0f1b1", 0xc6}, {&(0x7f0000000600)="f5c05aa4d13cd356d2fe1f5146a368bee8c473daa517341ba2389b487a607903a419a261691760aad2c1939dd0cd4525725593a2a286f59ae3e0fa2f6707fdb7d43ae6e68c80874f5b6b34f3266e438caab92d76", 0x54}, {&(0x7f0000000680)="b920c423f40c7a16cb5fb1cc0c1209da4d733cbd9d362730d5145b46a00bddae509c323f944c4290346eccdaf5e834add6", 0x31}, {&(0x7f00000006c0)="b6c137ea5b85b878ae7f99fa60f97f1529ab4a53f6c8d482ea88e1874726f9b18b7c102d62a7f4f011d5b4eb5318d93d2f996e0b334d36e07fd093e2a205b8a55d162663be4dd1973878abcbee5eafb7c6c5c2fc3a24bd8dd1ff3c605c57bb339570dc8240b11f3bf920311d94b5df873c336ffb0df7a1d4620a8252a642d1083f0910da6d8055babbc1c239e86ae043f6545b022bb13125931c2adf8fd58848993177067cfaa3793268e0dbd6", 0xad}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="6869850ca8578c65d1703acb7d946d0059bc3da750c5e0bc6a77cc12a45304eff2a98be51898cc600e7ad568a8f21c6108bc031b795d3669bebd4857bfbc56f7696547314d8d1419394f20ef413077df2a5687247c7b06ae6bfb3bdb65ce46c88dad0abf86360f9368b07302622e0cd551bc06f24447f6e4eb48fe7e57b3082015de7b9fc8edea02d563c0b89434dbe2503a327ff58ac057e6d6a3dfb17e7f24565e29b6e9df80b5619a538145e402e344777f301c56ba213b21fa16421a97", 0xbf}], 0x6, &(0x7f0000001880)=[@iv={0x94, 0x117, 0x2, 0x82, "abccee2ed5a8f9b183b18f0624baae1acc3eacd669cf4438ec421735a8af183f99400f3b06624ff2b07650346419af0be0231b5afe1026c020d7ddc636086f307d2ab2dcabffa1285ecc8f1a81302341763a2d5397f0450befe011b4029461e633a2b62800cd2352452eef9c56282a6e8297702f0f82a34d0c4752a817bbd1015b48"}, @assoc={0x10, 0x117, 0x4, 0x2}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0x5}, @assoc={0x10, 0x117, 0x4, 0x2}, @iv={0x9c, 0x117, 0x2, 0x8b, "75ed8eb167e9f20bf5f122bd196b4a0784e932c9373d82175009f04ec3b3b6a2c9dd13948f1fc3cd236817c9951bacf436a504af849378c686d39ee2f0c4b8752bf7e3798c9d95930fc393737bf34655959c53a1cb2d3850da6457953ab62ff03fb257f9266c07265d117deeba01b2997b128b4a215b049cbb534e00482a7bf52806678c6e1cfc83acddbe"}, @assoc={0x10, 0x117, 0x4, 0x200}], 0x180, 0x4000004}, {0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001a00)="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", 0x1000}, {&(0x7f0000002a00)="48d40b07017e3748a50f71268a626ae427c937b4d9baa1539c0c7d4bd58952c80b9de7cff90e5a9b48a1736674d177d047b1deb217cc8912b47b699504fb314f38", 0x41}, {&(0x7f0000002a80)="46abcc21648c3c51421dbf1523ddae59af3096492580a8f86d2d944a0d2d4e3131f7aa16f8cb4ba841ad1e74b5dcc9afa1800c546434d8cb240ffc8ae3d8e43053ac2fbe0c7c50d128b00336a4e3d07900e30f40da1f5857551a021257d52527", 0x60}, {&(0x7f0000002b00)="d95960153a96f82e791c671d870be2b274d90bf545db58839142bbf8e378f4419d7bed5dad1ee0ae811b999679131f62138e0d4db40a98635d87", 0x3a}, {&(0x7f0000002b40)="bbe65f5769d5795c6c1a63c0ba87026b85db740cb248ac", 0x17}, {&(0x7f0000002b80)="a06c198fbfc3719cb03ea751b4aa80b5df28d355b244bc985981ea38456ca791cc83455090a9cdef284efbe3e436e77c7aee9121994467a00a6df8cb2710b085743c3da77e7ad533887c433676144e54a4c17bdfe72cc9897e58aca4928036b3e2defc23a7d03338ff3b3df25d95c657c38041209bd105bdf0ce02b7966e298de7861984af2fa661211ec9d6e7557f9f97abacda90cefb64f5bf92c04bdf62de9d27f2cb9598795bcab4bb787c784db4bc4de1b646a4294396c56bc1a9a61981e645462912420bd66d7f7b06cf268923ec6c96b849985a1de5ba2698cd14dd88f8a87130501fd5", 0xe7}, {&(0x7f0000002c80)="fa1c1e32ef71d4b236931b3e29ad278199e72bf3f5c66abb059947cd6dcfdfc4a9674530695599025a9d91413e16213e8a9ef47b1ded9c4103", 0x39}], 0x7, &(0x7f0000002d00)=[@assoc={0x10, 0x117, 0x4, 0xd0}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0x1010, 0x117, 0x2, 0x1000, "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"}], 0x1040, 0x808}, {0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d40)="8a8a7a66d77579ecf8ec99410320bedb30865b7c047ab2b7285216a6549eab5b198c44bb5ec688b866aece9a07ae86ce38dfad0f6597caab7a54c941754aa1242eb3f3427edb304881196bd50054532bc81f41c76e8b5a762e4ae0df968d86f5b86a907eb1d374688c6434386d626760e10dd23e6fef2eed3972b51d8db83535ab836e7904a586458a01bc03d8b5968102e9d65c7516c2d7d002885b2b0302cd7d0aaa9f45981be58b6157d5cd8a77e81fd4f4db3b893a8eb4aba84ca7e8b4a451b1bc36681836f6ed4873e948b855510d142a33686de87e46655dfa8cfa5f77d7d5e509000e0b342463049dfd5585cdb643", 0xf2}, {&(0x7f0000003e40)="affca57d4f2e5c4335a58f87009561d4b48d91d989b26f6b9fc03e6a65576bdd86048fa7a803c8128438de853681739ceff2c7b5b7682d40febd6ff0cc69a6210bca58ee49b9691cb0b436dada7039dda68300e1d7bdd3a25ed0b3cfdfb2f798543723b700d5cc17ce15bce4655c6647d0c42d2cdf37130867789c7ceb7bae9a557eccf495031da1c3478c1739f92c2a5e1dc661678fb973493db94713d40e6b191bbd7844430934ca920aeb2624e4d400c2cad95fd39cb193994f79b896612770245b69304b45820b8519a28074ff116e6807a80802", 0xd6}, {&(0x7f0000003f40)="3a95fb8b5db596457171fe9008b954a945beafec76246e6b29", 0x19}, {&(0x7f0000003f80)="9a7553a66b31826d64a6b3a3a9f8cb6ed800056e18321f00acc9b60664714eec038f", 0x22}], 0x4, &(0x7f0000004000)=[@assoc={0x10}, @iv={0x84, 0x117, 0x2, 0x71, "399907d28f6b7a141a99bee79d3f42c72e5fd3e4d26930dd4a557c41ab61cc3af29357c8854352a35267df89f416bfb46857a8af1c3169cf1b1e3a073a801e01041b8b68e20766515a3e4a458a6c11402f0f5142d9ecd6aa464340e260e1fa88ec8042858cb1b4c39228c0a6da74230de5"}, @op={0x10}], 0xa4, 0x2000c082}, {0x0, 0x0, &(0x7f0000004180)=[{&(0x7f00000040c0)="1a2aa90504146e6b6d3b5652ea9c629cd6e419445d87f55b292cee92702f76f015b93f6929378952ba0a3648349cd8b0c09e69b8a8ea6c662774bfe3ee3f5ba2795d26900dfc4ee5196905615b1d8bfc73ba94e06feb2a47a78548ec3b3142fa20577dc5795673e93b2d0caa3fce89355a2344a68a7c57370613dce852f194181cf638aa78b5410b671afc55f682555f810cf11a48c1cb21", 0x98}], 0x1, &(0x7f00000041c0)=[@op={0x10}, @op={0x10, 0x117, 0x3, 0x1}], 0x20, 0x24008001}, {0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000004200)="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", 0xfa}, {&(0x7f0000004300)="1ebb1606900c8d571d0992e73b604749e25f5e664d95e23d7aa732f565d8a001bbbce583843c700aacbd6f154b8ac654966d6eb2182ec18b93e8867d889aa7d3a4de515eb68a9c7da661167f44074b1277d7ba05b2b52f068890aa9f00e751cf6bdf859d08bdb9871aa2e67430ec21dde555d97ffc9434fcc5e4112df4ab98e38f76cd88330e6ee249e88065e04da420e6b30d1bae48b724d14f3f630dde12b1e85afb2250a05d1f435c5eda4c63ed10d6995d", 0xb3}, {&(0x7f00000043c0)="6560f7d81bc3d0f313ea91ce5e10b01e76bd6f775e012cb25d719a47ae5afc129964a69c272bb02765660e846b3631efd5280055922391fe2e67e6aef4ab77892135582f2f20086f98bfef11d522778c2b0152372b0bfffb21a0aa56668ebcd218f571195f896990bfc956d37aa62718b711016cf73c1e26e634be882db24b2cf1904432ff29824be91cec8b33497b3788577aeb482a90edcc6059a9d2a335b0e2b831423d058df4e2d8e071ab3bcd5771ee9b3eb3bb11a1cf2ae38433e4c2bdec364bce213648f12ac6c6551c64ee2049928e2dacf66c71a7c718bbc38909917bc8", 0xe2}], 0x3, &(0x7f0000004500)=[@iv={0xe8, 0x117, 0x2, 0xd6, "3a14f8e40071f076860244043ee584cdf8af5d998c0e96957b1ea5d692c20fa907bd5da4e12ebe3ae7a297b0a9b97739c05aad4dd9da0026a216de1062a10d326f677ab1e088a5b3a992511f0ea3a18a2ba61dd24d1639270543f46a727f208d1b885bd9dd4dbe1d77c308e6634a833262fe6558d787310d86e37c642481c6f83842bef6562a42070fafba42acfbf15de4af541d193e34a793c4b7e9cdb37164b61763f0a943ea45561315256ce48de718b64b8486673c7676e39a32faaf3214a1ea1b6faf63afc307ffc1c32a7965d43ec4383ed7f8"}, @iv={0xa8, 0x117, 0x2, 0x95, "eb95cd341994b1a28ae6c908b82032c899f4bbe36dc00f45c03335083492b0abdc7a14aa349114454ca6691a7a14a50e222ad5c6528ef8e8b1ecb2eab2271f7c0f92efa43ecdd69d638fe33694cc501c95c18b4ac2ae3086ec123723ddc3f236ad86a8de9e650f1d4fd07bd50ce96e08ecfe5f7642efb253561b88cd8fd15cd87be291821c81b43b130019f59db7974649a05345bf"}, @assoc={0x10, 0x117, 0x4, 0x81}], 0x1a0, 0x20000005}, {0x0, 0x0, &(0x7f0000004800)=[{&(0x7f00000046c0)="a6a7cbf55bdb6651342469d2896d50533cdb6cb54ce16d5c2256c4f233bf544a2d0acf941a4a0c5fb29fcc9cc5579b20cd0c7bae434545755325a708c721a6fdf36778c81ac53efaaa54b44b4181fe6c35c7b87918214c9309259e9497b2e4ff1189c296588d0a523f7be66013147b54e411c30dccf3e565b9a92c324c677e836c1b0725c8c33e3b", 0x88}, {&(0x7f0000004780)="9ff5780c4f2af65d406568da544770d1c92397eeb80a980e174d46abb6df9c0080e8c3c7f852b9866863e3c193b4d9f74d412f9b12fd0c85c4da339f4b0f0dd7350b9404df9e6437c7330ce5241829c64b3b1bf9bd05575e1c7f217707e9796499ac8c288b3232b5eb1f32155468eacbfb9603e7", 0x74}], 0x2, &(0x7f0000004840)=[@op={0x10, 0x117, 0x3, 0x1}, @iv={0x110, 0x117, 0x2, 0xfe, "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"}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0xbc, 0x117, 0x2, 0xab, "a8b4c64cbefee342318b4ec24617b487d7b835bc097c006c26d7f9a76c52f9c851df61514f577605c42361fdfbba1e8d24b87cee17444cac3b8abf4ae06ce7d67dbcb36aa73fdbce60c5aaf1d0ca284f80d76fa6cf93917b295cb61fe192ebe91ce0fac35429213e94b4e009b206fb1e23773968c48c85f31b829258a1ecdd257215e9691e78ae2c98f4da28985cd0c22172ab196696bc1dc5040f88120d111184cbab0f405123ea66c719"}, @op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10}], 0x21c, 0xc080}, {0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000004a80)="c08b8dd4f44ff6ac75390fe1eeecca764ea6e4eecaff4a", 0x17}, {&(0x7f0000004ac0)="b9eb99b438b8da3fe0de06c4b643dc73ae61b82c5a39fdaa9e7c3c180dcecbdeb72d78a0805d49f34f09c159574bf652ec0f7f68c9efa01996ed2334c2660fff1fb0fce172c65f607e28bc0e8a234651c0daa49c202c99b4960686564ec82265ee43d2d3af846149cd5290ec996e33d7983e8175644c08151eb5403a8ad887f3cf8a9ecf1ed838088c9196a68988936d51713b38f58dba71c144aa09fb46461c6941997e10af4156e3bd013bc84135db3d6c67d859ad9baf005b775121be4e8555fb3d67d45c8f13d93bbacb7dab06a24597a4b602726b8a", 0xd8}, {&(0x7f0000004bc0)="33f6532ade9b1fc75a57467cfadb8c46e2b860bac8b2486b25743588104ed56403f4d268886b0600f27babb7782b18f7d2fad9ac46783d8f7f3597f742c107c550b4322b078d01dcdc73aabba0a438a7bf6270fd8d86a12d5126e98da948a986607f66647b0072711b632863bd1a71a0215a9087ed8186a20905d10a3de65b1c38f1ab1821a088511b0616f11ea36de4b90f2f73ca19b4", 0x97}], 0x3, &(0x7f0000004cc0)=[@iv={0xa4, 0x117, 0x2, 0x92, "d41b14d7044df60b90cdfa8bf164b82fed185cad8c84a0d9d230dbee2795defc2ced8f9161a816b726ce5f527c413af5fc808f8b76e31dc3d81dab40beeb7da21c8dafd105f090b5b3ac12366cea29c50bb67b59e30ca76b664fbf9190f59b24c8b9446cd279ca29197eff68438865870d28a53820d4789df38489e6d3057315efb5b4de3f8923dc3b5d62d2bc31524d145e"}, @op={0x10, 0x117, 0x3, 0x1}], 0xb4, 0x4040000}], 0x8, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000200)={0x1, 'erspan0\x00', 0x4}, 0x18)
sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10000800a4000000000001000100000001649f4e00"/32], 0x28}, 0x1, 0x0, 0x0, 0x28008000}, 0x0)

[  343.036257][ T9181] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  343.109131][ T9181] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  343.157013][ T9181] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  343.300848][ T9466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=9466 comm=syz-executor.1
[  343.314124][ T9467] IPVS: sync thread started: state = MASTER, mcast_ifn = erspan0, syncid = 4, id = 0
[  343.389758][ T9468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=9468 comm=syz-executor.1
[  343.938933][ T9181] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.035943][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  344.045802][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  344.079267][ T9181] 8021q: adding VLAN 0 to HW filter on device team0
[  344.154400][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  344.164435][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  344.174060][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.181465][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[  344.261159][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  344.270525][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  344.280576][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  344.289841][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.297177][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.307750][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  344.318652][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  344.411426][ T9181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  344.422937][ T9181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  344.450770][ T3369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  344.461416][ T3369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  344.472318][ T3369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  344.482829][ T3369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  344.493276][ T3369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  344.503004][ T3369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  344.513209][ T3369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  344.522948][ T3369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  344.553632][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  344.563810][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  344.619802][ T9011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  344.627966][ T9011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  344.677530][ T9181] 8021q: adding VLAN 0 to HW filter on device batadv0
[  344.790277][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  344.800450][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  344.884544][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  344.895286][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  344.921567][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  344.931556][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  344.945561][ T9181] device veth0_vlan entered promiscuous mode
[  344.987026][ T9181] device veth1_vlan entered promiscuous mode
[  345.070075][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  345.079754][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  345.091297][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  345.101260][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  345.144361][ T9181] device veth0_macvtap entered promiscuous mode
[  345.166864][ T9181] device veth1_macvtap entered promiscuous mode
[  345.226248][ T9181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  345.237291][ T9181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.247379][ T9181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  345.258003][ T9181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.272049][ T9181] batman_adv: batadv0: Interface activated: batadv_slave_0
[  345.280395][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  345.289946][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  345.299447][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  345.309624][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  345.343969][ T9181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  345.354714][ T9181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.366932][ T9181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  345.377561][ T9181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.391435][ T9181] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.400077][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  345.410273][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
00:19:23 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed={[], 0x10}}, 0xe)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

00:19:23 executing program 1:
syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0)

00:19:23 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c91300", 0x1e}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:19:24 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r0)
ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000100)=0x150)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006110940000000000a5000000030000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

00:19:24 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed={[], 0x10}}, 0xe)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

00:19:24 executing program 1:
r0 = socket(0x9, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x0)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000004c0)=0x101, 0x4)
sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x58, 0xc, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44001}, 0x4000)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newchain={0x30, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="480000001476fe6152d800010000001000000000"], 0x48}], 0x1}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8982, &(0x7f00000000c0)={0x8, 'veth0\x00', {'veth1_to_bridge\x00'}, 0x20})
r8 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', <r9=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3d000064e75459314f8e90ae27f900004ac9bd4d000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800120000000000"], 0x3c}}, 0x0)

00:19:24 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed={[], 0x10}}, 0xe)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

[  348.304293][ T9503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  348.358866][ T9508] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1548 sclass=netlink_tcpdiag_socket pid=9508 comm=syz-executor.1
[  348.399850][ T9503] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30228 sclass=netlink_tcpdiag_socket pid=9503 comm=syz-executor.1
[  348.454683][ T9508] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  348.473794][ T9508] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1548 sclass=netlink_tcpdiag_socket pid=9508 comm=syz-executor.1
[  348.524452][ T9503] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30228 sclass=netlink_tcpdiag_socket pid=9503 comm=syz-executor.1
00:19:25 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:19:25 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed={[], 0x10}}, 0xe)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

00:19:25 executing program 1:
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
setitimer(0x0, 0x0, &(0x7f0000000040))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r1)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000100)={0xa30000, 0x0, 0x2, <r2=>0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x980921, 0x0, [], @value64=0xfff}})
ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000001240))
set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3)
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)
r3 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xa09c2, 0x0)
ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0)
ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r3, 0x40044104, &(0x7f0000000080)=0x8)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/123, 0x7b}, {0x0}], 0x2)

[  348.736520][   T17] Bluetooth: hci2: command 0x0409 tx timeout
00:19:25 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed={[], 0x10}}, 0xe)

[  348.985613][ T9520] syz-executor.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  349.090862][ T9520] IPVS: ftp: loaded support on port[0] = 21
[  349.326536][ T9521] IPVS: ftp: loaded support on port[0] = 21
00:19:26 executing program 1:
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
setitimer(0x0, 0x0, &(0x7f0000000040))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r1)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000100)={0xa30000, 0x0, 0x2, <r2=>0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x980921, 0x0, [], @value64=0xfff}})
ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000001240))
set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3)
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)
r3 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xa09c2, 0x0)
ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0)
ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r3, 0x40044104, &(0x7f0000000080)=0x8)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/123, 0x7b}, {0x0}], 0x2)

00:19:26 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed={[], 0x10}}, 0xe)

[  349.471508][ T9010] tipc: TX() has been purged, node left!
[  349.721662][ T9569] IPVS: ftp: loaded support on port[0] = 21
00:19:26 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed={[], 0x10}}, 0xe)

00:19:26 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:19:26 executing program 1:
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000100)={0x0, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
r3 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r3)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000040))
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0)

00:19:27 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed={[], 0x10}}, 0xe)

[  350.816887][ T3369] Bluetooth: hci2: command 0x041b tx timeout
00:19:27 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed={[], 0x10}}, 0xe)

00:19:27 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000011c0)={0x0, 0x0, {0x9, 0x3, 0x3008, 0x0, 0xb, 0x3, 0x0, 0x2}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
recvfrom$inet(r2, &(0x7f00000001c0)=""/4096, 0x1000, 0x2060, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
r3 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f0000000100)={0xffffffffffffffff, 0x9})

00:19:28 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed={[], 0x10}}, 0xe)

[  351.574257][ T9615] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET)
00:19:28 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:19:28 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000011c0)={0x0, 0x0, {0x9, 0x3, 0x3008, 0x0, 0xb, 0x3, 0x0, 0x2}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
recvfrom$inet(r2, &(0x7f00000001c0)=""/4096, 0x1000, 0x2060, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
r3 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f0000000100)={0xffffffffffffffff, 0x9})

00:19:28 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed={[], 0x10}}, 0xe)

00:19:29 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed={[], 0x10}}, 0xe)

00:19:29 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000011c0)={0x0, 0x0, {0x9, 0x3, 0x3008, 0x0, 0xb, 0x3, 0x0, 0x2}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
recvfrom$inet(r2, &(0x7f00000001c0)=""/4096, 0x1000, 0x2060, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
r3 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f0000000100)={0xffffffffffffffff, 0x9})

00:19:29 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed={[], 0x10}}, 0xe)

[  352.897940][   T17] Bluetooth: hci2: command 0x040f tx timeout
00:19:29 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000011c0)={0x0, 0x0, {0x9, 0x3, 0x3008, 0x0, 0xb, 0x3, 0x0, 0x2}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
recvfrom$inet(r2, &(0x7f00000001c0)=""/4096, 0x1000, 0x2060, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
r3 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f0000000100)={0xffffffffffffffff, 0x9})

00:19:30 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed={[], 0x10}}, 0xe)

00:19:30 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:19:30 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:19:30 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:19:30 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000011c0)={0x0, 0x0, {0x9, 0x3, 0x3008, 0x0, 0xb, 0x3, 0x0, 0x2}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
recvfrom$inet(r2, &(0x7f00000001c0)=""/4096, 0x1000, 0x2060, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
r3 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)

00:19:31 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:19:31 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000011c0)={0x0, 0x0, {0x9, 0x3, 0x3008, 0x0, 0xb, 0x3, 0x0, 0x2}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
recvfrom$inet(r2, &(0x7f00000001c0)=""/4096, 0x1000, 0x2060, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
r3 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

00:19:31 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed={[], 0x10}}, 0xe)

00:19:31 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000011c0)={0x0, 0x0, {0x9, 0x3, 0x3008, 0x0, 0xb, 0x3, 0x0, 0x2}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
recvfrom$inet(r2, &(0x7f00000001c0)=""/4096, 0x1000, 0x2060, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
r3 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})
socket(0x10, 0x803, 0x0)

[  354.978245][ T3369] Bluetooth: hci2: command 0x0419 tx timeout
00:19:31 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:19:31 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed={[], 0x10}}, 0xe)

00:19:32 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000011c0)={0x0, 0x0, {0x9, 0x3, 0x3008, 0x0, 0xb, 0x3, 0x0, 0x2}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
recvfrom$inet(r2, &(0x7f00000001c0)=""/4096, 0x1000, 0x2060, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
r3 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:32 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed={[], 0x10}}, 0xe)

00:19:32 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000011c0)={0x0, 0x0, {0x9, 0x3, 0x3008, 0x0, 0xb, 0x3, 0x0, 0x2}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
recvfrom$inet(r2, &(0x7f00000001c0)=""/4096, 0x1000, 0x2060, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:32 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:19:33 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:19:33 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:19:33 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000011c0)={0x0, 0x0, {0x9, 0x3, 0x3008, 0x0, 0xb, 0x3, 0x0, 0x2}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
recvfrom$inet(r2, &(0x7f00000001c0)=""/4096, 0x1000, 0x2060, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:33 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

[  356.991033][ T9717] not chained 40000 origins
[  356.995606][ T9717] CPU: 1 PID: 9717 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0
[  357.004190][ T9717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  357.014255][ T9717] Call Trace:
[  357.017566][ T9717]  dump_stack+0x21c/0x280
[  357.021896][ T9717]  kmsan_internal_chain_origin+0x6f/0x130
[  357.027612][ T9717]  ? kmsan_get_metadata+0x116/0x180
[  357.032808][ T9717]  ? kmsan_set_origin_checked+0x95/0xf0
[  357.038348][ T9717]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[  357.044406][ T9717]  ? kmsan_get_metadata+0x116/0x180
[  357.049596][ T9717]  ? kmsan_set_origin_checked+0x95/0xf0
[  357.055130][ T9717]  ? kmsan_get_metadata+0x116/0x180
[  357.060363][ T9717]  ? kmsan_set_origin_checked+0x95/0xf0
[  357.065909][ T9717]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[  357.071974][ T9717]  ? _copy_from_user+0x201/0x310
[  357.076924][ T9717]  ? kmsan_get_metadata+0x116/0x180
[  357.082138][ T9717]  __msan_chain_origin+0x50/0x90
[  357.087075][ T9717]  __get_compat_msghdr+0x6db/0x9d0
[  357.092456][ T9717]  get_compat_msghdr+0x108/0x2b0
[  357.097391][ T9717]  __sys_sendmmsg+0x755/0xf70
[  357.102073][ T9717]  ? kmsan_internal_check_memory+0xb1/0x3d0
[  357.107959][ T9717]  ? __msan_poison_alloca+0xf0/0x120
[  357.113254][ T9717]  ? put_old_timespec32+0x231/0x2d0
[  357.118442][ T9717]  ? kmsan_get_metadata+0x116/0x180
[  357.123654][ T9717]  ? kmsan_get_metadata+0x116/0x180
[  357.128847][ T9717]  ? kmsan_get_metadata+0x116/0x180
[  357.134041][ T9717]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  357.139409][ T9717]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  357.144947][ T9717]  __do_fast_syscall_32+0x2af/0x480
[  357.150142][ T9717]  do_fast_syscall_32+0x6b/0xd0
[  357.154989][ T9717]  do_SYSENTER_32+0x73/0x90
[  357.159487][ T9717]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  357.165800][ T9717] RIP: 0023:0xf7f44549
[  357.169849][ T9717] Code: Bad RIP value.
[  357.173912][ T9717] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159
[  357.182312][ T9717] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140
[  357.190270][ T9717] RDX: 0000000092492805 RSI: 0000000000000000 RDI: 0000000000000000
[  357.198228][ T9717] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  357.206201][ T9717] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  357.214161][ T9717] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  357.222128][ T9717] Uninit was stored to memory at:
[  357.227146][ T9717]  kmsan_internal_chain_origin+0xad/0x130
[  357.232854][ T9717]  __msan_chain_origin+0x50/0x90
[  357.237779][ T9717]  __get_compat_msghdr+0x6db/0x9d0
[  357.242877][ T9717]  get_compat_msghdr+0x108/0x2b0
[  357.247802][ T9717]  __sys_sendmmsg+0x755/0xf70
[  357.252486][ T9717]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  357.257848][ T9717]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  357.263389][ T9717]  __do_fast_syscall_32+0x2af/0x480
[  357.268576][ T9717]  do_fast_syscall_32+0x6b/0xd0
[  357.273427][ T9717]  do_SYSENTER_32+0x73/0x90
[  357.277919][ T9717]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  357.284221][ T9717] 
[  357.286534][ T9717] Uninit was stored to memory at:
[  357.291550][ T9717]  kmsan_internal_chain_origin+0xad/0x130
[  357.297260][ T9717]  __msan_chain_origin+0x50/0x90
[  357.302187][ T9717]  __get_compat_msghdr+0x6db/0x9d0
[  357.307289][ T9717]  get_compat_msghdr+0x108/0x2b0
[  357.312212][ T9717]  __sys_sendmmsg+0x755/0xf70
[  357.316964][ T9717]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  357.322335][ T9717]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  357.327869][ T9717]  __do_fast_syscall_32+0x2af/0x480
[  357.333079][ T9717]  do_fast_syscall_32+0x6b/0xd0
[  357.338004][ T9717]  do_SYSENTER_32+0x73/0x90
[  357.342503][ T9717]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  357.348809][ T9717] 
[  357.351135][ T9717] Uninit was stored to memory at:
[  357.356150][ T9717]  kmsan_internal_chain_origin+0xad/0x130
[  357.361855][ T9717]  __msan_chain_origin+0x50/0x90
[  357.366781][ T9717]  __get_compat_msghdr+0x6db/0x9d0
[  357.371881][ T9717]  get_compat_msghdr+0x108/0x2b0
[  357.376811][ T9717]  __sys_sendmmsg+0x755/0xf70
[  357.381577][ T9717]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  357.386941][ T9717]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  357.392474][ T9717]  __do_fast_syscall_32+0x2af/0x480
[  357.397664][ T9717]  do_fast_syscall_32+0x6b/0xd0
[  357.402502][ T9717]  do_SYSENTER_32+0x73/0x90
[  357.406993][ T9717]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  357.413298][ T9717] 
[  357.415621][ T9717] Uninit was stored to memory at:
[  357.420635][ T9717]  kmsan_internal_chain_origin+0xad/0x130
[  357.426342][ T9717]  __msan_chain_origin+0x50/0x90
[  357.431282][ T9717]  __get_compat_msghdr+0x6db/0x9d0
[  357.436381][ T9717]  get_compat_msghdr+0x108/0x2b0
[  357.441307][ T9717]  __sys_sendmmsg+0x755/0xf70
[  357.445972][ T9717]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  357.451337][ T9717]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  357.456872][ T9717]  __do_fast_syscall_32+0x2af/0x480
[  357.462062][ T9717]  do_fast_syscall_32+0x6b/0xd0
[  357.466901][ T9717]  do_SYSENTER_32+0x73/0x90
[  357.471395][ T9717]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  357.477698][ T9717] 
[  357.480009][ T9717] Uninit was stored to memory at:
[  357.485023][ T9717]  kmsan_internal_chain_origin+0xad/0x130
[  357.490729][ T9717]  __msan_chain_origin+0x50/0x90
[  357.496898][ T9717]  __get_compat_msghdr+0x6db/0x9d0
[  357.502004][ T9717]  get_compat_msghdr+0x108/0x2b0
[  357.506934][ T9717]  __sys_sendmmsg+0x755/0xf70
[  357.511603][ T9717]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  357.516964][ T9717]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  357.522499][ T9717]  __do_fast_syscall_32+0x2af/0x480
[  357.527685][ T9717]  do_fast_syscall_32+0x6b/0xd0
[  357.532524][ T9717]  do_SYSENTER_32+0x73/0x90
[  357.537015][ T9717]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  357.543320][ T9717] 
[  357.545724][ T9717] Uninit was stored to memory at:
[  357.550771][ T9717]  kmsan_internal_chain_origin+0xad/0x130
[  357.556491][ T9717]  __msan_chain_origin+0x50/0x90
[  357.561418][ T9717]  __get_compat_msghdr+0x6db/0x9d0
[  357.566522][ T9717]  get_compat_msghdr+0x108/0x2b0
[  357.571449][ T9717]  __sys_sendmmsg+0x755/0xf70
[  357.576120][ T9717]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  357.581479][ T9717]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  357.587013][ T9717]  __do_fast_syscall_32+0x2af/0x480
[  357.592199][ T9717]  do_fast_syscall_32+0x6b/0xd0
[  357.597038][ T9717]  do_SYSENTER_32+0x73/0x90
[  357.601531][ T9717]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  357.607835][ T9717] 
[  357.610153][ T9717] Uninit was stored to memory at:
[  357.615166][ T9717]  kmsan_internal_chain_origin+0xad/0x130
[  357.620888][ T9717]  __msan_chain_origin+0x50/0x90
[  357.625813][ T9717]  __get_compat_msghdr+0x6db/0x9d0
[  357.630913][ T9717]  get_compat_msghdr+0x108/0x2b0
[  357.635845][ T9717]  __sys_sendmmsg+0x755/0xf70
[  357.640599][ T9717]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  357.645960][ T9717]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  357.651495][ T9717]  __do_fast_syscall_32+0x2af/0x480
[  357.656694][ T9717]  do_fast_syscall_32+0x6b/0xd0
[  357.661542][ T9717]  do_SYSENTER_32+0x73/0x90
[  357.666037][ T9717]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  357.672342][ T9717] 
[  357.674655][ T9717] Local variable ----msg_sys@__sys_sendmmsg created at:
[  357.681576][ T9717]  __sys_sendmmsg+0xbb/0xf70
[  357.686152][ T9717]  __sys_sendmmsg+0xbb/0xf70
00:19:34 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000011c0)={0x0, 0x0, {0x9, 0x3, 0x3008, 0x0, 0xb, 0x3, 0x0, 0x2}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
recvfrom$inet(r2, &(0x7f00000001c0)=""/4096, 0x1000, 0x2060, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:34 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000011c0)={0x0, 0x0, {0x9, 0x3, 0x3008, 0x0, 0xb, 0x3, 0x0, 0x2}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r3 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:35 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000011c0)={0x0, 0x0, {0x9, 0x3, 0x3008, 0x0, 0xb, 0x3, 0x0, 0x2}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:35 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:19:35 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:19:35 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000011c0)={0x0, 0x0, {0x9, 0x3, 0x3008, 0x0, 0xb, 0x3, 0x0, 0x2}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:36 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

00:19:36 executing program 3 (fault-call:1 fault-nth:0):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:19:36 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000011c0)={0x0, 0x0, {0x9, 0x3, 0x3008, 0x0, 0xb, 0x3, 0x0, 0x2}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:36 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

00:19:37 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

00:19:37 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000011c0)={0x0, 0x0, {0x9, 0x3, 0x3008, 0x0, 0xb, 0x3, 0x0, 0x2}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:37 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:19:37 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:19:37 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000011c0)={0x0, 0x0, {0x9, 0x3, 0x3008, 0x0, 0xb, 0x3, 0x0, 0x2}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

[  361.190404][ T9784] IPVS: ftp: loaded support on port[0] = 21
00:19:38 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:19:38 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000011c0)={0x0, 0x0, {0x9, 0x3, 0x3008, 0x0, 0xb, 0x3, 0x0, 0x2}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:38 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

[  362.197445][ T9784] chnl_net:caif_netlink_parms(): no params data found
00:19:38 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r0 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000011c0)={0x0, 0x0, {0x9, 0x3, 0x3008, 0x0, 0xb, 0x3, 0x0, 0x2}})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

[  362.561722][ T9784] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.569181][ T9784] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.579453][ T9784] device bridge_slave_0 entered promiscuous mode
[  362.693441][ T9784] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.700900][ T9784] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.710815][ T9784] device bridge_slave_1 entered promiscuous mode
[  362.941806][ T9784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  363.023676][ T9784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.092198][ T9784] team0: Port device team_slave_0 added
[  363.112820][ T9784] team0: Port device team_slave_1 added
[  363.214512][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  363.221940][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.248162][ T9784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  363.342696][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  363.350583][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.376710][ T9784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  363.516679][ T9784] device hsr_slave_0 entered promiscuous mode
[  363.530278][ T9784] device hsr_slave_1 entered promiscuous mode
[  363.539868][ T9784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  363.547691][ T9784] Cannot create hsr debugfs directory
[  364.001486][ T9784] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  364.056705][ T9784] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  364.087613][ T9784] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  364.128605][ T9784] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  364.468812][ T9784] 8021q: adding VLAN 0 to HW filter on device bond0
[  364.508198][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  364.509793][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  364.538918][ T9784] 8021q: adding VLAN 0 to HW filter on device team0
[  364.567340][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  364.578958][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  364.588436][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.595826][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[  364.635575][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  364.644858][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  364.655107][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  364.664468][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.671880][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.682862][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  364.720940][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  364.753357][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  364.764074][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  364.811159][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  364.821423][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  364.832365][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  364.842851][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  364.852630][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  364.883812][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  364.893613][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  364.928910][ T9784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  365.020521][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  365.028460][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  365.069211][ T9784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  365.132415][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  365.143047][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  365.210747][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  365.222240][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  365.246766][ T9784] device veth0_vlan entered promiscuous mode
[  365.256876][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  365.266950][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  365.309037][ T9784] device veth1_vlan entered promiscuous mode
[  365.347124][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  365.356718][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  365.424423][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  365.434625][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  365.460132][ T9784] device veth0_macvtap entered promiscuous mode
[  365.484174][ T9784] device veth1_macvtap entered promiscuous mode
[  365.544367][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  365.557816][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.568040][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  365.578744][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.588790][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  365.599430][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.613916][ T9784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  365.622793][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  365.632887][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  365.642510][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  365.652800][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  365.719470][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  365.730552][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.740754][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  365.752253][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.762390][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  365.773091][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.787291][ T9784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  365.798852][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  365.809076][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
00:19:44 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:19:44 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:19:44 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

00:19:44 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r0 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000011c0)={0x0, 0x0, {0x9, 0x3, 0x3008, 0x0, 0xb, 0x3, 0x0, 0x2}})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:44 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

00:19:45 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x2, 0x21, @fixed}, 0xe)

00:19:45 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r0 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000011c0)={0x0, 0x0, {0x9, 0x3, 0x3008, 0x0, 0xb, 0x3, 0x0, 0x2}})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:45 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

00:19:45 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0xa, 0x21, @fixed}, 0xe)

00:19:45 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6a, 0x101100)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

[  369.217540][   T27] Bluetooth: hci3: command 0x0409 tx timeout
00:19:45 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x2, 0x21, @fixed}, 0xe)

00:19:46 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x3, @fixed}, 0xe)

00:19:46 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:19:46 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:46 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x2, 0x21, @fixed}, 0xe)

00:19:46 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x1001, @fixed}, 0xe)

00:19:47 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x2, 0x21, @fixed}, 0xe)

00:19:47 executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:47 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:19:47 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x21, @fixed}, 0xe)

00:19:47 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed={[], 0x3}}, 0xe)

00:19:47 executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

[  371.302232][   T17] Bluetooth: hci3: command 0x041b tx timeout
00:19:48 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x21, @fixed}, 0xe)

00:19:48 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:19:48 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed={[], 0x21}}, 0xe)

00:19:48 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x21, @fixed}, 0xe)

00:19:48 executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:48 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:19:49 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x2, 0x21, @fixed}, 0xe)

00:19:49 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x3}, 0xe)

00:19:49 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:49 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x2, 0x21, @fixed}, 0xe)

00:19:49 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x21}, 0xe)

00:19:49 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  373.382199][   T27] Bluetooth: hci3: command 0x040f tx timeout
00:19:50 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:50 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x2, 0x21, @fixed}, 0xe)

00:19:50 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x300}, 0xe)

00:19:50 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x2100}, 0xe)

00:19:50 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x21, @fixed}, 0xe)

00:19:51 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:51 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:19:51 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x21, @fixed}, 0xe)

00:19:51 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x3}, 0xe)

00:19:51 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:52 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:19:52 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x21, @fixed}, 0xe)

[  375.466478][   T17] Bluetooth: hci3: command 0x0419 tx timeout
00:19:52 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x21}, 0xe)

00:19:52 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:52 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:19:53 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0x2)

00:19:53 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:19:53 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:53 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0x2000030e)

00:19:53 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:19:54 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:19:54 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r1)
r2 = gettid()
tkill(r2, 0x34)
mq_notify(r1, &(0x7f0000000140)={0x0, 0x20002c, 0x0, @tid=r2})
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket$inet6(0xa, 0x5, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_deladdr={0x2c, 0x15, 0x100, 0x70bd27, 0x25dfdbfc, {0xa, 0x1f, 0x4, 0xff}, [@IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c090}, 0x40)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x82, &(0x7f0000000000)={r7}, 0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000040)={<r8=>r7, 0x8000}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={r8, 0x6373}, 0x8)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:19:54 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:54 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x2, 0x0, @fixed}, 0xe)

00:19:54 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
fallocate(r1, 0x28, 0xa46, 0x3)

00:19:54 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x3}, 0xe)

00:19:55 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:55 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @fixed}, 0xe)

00:19:55 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x3}, 0xe)

00:19:55 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:19:56 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x3}, 0xe)

00:19:56 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000))

00:19:56 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:56 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x3}, 0xe)

00:19:57 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x82, &(0x7f0000000000)={r3}, 0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r3, 0x9, 0x2, [0x401, 0xc13]}, &(0x7f0000000080)=0xc)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={[], 0x11}}, 0xe)

00:19:57 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x3}, 0xe)

00:19:57 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00'})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:19:57 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0x4d)

00:19:57 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d00", 0xe}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:19:58 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x3}, 0xe)

[  381.678930][T10301] not chained 50000 origins
[  381.683510][T10301] CPU: 1 PID: 10301 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0
[  381.692191][T10301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  381.702264][T10301] Call Trace:
[  381.705587][T10301]  dump_stack+0x21c/0x280
[  381.709955][T10301]  kmsan_internal_chain_origin+0x6f/0x130
[  381.715806][T10301]  ? kmsan_get_metadata+0x116/0x180
[  381.721042][T10301]  ? kmsan_set_origin_checked+0x95/0xf0
[  381.726625][T10301]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[  381.732729][T10301]  ? kmsan_get_metadata+0x116/0x180
[  381.737955][T10301]  ? kmsan_set_origin_checked+0x95/0xf0
[  381.743527][T10301]  ? kmsan_get_metadata+0x116/0x180
[  381.748762][T10301]  ? kmsan_set_origin_checked+0x95/0xf0
[  381.754767][T10301]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[  381.760860][T10301]  ? _copy_from_user+0x201/0x310
[  381.765840][T10301]  ? kmsan_get_metadata+0x116/0x180
[  381.771066][T10301]  __msan_chain_origin+0x50/0x90
[  381.776075][T10301]  __get_compat_msghdr+0x6db/0x9d0
[  381.781218][T10301]  get_compat_msghdr+0x108/0x2b0
[  381.786187][T10301]  __sys_sendmmsg+0x755/0xf70
[  381.790917][T10301]  ? kmsan_internal_check_memory+0xb1/0x3d0
[  381.796840][T10301]  ? __msan_poison_alloca+0xf0/0x120
[  381.802164][T10301]  ? put_old_timespec32+0x231/0x2d0
[  381.807378][T10301]  ? kmsan_get_metadata+0x116/0x180
[  381.812600][T10301]  ? kmsan_get_metadata+0x116/0x180
[  381.817817][T10301]  ? kmsan_get_metadata+0x116/0x180
[  381.823032][T10301]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  381.828437][T10301]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  381.834011][T10301]  __do_fast_syscall_32+0x2af/0x480
[  381.839243][T10301]  do_fast_syscall_32+0x6b/0xd0
[  381.844119][T10301]  do_SYSENTER_32+0x73/0x90
[  381.848647][T10301]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  381.854987][T10301] RIP: 0023:0xf7f44549
[  381.859059][T10301] Code: Bad RIP value.
[  381.863139][T10301] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159
[  381.871568][T10301] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140
[  381.883117][T10301] RDX: 0000000092492805 RSI: 0000000000000000 RDI: 0000000000000000
[  381.891105][T10301] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  381.899102][T10301] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  381.907096][T10301] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  381.915097][T10301] Uninit was stored to memory at:
[  381.920152][T10301]  kmsan_internal_chain_origin+0xad/0x130
[  381.925893][T10301]  __msan_chain_origin+0x50/0x90
[  381.930849][T10301]  __get_compat_msghdr+0x6db/0x9d0
[  381.935987][T10301]  get_compat_msghdr+0x108/0x2b0
[  381.940943][T10301]  __sys_sendmmsg+0x755/0xf70
[  381.945733][T10301]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  381.951125][T10301]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  381.956690][T10301]  __do_fast_syscall_32+0x2af/0x480
[  381.961904][T10301]  do_fast_syscall_32+0x6b/0xd0
[  381.966770][T10301]  do_SYSENTER_32+0x73/0x90
[  381.971287][T10301]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  381.977609][T10301] 
[  381.979942][T10301] Uninit was stored to memory at:
[  381.984988][T10301]  kmsan_internal_chain_origin+0xad/0x130
[  381.990738][T10301]  __msan_chain_origin+0x50/0x90
[  381.995692][T10301]  __get_compat_msghdr+0x6db/0x9d0
[  382.000815][T10301]  get_compat_msghdr+0x108/0x2b0
[  382.005765][T10301]  __sys_sendmmsg+0x755/0xf70
[  382.010457][T10301]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  382.015845][T10301]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  382.021405][T10301]  __do_fast_syscall_32+0x2af/0x480
[  382.026623][T10301]  do_fast_syscall_32+0x6b/0xd0
[  382.031486][T10301]  do_SYSENTER_32+0x73/0x90
[  382.036004][T10301]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  382.042329][T10301] 
[  382.044665][T10301] Uninit was stored to memory at:
[  382.049714][T10301]  kmsan_internal_chain_origin+0xad/0x130
[  382.055457][T10301]  __msan_chain_origin+0x50/0x90
[  382.060418][T10301]  __get_compat_msghdr+0x6db/0x9d0
[  382.065547][T10301]  get_compat_msghdr+0x108/0x2b0
[  382.070500][T10301]  __sys_sendmmsg+0x755/0xf70
[  382.075190][T10301]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  382.080573][T10301]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  382.086131][T10301]  __do_fast_syscall_32+0x2af/0x480
[  382.091343][T10301]  do_fast_syscall_32+0x6b/0xd0
[  382.096212][T10301]  do_SYSENTER_32+0x73/0x90
[  382.100738][T10301]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  382.107148][T10301] 
[  382.109476][T10301] Uninit was stored to memory at:
[  382.114515][T10301]  kmsan_internal_chain_origin+0xad/0x130
[  382.120251][T10301]  __msan_chain_origin+0x50/0x90
[  382.125637][T10301]  __get_compat_msghdr+0x6db/0x9d0
[  382.130760][T10301]  get_compat_msghdr+0x108/0x2b0
[  382.135718][T10301]  __sys_sendmmsg+0x755/0xf70
[  382.140422][T10301]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  382.145807][T10301]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  382.151369][T10301]  __do_fast_syscall_32+0x2af/0x480
[  382.156597][T10301]  do_fast_syscall_32+0x6b/0xd0
[  382.161463][T10301]  do_SYSENTER_32+0x73/0x90
[  382.165983][T10301]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  382.172306][T10301] 
[  382.174635][T10301] Uninit was stored to memory at:
[  382.179675][T10301]  kmsan_internal_chain_origin+0xad/0x130
[  382.185408][T10301]  __msan_chain_origin+0x50/0x90
[  382.190361][T10301]  __get_compat_msghdr+0x6db/0x9d0
[  382.195492][T10301]  get_compat_msghdr+0x108/0x2b0
[  382.200442][T10301]  __sys_sendmmsg+0x755/0xf70
[  382.205131][T10301]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  382.210519][T10301]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  382.216083][T10301]  __do_fast_syscall_32+0x2af/0x480
[  382.221298][T10301]  do_fast_syscall_32+0x6b/0xd0
[  382.226164][T10301]  do_SYSENTER_32+0x73/0x90
[  382.230678][T10301]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  382.237429][T10301] 
[  382.239760][T10301] Uninit was stored to memory at:
[  382.244795][T10301]  kmsan_internal_chain_origin+0xad/0x130
[  382.250526][T10301]  __msan_chain_origin+0x50/0x90
[  382.255479][T10301]  __get_compat_msghdr+0x6db/0x9d0
[  382.260601][T10301]  get_compat_msghdr+0x108/0x2b0
[  382.265547][T10301]  __sys_sendmmsg+0x755/0xf70
[  382.270238][T10301]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  382.275624][T10301]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  382.281188][T10301]  __do_fast_syscall_32+0x2af/0x480
[  382.286402][T10301]  do_fast_syscall_32+0x6b/0xd0
[  382.291266][T10301]  do_SYSENTER_32+0x73/0x90
[  382.295781][T10301]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  382.302103][T10301] 
[  382.304430][T10301] Uninit was stored to memory at:
[  382.309468][T10301]  kmsan_internal_chain_origin+0xad/0x130
[  382.315205][T10301]  __msan_chain_origin+0x50/0x90
[  382.320157][T10301]  __get_compat_msghdr+0x6db/0x9d0
[  382.325281][T10301]  get_compat_msghdr+0x108/0x2b0
[  382.330227][T10301]  __sys_sendmmsg+0x755/0xf70
[  382.334913][T10301]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  382.340296][T10301]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  382.345852][T10301]  __do_fast_syscall_32+0x2af/0x480
[  382.351068][T10301]  do_fast_syscall_32+0x6b/0xd0
[  382.355929][T10301]  do_SYSENTER_32+0x73/0x90
[  382.360443][T10301]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  382.366762][T10301] 
[  382.369093][T10301] Local variable ----msg_sys@__sys_sendmmsg created at:
[  382.376070][T10301]  __sys_sendmmsg+0xbb/0xf70
00:19:58 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r1)
ioctl$UI_END_FF_UPLOAD(r1, 0x406055c9, &(0x7f0000000000)={0x4, 0xdf, {0x57, 0xffff, 0x400, {}, {0x2, 0x6}, @const={0x3, {0x7, 0x5, 0x20, 0x803}}}, {0x0, 0x1, 0x1, {0x947, 0x1000}, {0x9, 0xfff}, @const={0xf9, {0xe, 0x1, 0x800, 0xffff}}}})
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="000003ffffcc"], 0x48}], 0x1}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x14, r4, 0x301}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xf}]}, 0x1c}}, 0x40000)
r5 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff1789c6ea3346691f8c78f822571d146b6aa7ebf86992fc463c390ff90fd39e1304112f7680017c982838ecf57a6e000000000000000000000000003e2715c88d72f2fefa0008b4233db0cfe5a943f26cdc8767f5da4e41af4a3809af8f0407"], 0x48}], 0x1}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x81, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x41)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r6, 0x1}, 0x14}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x8800)
r7 = signalfd4(r0, &(0x7f0000000180)={[0xcf4, 0xb5]}, 0x8, 0x800)
write$P9_RREADDIR(r7, &(0x7f0000000380)={0xc5, 0x29, 0x1, {0xffffffff, [{{0x8, 0x4, 0x4}, 0x9, 0x7, 0x7, './file0'}, {{0xa0, 0x4, 0x2}, 0x0, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x1}, 0x10000, 0xc0, 0x7, './file0'}, {{0x20, 0x2, 0x4}, 0x5, 0x0, 0x7, './file0'}, {{0x20, 0x2, 0x5}, 0xef, 0x9, 0x7, './file0'}, {{0x8, 0x3, 0x1}, 0x20, 0x8, 0x7, './file0'}]}}, 0xc5)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

[  382.380673][T10301]  __sys_sendmmsg+0xbb/0xf70
00:19:59 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x3}, 0xe)

00:19:59 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00'})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

[  382.641351][T10306] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=47 sclass=netlink_tcpdiag_socket pid=10306 comm=syz-executor.3
[  382.769639][T10309] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'.
[  382.806307][T10308] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=47 sclass=netlink_tcpdiag_socket pid=10308 comm=syz-executor.3
00:19:59 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x3}, 0xe)

00:19:59 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = gettid()
tkill(r1, 0x34)
ptrace$setsig(0x4203, r1, 0x180e, &(0x7f0000000000)={0x35, 0x6, 0x28})
r2 = gettid()
tkill(r2, 0x34)
ptrace$setopts(0x4206, r2, 0x4, 0x24)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x9d, @any, 0x7}, 0xe)
r3 = openat$vsock(0xffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x4000, 0x0)
write$FUSE_POLL(r3, &(0x7f00000000c0)={0x18, 0x0, 0x6, {0x9}}, 0x18)
r4 = socket(0x10, 0x803, 0xffff0001)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000100), 0x4)

00:20:00 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00'})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:20:00 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x3}, 0xe)

00:20:00 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x3}, 0xe)

00:20:00 executing program 3:
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$phonet(r0, &(0x7f0000000040)={0x23, 0x3, 0x9, 0x4}, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:00 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x3}, 0xe)

[  384.838475][T10340] IPVS: ftp: loaded support on port[0] = 21
[  385.213356][T10340] chnl_net:caif_netlink_parms(): no params data found
[  385.437267][T10340] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.444760][T10340] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.455361][T10340] device bridge_slave_0 entered promiscuous mode
[  385.547930][T10340] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.555496][T10340] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.566373][T10340] device bridge_slave_1 entered promiscuous mode
[  385.630672][T10340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  385.649117][T10340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  385.761324][T10340] team0: Port device team_slave_0 added
[  385.784592][T10340] team0: Port device team_slave_1 added
[  385.890412][T10340] batman_adv: batadv0: Adding interface: batadv_slave_0
[  385.898053][T10340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  385.924294][T10340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  386.017731][T10340] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.025002][T10340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.051437][T10340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
00:20:02 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d00", 0xe}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:20:02 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r1 = socket(0x9, 0x803, 0xffd)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14)
sendto$packet(r2, &(0x7f0000000040)="62d382d3de9e6fe318eaa4545605b98e13a121e6bd0445614df1fb6a8cae6747a23b0769000000000008", 0x2a, 0x884, &(0x7f0000000280)={0x11, 0x10, r6}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000), 0x0)

00:20:02 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:20:02 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x3}, 0xe)

[  386.219190][T10340] device hsr_slave_0 entered promiscuous mode
[  386.274982][T10340] device hsr_slave_1 entered promiscuous mode
[  386.325911][T10340] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  386.333678][T10340] Cannot create hsr debugfs directory
00:20:03 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x3}, 0xe)

00:20:03 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0x107, 0x4, 0x0, "9548d90b0e2ee3af473cceb67401487b", "e7cdc8c069cf28888299c16da832aba22a37942185f0c7a32bb0abfe0bc2314d5777eb796f733873c954ebde8bfb4a6995a796eb43e29ee8d70df60f9090b0e6f23ec0c10c29007fe9c1a745b0d0ca2451340132b46c48ea060ff0575b9bc9eef9aa54412f1151710e686fe767e70372c27d35e81766c0bc76e9c2143728425f26b266d2e0f01233292476a9a82f59dd94d65189aedd2fa7cb40c5390c17c229fc2906050f2932379ffd6b744523a22a9d38a3f6eee0b4de3e90e3089ba267e27f52b290959a19847923f1a75d562992baf4bf250194bed08f1a0479c2be53f4a26c1e2f047479d55ce418b0eb81d0a3c989"}, 0x107, 0x2)

00:20:03 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:20:03 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

[  387.486803][T10340] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  387.531002][T10340] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  387.597124][T10340] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  387.635853][T10340] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  388.306730][T10340] 8021q: adding VLAN 0 to HW filter on device bond0
[  388.355071][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  388.364318][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  388.393865][T10340] 8021q: adding VLAN 0 to HW filter on device team0
[  388.433115][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  388.443772][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  388.453098][T10026] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.460455][T10026] bridge0: port 1(bridge_slave_0) entered forwarding state
[  388.531021][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  388.540743][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  388.550818][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  388.560164][T10026] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.567482][T10026] bridge0: port 2(bridge_slave_1) entered forwarding state
[  388.576692][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  388.587503][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  388.693144][T10340] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  388.703788][T10340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  388.767357][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  388.778035][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  388.789009][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  388.799673][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  388.810230][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  388.820170][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  388.830780][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  388.840554][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  388.925007][T10340] 8021q: adding VLAN 0 to HW filter on device batadv0
[  389.015967][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  389.027775][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  389.036927][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  389.044921][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  389.253241][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  389.265029][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  389.358139][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  389.368810][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  389.398892][T10340] device veth0_vlan entered promiscuous mode
[  389.409186][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  389.418934][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  389.465471][T10340] device veth1_vlan entered promiscuous mode
[  389.588384][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  389.598538][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  389.621913][T10340] device veth0_macvtap entered promiscuous mode
[  389.654213][T10340] device veth1_macvtap entered promiscuous mode
[  389.737563][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  389.748310][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.758414][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  389.769446][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.779542][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  389.790209][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.800301][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  389.810962][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.825524][T10340] batman_adv: batadv0: Interface activated: batadv_slave_0
[  389.837567][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  389.847303][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  389.856877][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  389.867084][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  389.968431][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  389.979774][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.989951][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  390.000624][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.011096][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  390.021812][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.031984][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  390.043056][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.057212][T10340] batman_adv: batadv0: Interface activated: batadv_slave_1
[  390.077572][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  390.087914][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
00:20:08 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x3}, 0xe)

00:20:08 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="dfd79c3ac6fdc85760b9604a947392eec893ded8fe1915cda7bc2a672ee7d20955a27d40a4ee5e6eb12ca594", 0x2c}], 0x1, &(0x7f0000000100)=[@timestamping={{0x10, 0x1, 0x25, 0xffffffff}}, @mark={{0x10, 0x1, 0x24, 0x1}}, @mark={{0x10, 0x1, 0x24, 0xffff}}, @mark={{0x10, 0x1, 0x24, 0x10001}}], 0x40}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00')
sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="080027bd7000ffdbdf25450000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200088d1}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r3)
openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)

00:20:08 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:20:08 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:20:08 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d00", 0xe}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  392.310485][T10613] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=31 sclass=netlink_tcpdiag_socket pid=10613 comm=syz-executor.3
[  392.436045][T10613] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=31 sclass=netlink_tcpdiag_socket pid=10613 comm=syz-executor.3
00:20:09 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:20:09 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0)
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:20:09 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x9, 0x2000)
r2 = socket$inet6(0xa, 0x5, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x82, &(0x7f0000000000)={r4}, 0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={r4, 0x2}, 0x8)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:09 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x3}, 0xe)

00:20:09 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed, 0x0, 0x3}, 0xe)

00:20:10 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:10 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x3}, 0xe)

00:20:10 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0)
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

[  393.533749][ T3226] Bluetooth: hci4: command 0x0409 tx timeout
00:20:10 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed}, 0xe)

00:20:10 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x3}, 0xe)

00:20:10 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01", 0x15}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:20:10 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed}, 0xe)

00:20:10 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0)
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:20:11 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x3}, 0xe)

00:20:11 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed}, 0xe)

00:20:11 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:20:12 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x3}, 0xe)

00:20:12 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="dfd79c3ac6fdc85760b9604a947392eec893ded8fe1915cda7bc2a672ee7d20955a27d40a4ee5e6eb12ca594", 0x2c}], 0x1, &(0x7f0000000100)=[@timestamping={{0x10, 0x1, 0x25, 0xffffffff}}, @mark={{0x10, 0x1, 0x24, 0x1}}, @mark={{0x10, 0x1, 0x24, 0xffff}}, @mark={{0x10, 0x1, 0x24, 0x10001}}], 0x40}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00')
sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="080027bd7000ffdbdf25450000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200088d1}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r3)
openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)

[  395.618324][T10595] Bluetooth: hci4: command 0x041b tx timeout
[  395.901324][T10685] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=31 sclass=netlink_tcpdiag_socket pid=10685 comm=syz-executor.2
00:20:12 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:20:12 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x3}, 0xe)

00:20:12 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="dfd79c3ac6fdc85760b9604a947392eec893ded8fe1915cda7bc2a672ee7d20955a27d40a4ee5e6eb12ca594", 0x2c}], 0x1, &(0x7f0000000100)=[@timestamping={{0x10, 0x1, 0x25, 0xffffffff}}, @mark={{0x10, 0x1, 0x24, 0x1}}, @mark={{0x10, 0x1, 0x24, 0xffff}}, @mark={{0x10, 0x1, 0x24, 0x10001}}], 0x40}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00')
sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="080027bd7000ffdbdf25450000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200088d1}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r3)
openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)

00:20:12 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01", 0x15}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  396.474802][T10695] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=31 sclass=netlink_tcpdiag_socket pid=10695 comm=syz-executor.2
00:20:13 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x3}, 0xe)

00:20:13 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="dfd79c3ac6fdc85760b9604a947392eec893ded8fe1915cda7bc2a672ee7d20955a27d40a4ee5e6eb12ca594", 0x2c}], 0x1, &(0x7f0000000100)=[@timestamping={{0x10, 0x1, 0x25, 0xffffffff}}, @mark={{0x10, 0x1, 0x24, 0x1}}, @mark={{0x10, 0x1, 0x24, 0xffff}}, @mark={{0x10, 0x1, 0x24, 0x10001}}], 0x40}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00')
sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="080027bd7000ffdbdf25450000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200088d1}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r3)
openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)

00:20:13 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:20:13 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x3}, 0xe)

[  397.255108][T10708] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=31 sclass=netlink_tcpdiag_socket pid=10708 comm=syz-executor.2
00:20:14 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="dfd79c3ac6fdc85760b9604a947392eec893ded8fe1915cda7bc2a672ee7d20955a27d40a4ee5e6eb12ca594", 0x2c}], 0x1, &(0x7f0000000100)=[@timestamping={{0x10, 0x1, 0x25, 0xffffffff}}, @mark={{0x10, 0x1, 0x24, 0x1}}, @mark={{0x10, 0x1, 0x24, 0xffff}}, @mark={{0x10, 0x1, 0x24, 0x10001}}], 0x40}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00')
sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="080027bd7000ffdbdf25450000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200088d1}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r3)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)

[  397.694941][ T3226] Bluetooth: hci4: command 0x040f tx timeout
00:20:14 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x3}, 0xe)

00:20:14 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000140)={r2})
r3 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={r2, 0x0, r3, 0xfffffffe})
ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000000)={0x0, @bt={0x2, 0x9, 0x0, 0x2, 0x1fffc, 0x0, 0x0, 0x1, 0x8, 0x6, 0x5, 0x122a, 0xfffffffa, 0x3, 0x5, 0x33, {0x3, 0x1}, 0x7, 0x9}})
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:14 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

[  398.129919][T10724] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=31 sclass=netlink_tcpdiag_socket pid=10724 comm=syz-executor.2
00:20:15 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="dfd79c3ac6fdc85760b9604a947392eec893ded8fe1915cda7bc2a672ee7d20955a27d40a4ee5e6eb12ca594", 0x2c}], 0x1, &(0x7f0000000100)=[@timestamping={{0x10, 0x1, 0x25, 0xffffffff}}, @mark={{0x10, 0x1, 0x24, 0x1}}, @mark={{0x10, 0x1, 0x24, 0xffff}}, @mark={{0x10, 0x1, 0x24, 0x10001}}], 0x40}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00')
sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="080027bd7000ffdbdf25450000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200088d1}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)

00:20:15 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r1)
ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x8b)

00:20:15 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x3}, 0xe)

00:20:15 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01", 0x15}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  398.868926][T10740] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=31 sclass=netlink_tcpdiag_socket pid=10740 comm=syz-executor.2
00:20:15 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

00:20:15 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x6, 0x80000)
ioctl$TCXONC(r1, 0x540a, 0x1)
r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r2)
ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000140))
ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000040))
fsopen(&(0x7f0000000100)='ocfs2\x00', 0x0)

00:20:15 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="dfd79c3ac6fdc85760b9604a947392eec893ded8fe1915cda7bc2a672ee7d20955a27d40a4ee5e6eb12ca594", 0x2c}], 0x1, &(0x7f0000000100)=[@timestamping={{0x10, 0x1, 0x25, 0xffffffff}}, @mark={{0x10, 0x1, 0x24, 0x1}}, @mark={{0x10, 0x1, 0x24, 0xffff}}, @mark={{0x10, 0x1, 0x24, 0x10001}}], 0x40}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00')
sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="080027bd7000ffdbdf25450000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200088d1}, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)

00:20:15 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:20:16 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @empty=0xffff0000}})

[  399.659016][T10758] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=31 sclass=netlink_tcpdiag_socket pid=10758 comm=syz-executor.2
[  399.784920][    T5] Bluetooth: hci4: command 0x0419 tx timeout
00:20:16 executing program 3:
r0 = openat$null(0xffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:16 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="dfd79c3ac6fdc85760b9604a947392eec893ded8fe1915cda7bc2a672ee7d20955a27d40a4ee5e6eb12ca594", 0x2c}], 0x1, &(0x7f0000000100)=[@timestamping={{0x10, 0x1, 0x25, 0xffffffff}}, @mark={{0x10, 0x1, 0x24, 0x1}}, @mark={{0x10, 0x1, 0x24, 0xffff}}, @mark={{0x10, 0x1, 0x24, 0x10001}}], 0x40}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00')
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)

00:20:16 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:20:17 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, 0x0)

00:20:17 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'virt_wifi0\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x4, 0x2, [0x2, 0x7, 0x2, 0x2, 0x15]}})
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:17 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:20:17 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000", 0x18}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:20:17 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="dfd79c3ac6fdc85760b9604a947392eec893ded8fe1915cda7bc2a672ee7d20955a27d40a4ee5e6eb12ca594", 0x2c}], 0x1, &(0x7f0000000100)=[@timestamping={{0x10, 0x1, 0x25, 0xffffffff}}, @mark={{0x10, 0x1, 0x24, 0x1}}, @mark={{0x10, 0x1, 0x24, 0xffff}}, @mark={{0x10, 0x1, 0x24, 0x10001}}], 0x40}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)

00:20:17 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, 0x0)

00:20:17 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="dfd79c3ac6fdc85760b9604a947392eec893ded8fe1915cda7bc2a672ee7d20955a27d40a4ee5e6eb12ca594", 0x2c}], 0x1, &(0x7f0000000100)=[@timestamping={{0x10, 0x1, 0x25, 0xffffffff}}, @mark={{0x10, 0x1, 0x24, 0x1}}, @mark={{0x10, 0x1, 0x24, 0xffff}}, @mark={{0x10, 0x1, 0x24, 0x10001}}], 0x40}, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)

00:20:17 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed, 0x3}, 0xe)

00:20:18 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r0)
ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)={0x34, 0xfffffff9})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:18 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="dfd79c3ac6fdc85760b9604a947392eec893ded8fe1915cda7bc2a672ee7d20955a27d40a4ee5e6eb12ca594", 0x2c}], 0x1, &(0x7f0000000100)=[@timestamping={{0x10, 0x1, 0x25, 0xffffffff}}, @mark={{0x10, 0x1, 0x24, 0x1}}, @mark={{0x10, 0x1, 0x24, 0xffff}}, @mark={{0x10, 0x1, 0x24, 0x10001}}], 0x40}, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)

00:20:18 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}})
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, 0x0)

00:20:18 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed, 0x3}, 0xe)

00:20:18 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$read(0x1d, r1, &(0x7f0000000040)=""/232, 0xe8)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r1, 0x10, 0x57}, &(0x7f0000000040)={'enc=', 'raw', ' hash=', {'blake2b-256-generic\x00'}}, &(0x7f00000000c0)="10e6c2fa802c5d7b627b4e2b0daf1be4", &(0x7f0000000100)="74ec02b8fa208861ab7414866439d4d31753daa2cd0d5c52834ea9f5e984dd2b0ec0d675cca35720eee4250f86ba567279846923087b8014da85c551c913c3ccc19c9274ecbe2a550abf440b9148ad80b97fc5fc69e10f")
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:19 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="dfd79c3ac6fdc85760b9604a947392eec893ded8fe1915cda7bc2a672ee7d20955a27d40a4ee5e6eb12ca594", 0x2c}], 0x1, &(0x7f0000000100)=[@timestamping={{0x10, 0x1, 0x25, 0xffffffff}}, @mark={{0x10, 0x1, 0x24, 0x1}}, @mark={{0x10, 0x1, 0x24, 0xffff}}, @mark={{0x10, 0x1, 0x24, 0x10001}}], 0x40}, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)

00:20:19 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed, 0x3}, 0xe)

00:20:19 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000", 0x18}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:20:19 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed, 0x3}, 0xe)

00:20:19 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r0)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000040)={0x401, "3c293c0f3af9cde51b2e4b397cb7dd418b701c77755776e9677adf95b71c0a4a", 0x2})
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000000)=0x400)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:19 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)

00:20:19 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:20 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed, 0x3}, 0xe)

00:20:20 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000200000000000002ffff01"], 0x48}], 0x1}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r2)
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x11, 0x11e, &(0x7f0000000380)="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"})
ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000000000)=0x80000001)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$inet6(0xa, 0x5, 0x0)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x82, &(0x7f0000000000)={r6}, 0x8)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000080)={r6, 0x59, 0x3}, 0x8)

00:20:20 executing program 2:
socket$netlink(0x10, 0x3, 0x4)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)

00:20:20 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:20 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed, 0x3}, 0xe)

00:20:20 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'virt_wifi0\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x4, 0x2, [0x2, 0x7, 0x2, 0x2, 0x15]}})
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:21 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)

00:20:21 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000", 0x18}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:20:21 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e23, 0x46, @mcast1, 0x6}, @in6={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, @in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e24, 0x0, @mcast1, 0xfffffff7}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x80000001, @empty, 0x3f}], 0xb0)
fchdir(r1)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$inet6(0xa, 0x5, 0x0)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x82, &(0x7f0000000000)={r5}, 0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={r5, 0xffff, 0x6, [0x1ff, 0x9, 0x3, 0x5, 0x1000, 0x401]}, 0x14)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000100)=0x19, 0x4)
ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000000)=""/249)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:21 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @fixed, 0x3}, 0xe)

00:20:21 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:21 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)

00:20:22 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @fixed, 0x3}, 0xe)

00:20:22 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)

00:20:22 executing program 4:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x1004e20, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e20}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

00:20:22 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

[  405.762232][T10870] IPVS: ftp: loaded support on port[0] = 21
00:20:22 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)

[  405.966408][T10877] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[  406.763158][T10870] chnl_net:caif_netlink_parms(): no params data found
[  406.972569][T10870] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.979968][T10870] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.990356][T10870] device bridge_slave_0 entered promiscuous mode
[  407.017695][T10870] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.025187][T10870] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.035197][T10870] device bridge_slave_1 entered promiscuous mode
[  407.087812][T10870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  407.108655][T10870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  407.170018][T10870] team0: Port device team_slave_0 added
[  407.184336][T10870] team0: Port device team_slave_1 added
[  407.244826][T10870] batman_adv: batadv0: Adding interface: batadv_slave_0
[  407.251934][T10870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  407.278170][T10870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  407.419475][T10870] batman_adv: batadv0: Adding interface: batadv_slave_1
[  407.426744][T10870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  407.453811][T10870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  407.536121][T10870] device hsr_slave_0 entered promiscuous mode
[  407.551235][T10870] device hsr_slave_1 entered promiscuous mode
[  407.562046][T10870] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  407.570125][T10870] Cannot create hsr debugfs directory
[  407.993866][T10870] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  408.009137][T10870] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  408.026880][T10870] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  408.046917][T10870] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  408.260302][T10870] 8021q: adding VLAN 0 to HW filter on device bond0
[  408.290268][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  408.299181][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  408.320243][T10870] 8021q: adding VLAN 0 to HW filter on device team0
[  408.338659][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  408.348191][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  408.358540][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.365896][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[  408.378073][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  408.393464][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  408.403415][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  408.412884][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.420199][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  408.482056][T10595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  408.493515][T10595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  408.504604][T10595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  408.515083][T10595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  408.525613][T10595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  408.536257][T10595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  408.546623][T10595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  408.556442][T10595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  408.574519][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  408.584890][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  408.594053][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  408.617263][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  408.661683][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  408.669520][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  408.699046][T10870] 8021q: adding VLAN 0 to HW filter on device batadv0
[  408.819278][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  408.829590][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  408.877133][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  408.886760][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  408.907125][T10870] device veth0_vlan entered promiscuous mode
[  408.915450][T10595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  408.925248][T10595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  408.961864][T10870] device veth1_vlan entered promiscuous mode
[  409.014358][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  409.023989][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  409.033234][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  409.042446][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  409.065878][T10870] device veth0_macvtap entered promiscuous mode
[  409.088954][T10870] device veth1_macvtap entered promiscuous mode
[  409.125932][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  409.136968][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.147107][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  409.157860][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.167895][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  409.178523][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.188599][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  409.199327][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.209390][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  409.220031][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.233098][T10870] batman_adv: batadv0: Interface activated: batadv_slave_0
[  409.241642][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  409.251413][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  409.261110][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  409.271427][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  409.303620][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  409.314178][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.324391][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  409.335111][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.345164][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  409.355799][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.365887][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  409.376488][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.386639][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  409.397253][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.410449][T10870] batman_adv: batadv0: Interface activated: batadv_slave_1
[  409.421360][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  409.431693][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
00:20:27 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'virt_wifi0\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x4, 0x2, [0x2, 0x7, 0x2, 0x2, 0x15]}})
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:27 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @fixed, 0x3}, 0xe)

00:20:27 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x7, 0x329802)
r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='devices.list\x00', 0x0, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x21, @none, 0x2, 0x1}, 0xe)
r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6a7, 0x220782)
write$capi20(r2, &(0x7f0000000080)={0x10, 0x9, 0x41, 0x81, 0x2, 0x8000}, 0x10)

00:20:27 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)

00:20:27 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f010000001901", 0x1a}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:20:27 executing program 4:
syz_emit_ethernet(0x4a, &(0x7f0000000600)={@broadcast, @local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f2f2f1", 0x10, 0x3a, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2]}, @mcast2, {[], @ndisc_ra}}}}}, 0x0)

00:20:28 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed, 0x3}, 0xe)

00:20:28 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)

00:20:28 executing program 4:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)

00:20:28 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r1 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040), 0x0)
r2 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0xff, 0x28840)
r3 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x4000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
sendmsg$can_raw(r2, &(0x7f0000000400)={&(0x7f0000000340), 0x10, &(0x7f00000003c0)={&(0x7f0000000380)=@can={{0x2, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "f0441f04f3ae823b"}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r4 = gettid()
tkill(r4, 0x34)
perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x4, 0x2, 0x7, 0x3f, 0x0, 0xfff, 0x8000, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, @perf_bp={&(0x7f0000000040), 0xc}, 0xf32861fdbcba5c82, 0x7a0, 0x6, 0xc, 0x3, 0xfff, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x1)
r5 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0xd8, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x49409b2d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x34}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x14000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ac7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x2000c005)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="210000003702000202000000000000000900000000000000", @ANYRES32=r4, @ANYBLOB="0300a4e905870bfe7e90671f262848"], 0x21)

00:20:28 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'virt_wifi0\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x4, 0x2, [0x2, 0x7, 0x2, 0x2, 0x15]}})
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:28 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed, 0x3}, 0xe)

00:20:29 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)

00:20:29 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$inet6(0xa, 0x5, 0x0)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x82, &(0x7f0000000000)={r5}, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)={r5, 0xff, 0x7, [0x1bb5, 0x7, 0x8, 0x1f, 0x0, 0xfff7, 0x3]}, 0x16)
fchdir(r1)
ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000000)=0x8)

00:20:29 executing program 4:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000800)=""/142, 0xffffff07}], 0x1, 0x0, 0x0)

00:20:29 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'virt_wifi0\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x4, 0x2, [0x2, 0x7, 0x2, 0x2, 0x15]}})
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

[  412.732952][T10595] Bluetooth: hci5: command 0x0409 tx timeout
[  412.869656][T11124] not chained 60000 origins
[  412.874210][T11124] CPU: 1 PID: 11124 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0
[  412.882887][T11124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  412.892934][T11124] Call Trace:
[  412.896222][T11124]  dump_stack+0x21c/0x280
[  412.900555][T11124]  kmsan_internal_chain_origin+0x6f/0x130
[  412.906268][T11124]  ? kmsan_get_metadata+0x116/0x180
[  412.911457][T11124]  ? kmsan_set_origin_checked+0x95/0xf0
[  412.916993][T11124]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[  412.923051][T11124]  ? kmsan_get_metadata+0x116/0x180
[  412.928324][T11124]  ? kmsan_set_origin_checked+0x95/0xf0
[  412.933859][T11124]  ? kmsan_get_metadata+0x116/0x180
[  412.939048][T11124]  ? kmsan_set_origin_checked+0x95/0xf0
[  412.944585][T11124]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[  412.950648][T11124]  ? _copy_from_user+0x201/0x310
[  412.955588][T11124]  ? kmsan_get_metadata+0x116/0x180
[  412.960776][T11124]  __msan_chain_origin+0x50/0x90
[  412.965735][T11124]  __get_compat_msghdr+0x6db/0x9d0
[  412.970849][T11124]  get_compat_msghdr+0x108/0x2b0
[  412.975784][T11124]  __sys_sendmmsg+0x755/0xf70
[  412.980470][T11124]  ? kmsan_internal_check_memory+0xb1/0x3d0
[  412.986361][T11124]  ? __msan_poison_alloca+0xf0/0x120
[  412.991655][T11124]  ? put_old_timespec32+0x231/0x2d0
[  412.996843][T11124]  ? kmsan_get_metadata+0x116/0x180
[  413.002032][T11124]  ? kmsan_get_metadata+0x116/0x180
[  413.007221][T11124]  ? kmsan_get_metadata+0x116/0x180
[  413.012413][T11124]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  413.017784][T11124]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  413.023325][T11124]  __do_fast_syscall_32+0x2af/0x480
[  413.028520][T11124]  do_fast_syscall_32+0x6b/0xd0
[  413.033362][T11124]  do_SYSENTER_32+0x73/0x90
[  413.037857][T11124]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  413.044172][T11124] RIP: 0023:0xf7f44549
[  413.048222][T11124] Code: Bad RIP value.
[  413.052282][T11124] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159
[  413.060688][T11124] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140
[  413.068650][T11124] RDX: 0000000092492805 RSI: 0000000000000000 RDI: 0000000000000000
[  413.076613][T11124] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  413.084580][T11124] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  413.093503][T11124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  413.103847][T11124] Uninit was stored to memory at:
[  413.108866][T11124]  kmsan_internal_chain_origin+0xad/0x130
[  413.114574][T11124]  __msan_chain_origin+0x50/0x90
[  413.119502][T11124]  __get_compat_msghdr+0x6db/0x9d0
[  413.124603][T11124]  get_compat_msghdr+0x108/0x2b0
[  413.129534][T11124]  __sys_sendmmsg+0x755/0xf70
[  413.134205][T11124]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  413.139567][T11124]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  413.145104][T11124]  __do_fast_syscall_32+0x2af/0x480
[  413.150291][T11124]  do_fast_syscall_32+0x6b/0xd0
[  413.155133][T11124]  do_SYSENTER_32+0x73/0x90
[  413.159639][T11124]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  413.165942][T11124] 
[  413.168254][T11124] Uninit was stored to memory at:
[  413.173269][T11124]  kmsan_internal_chain_origin+0xad/0x130
[  413.178976][T11124]  __msan_chain_origin+0x50/0x90
[  413.183905][T11124]  __get_compat_msghdr+0x6db/0x9d0
[  413.189005][T11124]  get_compat_msghdr+0x108/0x2b0
[  413.193931][T11124]  __sys_sendmmsg+0x755/0xf70
[  413.198597][T11124]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  413.203958][T11124]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  413.209492][T11124]  __do_fast_syscall_32+0x2af/0x480
[  413.214705][T11124]  do_fast_syscall_32+0x6b/0xd0
[  413.219547][T11124]  do_SYSENTER_32+0x73/0x90
[  413.224053][T11124]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  413.230356][T11124] 
[  413.232676][T11124] Uninit was stored to memory at:
[  413.237693][T11124]  kmsan_internal_chain_origin+0xad/0x130
[  413.243412][T11124]  __msan_chain_origin+0x50/0x90
[  413.248339][T11124]  __get_compat_msghdr+0x6db/0x9d0
[  413.253440][T11124]  get_compat_msghdr+0x108/0x2b0
[  413.258387][T11124]  __sys_sendmmsg+0x755/0xf70
[  413.263073][T11124]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  413.268458][T11124]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  413.274006][T11124]  __do_fast_syscall_32+0x2af/0x480
[  413.279195][T11124]  do_fast_syscall_32+0x6b/0xd0
[  413.284038][T11124]  do_SYSENTER_32+0x73/0x90
[  413.288530][T11124]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  413.294837][T11124] 
[  413.297151][T11124] Uninit was stored to memory at:
[  413.302166][T11124]  kmsan_internal_chain_origin+0xad/0x130
[  413.307880][T11124]  __msan_chain_origin+0x50/0x90
[  413.312808][T11124]  __get_compat_msghdr+0x6db/0x9d0
[  413.317912][T11124]  get_compat_msghdr+0x108/0x2b0
[  413.322835][T11124]  __sys_sendmmsg+0x755/0xf70
[  413.327504][T11124]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  413.332873][T11124]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  413.338411][T11124]  __do_fast_syscall_32+0x2af/0x480
[  413.343601][T11124]  do_fast_syscall_32+0x6b/0xd0
[  413.348444][T11124]  do_SYSENTER_32+0x73/0x90
[  413.352944][T11124]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  413.359249][T11124] 
[  413.361563][T11124] Uninit was stored to memory at:
[  413.366671][T11124]  kmsan_internal_chain_origin+0xad/0x130
[  413.372382][T11124]  __msan_chain_origin+0x50/0x90
[  413.377313][T11124]  __get_compat_msghdr+0x6db/0x9d0
[  413.382414][T11124]  get_compat_msghdr+0x108/0x2b0
[  413.387351][T11124]  __sys_sendmmsg+0x755/0xf70
[  413.392047][T11124]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  413.397411][T11124]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  413.403123][T11124]  __do_fast_syscall_32+0x2af/0x480
[  413.408514][T11124]  do_fast_syscall_32+0x6b/0xd0
[  413.413355][T11124]  do_SYSENTER_32+0x73/0x90
[  413.417848][T11124]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  413.424151][T11124] 
[  413.426464][T11124] Uninit was stored to memory at:
[  413.431479][T11124]  kmsan_internal_chain_origin+0xad/0x130
[  413.437191][T11124]  __msan_chain_origin+0x50/0x90
[  413.442115][T11124]  __get_compat_msghdr+0x6db/0x9d0
[  413.447232][T11124]  get_compat_msghdr+0x108/0x2b0
[  413.452164][T11124]  __sys_sendmmsg+0x755/0xf70
[  413.456842][T11124]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  413.462207][T11124]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  413.467744][T11124]  __do_fast_syscall_32+0x2af/0x480
[  413.472935][T11124]  do_fast_syscall_32+0x6b/0xd0
[  413.477774][T11124]  do_SYSENTER_32+0x73/0x90
[  413.482270][T11124]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  413.488583][T11124] 
[  413.490895][T11124] Uninit was stored to memory at:
[  413.495909][T11124]  kmsan_internal_chain_origin+0xad/0x130
[  413.501615][T11124]  __msan_chain_origin+0x50/0x90
[  413.506542][T11124]  __get_compat_msghdr+0x6db/0x9d0
[  413.511682][T11124]  get_compat_msghdr+0x108/0x2b0
[  413.516623][T11124]  __sys_sendmmsg+0x755/0xf70
[  413.521302][T11124]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  413.526677][T11124]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  413.532218][T11124]  __do_fast_syscall_32+0x2af/0x480
[  413.537411][T11124]  do_fast_syscall_32+0x6b/0xd0
[  413.542255][T11124]  do_SYSENTER_32+0x73/0x90
[  413.546754][T11124]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  413.553061][T11124] 
[  413.555405][T11124] Local variable ----msg_sys@__sys_sendmmsg created at:
[  413.562337][T11124]  __sys_sendmmsg+0xbb/0xf70
[  413.566917][T11124]  __sys_sendmmsg+0xbb/0xf70
00:20:31 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f010000001901", 0x1a}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:20:31 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed, 0x3}, 0xe)

00:20:31 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:20:31 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r1 = gettid()
tkill(r1, 0x34)
sched_setparam(r1, &(0x7f0000000000)=0x11d3)

00:20:31 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x80000000004)
write(r0, &(0x7f000058bfe4)="29000000140003b7ff02003f040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29)

00:20:31 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'virt_wifi0\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x4, 0x2, [0x2, 0x7, 0x2, 0x2, 0x15]}})
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

[  414.822062][T10595] Bluetooth: hci5: command 0x041b tx timeout
00:20:31 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040))
setreuid(0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
memfd_create(0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3})
openat$null(0xffffffffffffff9c, &(0x7f0000001d00)='/dev/null\x00', 0x2a0241, 0x0)

00:20:31 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @fixed, 0x3}, 0xe)

00:20:31 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:20:31 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r1)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000000)={0x7, 0x5, 0x7, 0x40, 0xffffff01, 0x2800})
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:31 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'virt_wifi0\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x4, 0x2, [0x2, 0x7, 0x2, 0x2, 0x15]}})
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:32 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x16, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "66dad6d08a5f9e3c", "e9a3008dfacb1772eda43dcb7ee358547aaeec88934189655edc5ace54758056", "e765eefb", "290544acd70910b1"}, 0x38)
sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8)

[  416.072489][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
00:20:32 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f010000001901", 0x1a}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:20:32 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @fixed, 0x3}, 0xe)

00:20:32 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
sync_file_range(r0, 0x6, 0x81, 0x4)

00:20:32 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:20:32 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'virt_wifi0\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x4, 0x2, [0x2, 0x7, 0x2, 0x2, 0x15]}})
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:33 executing program 4:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/raw/rawctl\x00', 0x5c440, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0)
write$9p(r0, &(0x7f0000001400)="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", 0x600)
sendfile(r0, r1, 0x0, 0x12e00)

00:20:33 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @fixed, 0x3}, 0xe)

00:20:33 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe)

00:20:33 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x22941, 0x0)
bind$qrtr(r1, &(0x7f0000000080)={0x2a, 0x3, 0x2}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x38, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x1c, 0x18, {0x5, @bearer=@l2={'ib', 0x3a, 'veth0_to_bond\x00'}}}}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4008801}, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
sendmsg(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000100)="bcad96b35d2eabbfb7a532468c8522643c522a804095ea055db109c29b48a2f2345657bb70640d214d6fcbc79a3dd3c2e5fc349f0c9d89b851175e614534e15176a809c4065438b1b4fd9a3526b605b59fa4f243819b1f0f91aca80ba66a81cf2fa6b04b89ff2c169979e02783d5ba0d1f970b9691b06d5cbea1df6219", 0x7d}, {&(0x7f0000000180)="18b6c10f5d97f55953fa898f8aef911c6ebeda5f93e5e4204935a20a7e893301534199d7ed407c2837c93d3251463efdf99e46c2b18707ae5e0d0add684281b45261ccd5af1d12293048cc90652759ae970e12a1a7b6ae71a7e5e701c6158fbdcb61dad1750f47dfd637b6565eac09f07154dc85da514e7320b32dd6257a5b9b8d8107ddeeab2b44d251adfc0f5b4a0b9b3d6c9070dda24b4114cd4a88f273a1f1880e99723faa45fe82b3338968a577331e8dd25c01c63f048fef563334af6c236c1b54343d532927a19af91f33f555f1e11aae1c95b63146", 0xd9}, {&(0x7f0000000280)="8505b14266721bd55a57ff37e8ae9e90f3eebfcca90db461b9e620db57f03717c2bd08e34a33b63f7bacf540bff54068a7211e85dc8c667ac26a9f7d80b3877f22c886eb89d8f79743b5818a2d1855f3b5f698b1a390d7", 0x57}, {&(0x7f0000000340)="b9cda619612f8640c19b4dbf67a8b4f6a7729931c9c89b680f4d36fc7d2887fa32a6ba6a394bead6ecad68f39e1316a2b039", 0x32}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="39d45a2757476b6b6c3f6670d636bd0adb2502bf1415cb", 0x17}, {&(0x7f00000023c0)="791f401086b92cc90b2da673a523e40c061788e4ca10779c7af4bf5f8cf45f3ac53763845de992", 0x27}, {&(0x7f0000002400)="3df9482bb543ec89592c2e4caf084fd2d1d3b560448b74baac188086746894814a83b66ce300f899c21c4cd30c", 0x2d}, {&(0x7f0000002440)="b17b4d1c8dcb6d8bc4368c3b8d67595d65f95e1aa58f686d0141092664", 0x1d}], 0xa, &(0x7f0000002500)=[{0x20, 0x88, 0x4, "e9e9a59b49bf3aaf0f7e42586d8dc84527187f"}], 0x20}, 0x8004)
accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x10, 0x40000)

00:20:33 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'virt_wifi0\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x4, 0x2, [0x2, 0x7, 0x2, 0x2, 0x15]}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

[  416.892545][T10595] Bluetooth: hci5: command 0x040f tx timeout
[  417.004846][T11210] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11210 comm=syz-executor.3
[  417.150561][T11213] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11213 comm=syz-executor.3
[  417.159503][   T28] audit: type=1804 audit(1596846033.760:15): pid=11212 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir962948705/syzkaller.mwgbNg/28/file0" dev="sda1" ino=16021 res=1
[  417.188908][   T28] audit: type=1800 audit(1596846033.760:16): pid=11212 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16021 res=0
00:20:33 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe)

00:20:33 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

[  417.554341][   T28] audit: type=1800 audit(1596846033.860:17): pid=11218 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16021 res=0
00:20:34 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x0, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:20:34 executing program 4:
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x84, 0x0, @private2, @local}}}}, 0x0)

00:20:34 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x7f, 0x3, 0x60, 0x1, 0x3, 0x3, 0x3, 0x93, 0x34, 0x5, 0x7, 0x1f, 0x20, 0x1, 0x5, 0x5, 0x8}, [{0x6474e551, 0x81, 0x80, 0x4, 0xffffff7f, 0x8000, 0x7fffffff, 0x100}], "96496ad971ec1e8d62e2add634970216aed1e0d1951ecc4aac4b556b7ad4bd8b9131b4f3917da2c0df3afbb87ba818fbab180f80fd427cf786799385a3", [[], [], [], [], [], [], [], [], [], []]}, 0xa91)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x24, @fixed={[], 0x10}, 0x0, 0x1}, 0xe)

00:20:34 executing program 5:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:34 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe)

00:20:34 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:20:35 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:35 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1400, 0x0)

00:20:35 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:20:35 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:35 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x4e22, @rand_addr=0x64010102}})

[  418.979850][ T9011] Bluetooth: hci5: command 0x0419 tx timeout
[  419.522247][T11252] mmap: syz-executor.4 (11252) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
00:20:36 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x8, @fixed={[], 0x11}}, 0xe)

00:20:36 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x0, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:20:36 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:36 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:36 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed}, 0xe)

00:20:36 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1400, 0x0)

00:20:36 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:36 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed}, 0xe)

00:20:37 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x5, [0x2, 0x8, 0x1ff, 0x81, 0x1]}, 0xe)

00:20:37 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:37 executing program 4:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600)
sendfile(r0, r1, 0x0, 0x12e00)

00:20:37 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x0, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:20:37 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = mq_open(&(0x7f0000000180)='eth0\x00\xd3\x1eCF\x8e\xc1\xbel\x80N\x12\x14\xec\xee\xe0\tR\xad\xf0\x88\xbe\xbc\xf3\xef^4\xe2Q\x15\xa7CEW\xa4dp\xeb\x8f7\xae\xeeUHf\x1f\x01\xf8\xbc\xb2\x13\x93\x02\xee\x98i\xa6\x9ce\x06j\x8c_7,3G\x10s\vIBt\x03\x92V\x90\xab\xa4\xcb\x80\xdb\x9344\x98\xb6E\xde\x1a\x87\xa8A\xf8\xf5 \x1fc\xa1\xf1\x12\xdcHL\'\xde\xf3l\x99\x1c\x1ci\\i\v\x9d\xc0\x94\xebA\xa2w\xfe\x8f\x9f5<e\xd3\xd6\xb6\xa5@\xe0\xdd\xd2\x82\xba\x98\xd2|\x05+\xc18\xfa\xde\xe9&\xe3\r\x8b\x85\x96O\x895\xa9_\x7f\x9f\xd7!\xd38%\x83\xd8<\xdc]\xab\xb0\x01A\xd6\xfe\x8a\xf6\x98/\xf4N\x03\x0e\xa5-c\xc1\xf4\xe3\xc7\xcb\xd8eU\xc9\xaa0\x06\xe0\xde7\x99\xc0\xfa\x8a\r\xcb?G\x16\xe0\xba\xd7\\\xaf\x88\xd9\x12\x9a\x00\x00\x00\x00\x00\x00\x00\x00$\xe9F`\xb2\xd9\xa9\x94\x7f\x06w\x81\xd1}-Q\xda\xb6g\xfb\x8dX\xe0n\xceQnc\x95\xfe\xe5\xa95\xf0\xd3n\xb0\xf8\x1b;\xc2P}Iw\xa4\xc8\xb1[QY\xaa2)@u@1\xe8T\xfa\t\xcb\xa4W\xab\x1b/\x9b\xdf\v\x99\x1d4\x96>\xcd \x004\x91\xcb,\x8b\x02\xa5\x89\xd1Q\x9c\xc3\xcb\x9dwx\\\x8a\x95\xad\xc1Q', 0x0, 0x0, 0x0)
r1 = mq_open(&(0x7f0000000180)='eth0\x00\xd3\x1eCF\x8e\xc1\xbel\x80N\x12\x14\xec\xee\xe0\tR\xad\xf0\x88\xbe\xbc\xf3\xef^4\xe2Q\x15\xa7CEW\xa4dp\xeb\x8f7\xae\xeeUHf\x1f\x01\xf8\xbc\xb2\x13\x93\x02\xee\x98i\xa6\x9ce\x06j\x8c_7,3G\x10s\vIBt\x03\x92V\x90\xab\xa4\xcb\x80\xdb\x9344\x98\xb6E\xde\x1a\x87\xa8A\xf8\xf5 \x1fc\xa1\xf1\x12\xdcHL\'\xde\xf3l\x99\x1c\x1ci\\i\v\x9d\xc0\x94\xebA\xa2w\xfe\x8f\x9f5<e\xd3\xd6\xb6\xa5@\xe0\xdd\xd2\x82\xba\x98\xd2|\x05+\xc18\xfa\xde\xe9&\xe3\r\x8b\x85\x96O\x895\xa9_\x7f\x9f\xd7!\xd38%\x83\xd8<\xdc]\xab\xb0\x01A\xd6\xfe\x8a\xf6\x98/\xf4N\x03\x0e\xa5-c\xc1\xf4\xe3\xc7\xcb\xd8eU\xc9\xaa0\x06\xe0\xde7\x99\xc0\xfa\x8a\r\xcb?G\x16\xe0\xba\xd7\\\xaf\x88\xd9\x12\x9a\x00\x00\x00\x00\x00\x00\x00\x00$\xe9F`\xb2\xd9\xa9\x94\x7f\x06w\x81\xd1}-Q\xda\xb6g\xfb\x8dX\xe0n\xceQnc\x95\xfe\xe5\xa95\xf0\xd3n\xb0\xf8\x1b;\xc2P}Iw\xa4\xc8\xb1[QY\xaa2)@u@1\xe8T\xfa\t\xcb\xa4W\xab\x1b/\x9b\xdf\v\x99\x1d4\x96>\xcd \x004\x91\xcb,\x8b\x02\xa5\x89\xd1Q\x9c\xc3\xcb\x9dwx\\\x8a\x95\xad\xc1Q', 0x842, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x2)

00:20:37 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed}, 0xe)

00:20:37 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x8, 0x2}, 0xe)
syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x111040)
r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r1)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000040))

[  421.151823][   T28] audit: type=1804 audit(1596846037.750:18): pid=11288 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir962948705/syzkaller.mwgbNg/32/file0" dev="sda1" ino=16032 res=1
00:20:37 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:37 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:20:38 executing program 4:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x0, 0x0, 0x6, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(0x0, 0x0, 0x182)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB="14002500fe880000000000000000000000000001cb4d2ea813e682b5e190182eeefb0239801adf08001700e0000001000000a4002f800603131ced4a94ae291a03dabbd5ec4f19eb407ca0e1b227429bae1ce57de6e5e6dfff7e86b59f1628a811cf7029f5d47b0e66b1f27a7465e1c83bf3cd26a9fe5e089e484a19c7c72db57666d965f65a95fcb529a74eb5e3e0c57157bd7c5a691e5ad8ca86498d4610f6c4ba2070817177ac1aab90c8ab7baafaf1146ec5d362b9788af6bd462d8e943b1c3c98efb93a07b99469ff47d49c9870ecb404fed818b451ab91f760568a114b87823513e15e3ec8c76fff46d534df307a830af749e9da59e3a81e2b4abeafe9e6259f421e55bc8d10ea2e1df4433cee6ef9e2ed18910ed07495489b989e811fe093f9ca745709db807b1a06a87f3c8c2e52852c6822824633f5fdb4f477afc0a26619aa7affae2db477aba336d58b9703b458d5b02846034743e7ce8463744a350492c1a78511c439786d9149c15fe5cff0cc401bd8f1000c35f74717edab913d1c0a3b046f2e017de99142fc3d8a6c5e0f07bf74a0e85b25988b5e4a31852f651950f99e2e0e210ed3537b3e53f7e740c322e04f0535ef4f6b1ac6e5bbd1debf39f9bbfb59a79a321dae435d0516ac5eb26424adb04d31a6d81cd1e7929da079c8158c5225ddd23566068013e2c6df2b44619f66004a34c756d8abc31636fe1d794c2edfb1644b8934d528d3ce750f2b23a3cb2facb9008b80120020009f6efd81433172692e33192498c50000e8b2e945982f0d71f3c7e0eeb18d03ce87e292625870673760ac68ecb38bc6e8e957e4315c6bbb32de27945f71d5ca869df4641501a9edecac1614ce27bb302dd486ee515761f37fb77395e5b8984d1a01c77e87b0b9651e7309bc52d5e15ce77d060d3fc12f020f4e04293104b61bb967214640de9137c828f64dbaa8d9bb3887c2174029bc76141924ee5a1a29d900c1e8b0d00e73981409d85abb", @ANYRES32=0x0, @ANYBLOB], 0x368}, {0x0}, {&(0x7f0000001f00)={0x278, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, "", [@generic="5db07673746c7f1370817b49079ce0a650024e2c45691c1a8644426451dc2fb95432fe54a45b3eea14857cc5e81de041c78abc4da271f2e4af29d0717eab87c4e39db2a1acfd594f4b910150a28edf20d2ef9370c48a78598b72fadf0daeb53fc5e2c091b07383a131da61cff433bf06577ce723e125592a375d0837f1db775108585099fbc5597780b67a2fc065f43002c9f72040e4de9a887812bfd64d0979b96e0c2e44", @nested={0x1a9, 0x20, 0x0, 0x1, [@typed={0x103, 0x0, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="fdd8de1116d45643205be58b0b9efe829985d4d58ccad480a06f9be7280142110b489ec91e57531c7ed9f5d2b4ac9e255b378f2ed4c793e8d9145c6d856385d321d7764031efd4a09ac11589941fcaf594fd7f32f27a46b41c376cc75ec09425125c51c924", @generic, @typed={0x34, 0x8a, 0x0, 0x0, @binary="5e81522f090e01bdbfebe5a0e5227e6fa5273a2e6e68130a1b5d0b8c6fbd1612f48b4ebc85e75de8606f0aa1b33ccb99"}]}, @typed={0x4, 0x1a}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x6, 0x53, 0x0, 0x0, @str='%\x00'}]}, 0x278}], 0x3, 0x0, 0x0, 0x11}, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x9}, 0xfffffffffffffffc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7f4})

00:20:38 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mq_open(&(0x7f0000000180)='eth0\x00\xd3\x1eCF\x8e\xc1\xbel\x80N\x12\x14\xec\xee\xe0\tR\xad\xf0\x88\xbe\xbc\xf3\xef^4\xe2Q\x15\xa7CEW\xa4dp\xeb\x8f7\xae\xeeUHf\x1f\x01\xf8\xbc\xb2\x13\x93\x02\xee\x98i\xa6\x9ce\x06j\x8c_7,3G\x10s\vIBt\x03\x92V\x90\xab\xa4\xcb\x80\xdb\x9344\x98\xb6E\xde\x1a\x87\xa8A\xf8\xf5 \x1fc\xa1\xf1\x12\xdcHL\'\xde\xf3l\x99\x1c\x1ci\\i\v\x9d\xc0\x94\xebA\xa2w\xfe\x8f\x9f5<e\xd3\xd6\xb6\xa5@\xe0\xdd\xd2\x82\xba\x98\xd2|\x05+\xc18\xfa\xde\xe9&\xe3\r\x8b\x85\x96O\x895\xa9_\x7f\x9f\xd7!\xd38%\x83\xd8<\xdc]\xab\xb0\x01A\xd6\xfe\x8a\xf6\x98/\xf4N\x03\x0e\xa5-c\xc1\xf4\xe3\xc7\xcb\xd8eU\xc9\xaa0\x06\xe0\xde7\x99\xc0\xfa\x8a\r\xcb?G\x16\xe0\xba\xd7\\\xaf\x88\xd9\x12\x9a\x00\x00\x00\x00\x00\x00\x00\x00$\xe9F`\xb2\xd9\xa9\x94\x7f\x06w\x81\xd1}-Q\xda\xb6g\xfb\x8dX\xe0n\xceQnc\x95\xfe\xe5\xa95\xf0\xd3n\xb0\xf8\x1b;\xc2P}Iw\xa4\xc8\xb1[QY\xaa2)@u@1\xe8T\xfa\t\xcb\xa4W\xab\x1b/\x9b\xdf\v\x99\x1d4\x96>\xcd \x004\x91\xcb,\x8b\x02\xa5\x89\xd1Q\x9c\xc3\xcb\x9dwx\\\x8a\x95\xad\xc1Q', 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000800)=""/142, 0xffffff07}], 0x1, 0xfff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0)
write$9p(r1, &(0x7f0000001400)="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", 0x600)
sendfile(r1, r2, 0x0, 0x12e00)

00:20:38 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
memfd_create(0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)

00:20:38 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = socket$netlink(0x10, 0x3, 0x8)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01c0c9e11559da923d2a07af5d44082bb0d995434da8aac24a78c975d82ae163952277bc85d752992e"], 0x48}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={<r2=>r1})
bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0xfe42, @any, 0x4}, 0xe)

00:20:38 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

[  422.054869][   T28] audit: type=1804 audit(1596846038.660:19): pid=11305 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir541987635/syzkaller.9YJmMN/99/file0" dev="sda1" ino=16032 res=1
[  422.079976][   T28] audit: type=1800 audit(1596846038.660:20): pid=11305 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16032 res=0
[  422.101038][   T28] audit: type=1804 audit(1596846038.660:21): pid=11303 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir541987635/syzkaller.9YJmMN/99/file0" dev="sda1" ino=16032 res=1
00:20:38 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:20:38 executing program 4:
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x9, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00"}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xf000}], 0x1}, 0x300)
msgget$private(0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

00:20:39 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6)
recvmmsg(r2, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/177, 0xb1}], 0x1}}, {{&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000340)=""/113, 0x71}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/221, 0xdd}, {&(0x7f0000000700)=""/132, 0x84}, {&(0x7f00000007c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/78, 0x4e}, {&(0x7f0000000940)=""/246, 0xf6}, {&(0x7f0000000a40)=""/208, 0xd0}], 0x9, &(0x7f0000000c00)=""/144, 0x90}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)=""/208, 0xd0}, 0x4}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f00000003c0)=""/41, 0x29}, {0x0}], 0x2, &(0x7f0000003300)=""/4096, 0x1000}, 0x7f000000}], 0x4, 0x40010002, 0x0)

00:20:39 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
r1 = getpgid(0x0)
perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0xb})
ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000020"]})
sendmmsg(r0, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="a1fb056fd742c4624e2d67c8a7ef43696f3e", 0x12}, {&(0x7f0000000340)="07395fe873401a6481e2138fb0ae926aefc05be362f6f8b7b4c28b44c74f08b503bafe3c622ca36fe313a721ad889d95fcdeb8676c36c13ad825439e24a531af7c98f3150142a8731db0917dff0386", 0x4f}, {&(0x7f0000000100)="9f281ec34d4a8ec97843b6543a34eadc4b5e4140e91a2ea71608be57af8be58d8ac7fd83d82e9c2a55608d78a66014f29496ba1aceaa58f124b8571b17e52a4ebd5edf70223a6f2e682406df2c880cd462a8872db313e301bfbae4028883bc972075faac5af4fb5480a7b37d247b1d63976387432775afaab4368251367535e1ae3aec63581ffed3202b7a62497f6bccfc5c472df234c264769702ddc4497b9e45e4a0185e7997fe5ec88774d4cca474e8553106aad22922fe83ee57396f3ce1631e6fc641ff5eff3ce4385421f499c8b244c1cdc6a448c2", 0xd8}, {&(0x7f00000004c0)="618732db790d415768aceaf9cfb13667bf65d6ef5f14aa5f456d62354ea41e433e999b4561b03fc79ecae59c4d90b60c60ddb2c6b577672fbfa87425dbc57759994ec00ad2fa80b89d1398f0f39df0006242266826a41a0cc5d709fb017ebac25e4d6bc9917423e86155638067ff34fcaa3ce443ec4ae19247ef4e82ba7bfe3a8f26f293bfa10bd49d92f81056995b67218c", 0x92}, {&(0x7f0000000000)="10a71f85324d099305476e191db8877a2e30a1", 0x13}, {0x0}, {&(0x7f00000002c0)="24812fce4f1e3369ed23addb6e0f029b8b39c1d9434f795d2186b32c2baa9e5cbf96ecd92c7529eb71b7c42e33a640406c403134d5a02d68132a6595e19bb3028a8f096942ef", 0x46}, {&(0x7f0000000680)="759fe065be53ae625fe7d24723647f4de00e28042ffcdddcf9c59bd711d463a94066c51b0729e29e7b6bed3bb04343a2765506bef42e0ba4f24831407fec82618e2e55f2c07ecbf9b75bc80c7e18ae2c4088abcf0ae347302b1ba0e146d0570231469c8f932d9c0593764311b1a84498851a5ec7bd8f943e0573d8", 0x7b}], 0x8}}], 0x1, 0x0)

[  422.512475][   T28] audit: type=1800 audit(1596846038.820:22): pid=11305 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16032 res=0
00:20:39 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044000)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:39 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:39 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  422.998967][T11328] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46 sclass=netlink_tcpdiag_socket pid=11328 comm=syz-executor.3
00:20:39 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')

[  423.124135][T11327] device bridge_slave_1 left promiscuous mode
[  423.141860][T11327] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.169601][T11328] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46 sclass=netlink_tcpdiag_socket pid=11328 comm=syz-executor.3
00:20:40 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = getpid()
r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/igmp\x00')
fchdir(r2)
ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x100})
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:40 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:40 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x3)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1)

00:20:40 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
socket(0x10, 0x80002, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:20:40 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/raw/rawctl\x00', 0x5c440, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0)
write$9p(r0, &(0x7f0000001400)="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", 0x600)
sendfile(r0, r1, 0x0, 0x12e00)

00:20:40 executing program 4:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = mq_open(&(0x7f0000000180)='eth0\x00\xd3\x1eCF\x8e\xc1\xbel\x80N\x12\x14\xec\xee\xe0\tR\xad\xf0\x88\xbe\xbc\xf3\xef^4\xe2Q\x15\xa7CEW\xa4dp\xeb\x8f7\xae\xeeUHf\x1f\x01\xf8\xbc\xb2\x13\x93\x02\xee\x98i\xa6\x9ce\x06j\x8c_7,3G\x10s\vIBt\x03\x92V\x90\xab\xa4\xcb\x80\xdb\x9344\x98\xb6E\xde\x1a\x87\xa8A\xf8\xf5 \x1fc\xa1\xf1\x12\xdcHL\'\xde\xf3l\x99\x1c\x1ci\\i\v\x9d\xc0\x94\xebA\xa2w\xfe\x8f\x9f5<e\xd3\xd6\xb6\xa5@\xe0\xdd\xd2\x82\xba\x98\xd2|\x05+\xc18\xfa\xde\xe9&\xe3\r\x8b\x85\x96O\x895\xa9_\x7f\x9f\xd7!\xd38%\x83\xd8<\xdc]\xab\xb0\x01A\xd6\xfe\x8a\xf6\x98/\xf4N\x03\x0e\xa5-c\xc1\xf4\xe3\xc7\xcb\xd8eU\xc9\xaa0\x06\xe0\xde7\x99\xc0\xfa\x8a\r\xcb?G\x16\xe0\xba\xd7\\\xaf\x88\xd9\x12\x9a\x00\x00\x00\x00\x00\x00\x00\x00$\xe9F`\xb2\xd9\xa9\x94\x7f\x06w\x81\xd1}-Q\xda\xb6g\xfb\x8dX\xe0n\xceQnc\x95\xfe\xe5\xa95\xf0\xd3n\xb0\xf8\x1b;\xc2P}Iw\xa4\xc8\xb1[QY\xaa2)@u@1\xe8T\xfa\t\xcb\xa4W\xab\x1b/\x9b\xdf\v\x99\x1d4\x96>\xcd \x004\x91\xcb,\x8b\x02\xa5\x89\xd1Q\x9c\xc3\xcb\x9dwx\\\x8a\x95\xad\xc1Q', 0x0, 0x0, 0x0)
mq_timedreceive(r0, 0x0, 0xed9fc23d, 0x0, 0x0)

00:20:40 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21}, 0xe)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), 0x4)

00:20:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040))
setreuid(0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x0, 0x0, 0x6, 0x5f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1)
r2 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3})
openat$null(0xffffffffffffff9c, &(0x7f0000001d00)='/dev/null\x00', 0x2a0241, 0x0)

00:20:40 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

[  424.169667][   T28] audit: type=1804 audit(1596846040.770:23): pid=11352 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir541987635/syzkaller.9YJmMN/102/file0" dev="sda1" ino=16042 res=1
[  424.194730][   T28] audit: type=1800 audit(1596846040.770:24): pid=11352 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16042 res=0
00:20:41 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
socket(0x10, 0x80002, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  424.867586][   T28] audit: type=1800 audit(1596846041.450:25): pid=11355 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16042 res=0
00:20:41 executing program 4:
r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
write(r0, &(0x7f0000000240)='i', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x200000000000011, 0x3, 0x0)
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000100), 0x4)

00:20:41 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x0, 0x0, 0x6, 0x5f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3})
openat$null(0xffffffffffffff9c, &(0x7f0000001d00)='/dev/null\x00', 0x0, 0x0)

00:20:41 executing program 1:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
pidfd_open(r0, 0x0)

00:20:41 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x1, @any, 0x5}, 0xe)

00:20:41 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:20:41 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
socket(0x10, 0x80002, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:20:42 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0xb, 0x14, 0x8, 0x8, 0x2, 0x2, 0x14, 0xb, 0x2, 0xb, 0x3, 0x8, 0x8], 0x6}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20c200a2, r3})

00:20:42 executing program 1:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mq_open(0x0, 0x0, 0x0, 0x0)
r0 = mq_open(&(0x7f0000000180)='eth0\x00\xd3\x1eCF\x8e\xc1\xbel\x80N\x12\x14\xec\xee\xe0\tR\xad\xf0\x88\xbe\xbc\xf3\xef^4\xe2Q\x15\xa7CEW\xa4dp\xeb\x8f7\xae\xeeUHf\x1f\x01\xf8\xbc\xb2\x13\x93\x02\xee\x98i\xa6\x9ce\x06j\x8c_7,3G\x10s\vIBt\x03\x92V\x90\xab\xa4\xcb\x80\xdb\x9344\x98\xb6E\xde\x1a\x87\xa8A\xf8\xf5 \x1fc\xa1\xf1\x12\xdcHL\'\xde\xf3l\x99\x1c\x1ci\\i\v\x9d\xc0\x94\xebA\xa2w\xfe\x8f\x9f5<e\xd3\xd6\xb6\xa5@\xe0\xdd\xd2\x82\xba\x98\xd2|\x05+\xc18\xfa\xde\xe9&\xe3\r\x8b\x85\x96O\x895\xa9_\x7f\x9f\xd7!\xd38%\x83\xd8<\xdc]\xab\xb0\x01A\xd6\xfe\x8a\xf6\x98/\xf4N\x03\x0e\xa5-c\xc1\xf4\xe3\xc7\xcb\xd8eU\xc9\xaa0\x06\xe0\xde7\x99\xc0\xfa\x8a\r\xcb?G\x16\xe0\xba\xd7\\\xaf\x88\xd9\x12\x9a\x00\x00\x00\x00\x00\x00\x00\x00$\xe9F`\xb2\xd9\xa9\x94\x7f\x06w\x81\xd1}-Q\xda\xb6g\xfb\x8dX\xe0n\xceQnc\x95\xfe\xe5\xa95\xf0\xd3n\xb0\xf8\x1b;\xc2P}Iw\xa4\xc8\xb1[QY\xaa2)@u@1\xe8T\xfa\t\xcb\xa4W\xab\x1b/\x9b\xdf\v\x99\x1d4\x96>\xcd \x004\x91\xcb,\x8b\x02\xa5\x89\xd1Q\x9c\xc3\xcb\x9dwx\\\x8a\x95\xad\xc1Q', 0x0, 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000300))

00:20:42 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
dup3(r0, r1, 0x80000)

00:20:42 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:20:42 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:42 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, 0x0, 0x0, 0x0)

00:20:42 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x440080, 0x0)
r0 = mq_open(&(0x7f0000000180)='eth0\x00\xd3\x1eCF\x8e\xc1\xbel\x80N\x12\x14\xec\xee\xe0\tR\xad\xf0\x88\xbe\xbc\xf3\xef^4\xe2Q\x15\xa7CEW\xa4dp\xeb\x8f7\xae\xeeUHf\x1f\x01\xf8\xbc\xb2\x13\x93\x02\xee\x98i\xa6\x9ce\x06j\x8c_7,3G\x10s\vIBt\x03\x92V\x90\xab\xa4\xcb\x80\xdb\x9344\x98\xb6E\xde\x1a\x87\xa8A\xf8\xf5 \x1fc\xa1\xf1\x12\xdcHL\'\xde\xf3l\x99\x1c\x1ci\\i\v\x9d\xc0\x94\xebA\xa2w\xfe\x8f\x9f5<e\xd3\xd6\xb6\xa5@\xe0\xdd\xd2\x82\xba\x98\xd2|\x05+\xc18\xfa\xde\xe9&\xe3\r\x8b\x85\x96O\x895\xa9_\x7f\x9f\xd7!\xd38%\x83\xd8<\xdc]\xab\xb0\x01A\xd6\xfe\x8a\xf6\x98/\xf4N\x03\x0e\xa5-c\xc1\xf4\xe3\xc7\xcb\xd8eU\xc9\xaa0\x06\xe0\xde7\x99\xc0\xfa\x8a\r\xcb?G\x16\xe0\xba\xd7\\\xaf\x88\xd9\x12\x9a\x00\x00\x00\x00\x00\x00\x00\x00$\xe9F`\xb2\xd9\xa9\x94\x7f\x06w\x81\xd1}-Q\xda\xb6g\xfb\x8dX\xe0n\xceQnc\x95\xfe\xe5\xa95\xf0\xd3n\xb0\xf8\x1b;\xc2P}Iw\xa4\xc8\xb1[QY\xaa2)@u@1\xe8T\xfa\t\xcb\xa4W\xab\x1b/\x9b\xdf\v\x99\x1d4\x96>\xcd \x004\x91\xcb,\x8b\x02\xa5\x89\xd1Q\x9c\xc3\xcb\x9dwx\\\x8a\x95\xad\xc1Q', 0x842, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000000000)='J', 0x1, 0x0, 0x0)
ppoll(&(0x7f00000002c0)=[{r0, 0x600c}, {0xffffffffffffffff, 0x21}], 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0x6]}, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xa)

00:20:42 executing program 1:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
getpeername$packet(r1, 0x0, &(0x7f0000000040))

00:20:43 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040))
setreuid(0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x4, 0x0, 0x6, 0x5f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = memfd_create(0x0, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1)
r2 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3})
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)

00:20:43 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed}, 0xe)

00:20:43 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r0)
ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000000))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:43 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, 0x0, 0x0, 0x0)

00:20:43 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed}, 0xe)

00:20:43 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040))
setreuid(0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3})
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)

00:20:43 executing program 1:
syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd603b000000102f00fe800000000000000000000000000000ff0200000000000000000000000000018600907800000000"], 0x0)
syz_emit_ethernet(0x119, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c20000038137ffff010b0004000000000000000000000006e7085028b54345b1e5e3c8171457075d295155894ab9714c7a91f502a12b9b7758836245665106adcf61651c0ff2d4c56a979ead10638d3fc5c4cfe1c65c8fbc2bb08b43825658b87d1cb502000000000000001114a201efb2ff47c15ed7429d0b19b0d5cce129c599e28b2e96eaa88953799ad674d6aed811afa9c8475fe975b878ac81bd829a71ea3f179a753eeb365b5ecee2f91feae00dbfcec0adf2ad470464d2190b8ddcc61a271305954d1ef706ecd3728c1cd3bc3f13631d9b538627a400c03957454818a0a3844d434c5e8ff9a5566f9f742df6e984573099714a723a81587d32a4860b67706518c6c7eefc393f1235905701451e9d67313971f36d5ad4afa96d65fa9d3973d346fb8e266ff0d6dda706eebca6dd3ab48ddb3d3795f62174376c1bc19c53368c81d6423cfa070ef962326be15227b225ec386ebe15b244dd906334662ae57c2ade4fe471f0018941614effb085d5d161c2dfafa2a57fd1814f80a3a3c698840200e9f97b5bb7a87a579bad16295d2dd744e1b57a6c605bcc18b2762bdf1b2ff72b3e2ab929db5b"], &(0x7f0000000140)={0x0, 0x3, [0x657, 0x400, 0xeeb, 0x5b6]})
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0xb, 0x14, 0x8, 0x8, 0x2, 0x2, 0x7, 0xb, 0x2, 0xb, 0x3, 0x8, 0x8], 0x6}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20c200a2, r1})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7000000019000000000000000000df25802014b983540f6592cdb3000600150000007bce08003800", @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES64, @ANYBLOB="08000b00290100040038bec50a4c6c2e3bd47642c6e8851eb96263f3e4c76195c47910ec10b8d2ab1b66c3129b729576c16eb0425fb5c0206bc9f6330ab8c07a9d7efe74c34ac49548dd31d9cea7c777b8403d2bdd3ea8ed93184262e1", @ANYBLOB], 0x70}}, 0x20000001)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0xb, 0x14, 0x8, 0x8, 0x2, 0x2, 0x14, 0xb, 0x2, 0xb, 0x3, 0x8, 0x8], 0x6}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20c200a2, r8})
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={<r10=>0x0, 0x0, <r11=>0x0}, &(0x7f0000000280)=0x5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7000000019000000000000000000df25802014b983540f6592cdb3000600150000007bce08003800", @ANYRESHEX=0x0, @ANYRES16=r4, @ANYRESHEX, @ANYRES32=r10, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b00290300040038bec50a4c6c2e3bd47642c6e8851eb96263f3e4c76195c47910ec10b8d2ab1b66c3129b729576c16eb0425fb5c0206bc9f6330ab8c07a9d7cfe74c34ac49548dd31d9cea7c777b8403d2bdd3ea8ed93184262e1", @ANYRES64=r11, @ANYBLOB], 0x70}}, 0x20000001)
setgroups(0x2, &(0x7f0000000180)=[r3, r11])

00:20:43 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000000)={<r3=>0x0, 0x37, "97d58023721cf2108bded3f9a3bcbfb9a912d40c3a16bdcb6936d9d44db95f18fe74afaee0720b61a22685a2f622e58f03279eadedb76c"}, &(0x7f0000000040)=0x3f)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x3}, 0x8)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:43 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, 0x0, 0x0, 0x0)

00:20:44 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed}, 0xe)

00:20:44 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1)

00:20:44 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0xfffff, r2)

00:20:44 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/config\x00')
fchdir(r1)
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000200))
r3 = socket$inet6(0xa, 0x5, 0x0)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x82, &(0x7f0000000000)={r5}, 0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r5, 0x9}, &(0x7f00000001c0)=0xffffffffffffff6b)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00')
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0xa}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r7, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x40)
ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000000)=0x6)

00:20:44 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0)

00:20:44 executing program 1:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x1)
keyctl$chown(0x4, r0, r2, 0x0)

00:20:45 executing program 5:
listen(0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="ee3ca5b286db", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

00:20:45 executing program 2:
setreuid(0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x6, 0x5f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
r1 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3})
openat$null(0xffffffffffffff9c, &(0x7f0000001d00)='/dev/null\x00', 0x2a0241, 0x0)

00:20:45 executing program 3:
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}}}, 0x24}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000140)={'gre0\x00', <r4=>r3, 0x700, 0x8, 0x60, 0x5, {{0x7, 0x4, 0x2, 0x2, 0x1c, 0x67, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010102, {[@rr={0x7, 0x7, 0x12, [@multicast2]}]}}}}})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}}}, 0x24}}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x80000)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r9, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:45 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1)

00:20:45 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0)

00:20:45 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = mq_open(&(0x7f0000000180)='eth0\x00\xd3\x1eCF\x8e\xc1\xbel\x80N\x12\x14\xec\xee\xe0\tR\xad\xf0\x88\xbe\xbc\xf3\xef^4\xe2Q\x15\xa7CEW\xa4dp\xeb\x8f7\xae\xeeUHf\x1f\x01\xf8\xbc\xb2\x13\x93\x02\xee\x98i\xa6\x9ce\x06j\x8c_7,3G\x10s\vIBt\x03\x92V\x90\xab\xa4\xcb\x80\xdb\x9344\x98\xb6E\xde\x1a\x87\xa8A\xf8\xf5 \x1fc\xa1\xf1\x12\xdcHL\'\xde\xf3l\x99\x1c\x1ci\\i\v\x9d\xc0\x94\xebA\xa2w\xfe\x8f\x9f5<e\xd3\xd6\xb6\xa5@\xe0\xdd\xd2\x82\xba\x98\xd2|\x05+\xc18\xfa\xde\xe9&\xe3\r\x8b\x85\x96O\x895\xa9_\x7f\x9f\xd7!\xd38%\x83\xd8<\xdc]\xab\xb0\x01A\xd6\xfe\x8a\xf6\x98/\xf4N\x03\x0e\xa5-c\xc1\xf4\xe3\xc7\xcb\xd8eU\xc9\xaa0\x06\xe0\xde7\x99\xc0\xfa\x8a\r\xcb?G\x16\xe0\xba\xd7\\\xaf\x88\xd9\x12\x9a\x00\x00\x00\x00\x00\x00\x00\x00$\xe9F`\xb2\xd9\xa9\x94\x7f\x06w\x81\xd1}-Q\xda\xb6g\xfb\x8dX\xe0n\xceQnc\x95\xfe\xe5\xa95\xf0\xd3n\xb0\xf8\x1b;\xc2P}Iw\xa4\xc8\xb1[QY\xaa2)@u@1\xe8T\xfa\t\xcb\xa4W\xab\x1b/\x9b\xdf\v\x99\x1d4\x96>\xcd \x004\x91\xcb,\x8b\x02\xa5\x89\xd1Q\x9c\xc3\xcb\x9dwx\\\x8a\x95\xad\xc1Q', 0x842, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x400, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0xd, 0x0, {{0x8, 0x0, 0x5}, 0x1}}, 0x18)
r1 = mq_open(&(0x7f0000000180)='eth0\x00\xd3\x1eCF\x8e\xc1\xbel\x80N\x12\x14\xec\xee\xe0\tR\xad\xf0\x88\xbe\xbc\xf3\xef^4\xe2Q\x15\xa7CEW\xa4dp\xeb\x8f7\xae\xeeUHf\x1f\x01\xf8\xbc\xb2\x13\x93\x02\xee\x98i\xa6\x9ce\x06j\x8c_7,3G\x10s\vIBt\x03\x92V\x90\xab\xa4\xcb\x80\xdb\x9344\x98\xb6E\xde\x1a\x87\xa8A\xf8\xf5 \x1fc\xa1\xf1\x12\xdcHL\'\xde\xf3l\x99\x1c\x1ci\\i\v\x9d\xc0\x94\xebA\xa2w\xfe\x8f\x9f5<e\xd3\xd6\xb6\xa5@\xe0\xdd\xd2\x82\xba\x98\xd2|\x05+\xc18\xfa\xde\xe9&\xe3\r\x8b\x85\x96O\x895\xa9_\x7f\x9f\xd7!\xd38%\x83\xd8<\xdc]\xab\xb0\x01A\xd6\xfe\x8a\xf6\x98/\xf4N\x03\x0e\xa5-c\xc1\xf4\xe3\xc7\xcb\xd8eU\xc9\xaa0\x06\xe0\xde7\x99\xc0\xfa\x8a\r\xcb?G\x16\xe0\xba\xd7\\\xaf\x88\xd9\x12\x9a\x00\x00\x00\x00\x00\x00\x00\x00$\xe9F`\xb2\xd9\xa9\x94\x7f\x06w\x81\xd1}-Q\xda\xb6g\xfb\x8dX\xe0n\xceQnc\x95\xfe\xe5\xa95\xf0\xd3n\xb0\xf8\x1b;\xc2P}Iw\xa4\xc8\xb1[QY\xaa2)@u@1\xe8T\xfa\t\xcb\xa4W\xab\x1b/\x9b\xdf\v\x99\x1d4\x96>\xcd \x004\x91\xcb,\x8b\x02\xa5\x89\xd1Q\x9c\xc3\xcb\x9dwx\\\x8a\x95\xad\xc1Q', 0x842, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000000)='J', 0x1, 0x0, 0x0)
mq_timedreceive(r1, 0x0, 0xed9fc23d, 0x0, 0x0)
sendfile(r0, r1, &(0x7f0000000080), 0x2)
r2 = socket$inet(0x2, 0x6000000000000003, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x10)

[  429.030139][T11472] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  429.113749][T11479] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
00:20:45 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040))
setreuid(0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3})
openat$null(0xffffffffffffff9c, &(0x7f0000001d00)='/dev/null\x00', 0x2a0241, 0x0)

00:20:45 executing program 5:
r0 = mq_open(&(0x7f0000000180)='eth0\x00\xd3\x1eCF\x8e\xc1\xbel\x80N\x12\x14\xec\xee\xe0\tR\xad\xf0\x88\xbe\xbc\xf3\xef^4\xe2Q\x15\xa7CEW\xa4dp\xeb\x8f7\xae\xeeUHf\x1f\x01\xf8\xbc\xb2\x13\x93\x02\xee\x98i\xa6\x9ce\x06j\x8c_7,3G\x10s\vIBt\x03\x92V\x90\xab\xa4\xcb\x80\xdb\x9344\x98\xb6E\xde\x1a\x87\xa8A\xf8\xf5 \x1fc\xa1\xf1\x12\xdcHL\'\xde\xf3l\x99\x1c\x1ci\\i\v\x9d\xc0\x94\xebA\xa2w\xfe\x8f\x9f5<e\xd3\xd6\xb6\xa5@\xe0\xdd\xd2\x82\xba\x98\xd2|\x05+\xc18\xfa\xde\xe9&\xe3\r\x8b\x85\x96O\x895\xa9_\x7f\x9f\xd7!\xd38%\x83\xd8<\xdc]\xab\xb0\x01A\xd6\xfe\x8a\xf6\x98/\xf4N\x03\x0e\xa5-c\xc1\xf4\xe3\xc7\xcb\xd8eU\xc9\xaa0\x06\xe0\xde7\x99\xc0\xfa\x8a\r\xcb?G\x16\xe0\xba\xd7\\\xaf\x88\xd9\x12\x9a\x00\x00\x00\x00\x00\x00\x00\x00$\xe9F`\xb2\xd9\xa9\x94\x7f\x06w\x81\xd1}-Q\xda\xb6g\xfb\x8dX\xe0n\xceQnc\x95\xfe\xe5\xa95\xf0\xd3n\xb0\xf8\x1b;\xc2P}Iw\xa4\xc8\xb1[QY\xaa2)@u@1\xe8T\xfa\t\xcb\xa4W\xab\x1b/\x9b\xdf\v\x99\x1d4\x96>\xcd \x004\x91\xcb,\x8b\x02\xa5\x89\xd1Q\x9c\xc3\xcb\x9dwx\\\x8a\x95\xad\xc1Q', 0x842, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

[  429.358855][T11472] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  429.456298][T11472] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
00:20:46 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x4, @none}, 0xe)

00:20:46 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0)

00:20:46 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1)

00:20:46 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = mq_open(&(0x7f0000000180)='eth0\x00\xd3\x1eCF\x8e\xc1\xbel\x80N\x12\x14\xec\xee\xe0\tR\xad\xf0\x88\xbe\xbc\xf3\xef^4\xe2Q\x15\xa7CEW\xa4dp\xeb\x8f7\xae\xeeUHf\x1f\x01\xf8\xbc\xb2\x13\x93\x02\xee\x98i\xa6\x9ce\x06j\x8c_7,3G\x10s\vIBt\x03\x92V\x90\xab\xa4\xcb\x80\xdb\x9344\x98\xb6E\xde\x1a\x87\xa8A\xf8\xf5 \x1fc\xa1\xf1\x12\xdcHL\'\xde\xf3l\x99\x1c\x1ci\\i\v\x9d\xc0\x94\xebA\xa2w\xfe\x8f\x9f5<e\xd3\xd6\xb6\xa5@\xe0\xdd\xd2\x82\xba\x98\xd2|\x05+\xc18\xfa\xde\xe9&\xe3\r\x8b\x85\x96O\x895\xa9_\x7f\x9f\xd7!\xd38%\x83\xd8<\xdc]\xab\xb0\x01A\xd6\xfe\x8a\xf6\x98/\xf4N\x03\x0e\xa5-c\xc1\xf4\xe3\xc7\xcb\xd8eU\xc9\xaa0\x06\xe0\xde7\x99\xc0\xfa\x8a\r\xcb?G\x16\xe0\xba\xd7\\\xaf\x88\xd9\x12\x9a\x00\x00\x00\x00\x00\x00\x00\x00$\xe9F`\xb2\xd9\xa9\x94\x7f\x06w\x81\xd1}-Q\xda\xb6g\xfb\x8dX\xe0n\xceQnc\x95\xfe\xe5\xa95\xf0\xd3n\xb0\xf8\x1b;\xc2P}Iw\xa4\xc8\xb1[QY\xaa2)@u@1\xe8T\xfa\t\xcb\xa4W\xab\x1b/\x9b\xdf\v\x99\x1d4\x96>\xcd \x004\x91\xcb,\x8b\x02\xa5\x89\xd1Q\x9c\xc3\xcb\x9dwx\\\x8a\x95\xad\xc1Q', 0x842, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x400, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0xd, 0x0, {{0x8, 0x0, 0x5}, 0x1}}, 0x18)
r1 = mq_open(&(0x7f0000000180)='eth0\x00\xd3\x1eCF\x8e\xc1\xbel\x80N\x12\x14\xec\xee\xe0\tR\xad\xf0\x88\xbe\xbc\xf3\xef^4\xe2Q\x15\xa7CEW\xa4dp\xeb\x8f7\xae\xeeUHf\x1f\x01\xf8\xbc\xb2\x13\x93\x02\xee\x98i\xa6\x9ce\x06j\x8c_7,3G\x10s\vIBt\x03\x92V\x90\xab\xa4\xcb\x80\xdb\x9344\x98\xb6E\xde\x1a\x87\xa8A\xf8\xf5 \x1fc\xa1\xf1\x12\xdcHL\'\xde\xf3l\x99\x1c\x1ci\\i\v\x9d\xc0\x94\xebA\xa2w\xfe\x8f\x9f5<e\xd3\xd6\xb6\xa5@\xe0\xdd\xd2\x82\xba\x98\xd2|\x05+\xc18\xfa\xde\xe9&\xe3\r\x8b\x85\x96O\x895\xa9_\x7f\x9f\xd7!\xd38%\x83\xd8<\xdc]\xab\xb0\x01A\xd6\xfe\x8a\xf6\x98/\xf4N\x03\x0e\xa5-c\xc1\xf4\xe3\xc7\xcb\xd8eU\xc9\xaa0\x06\xe0\xde7\x99\xc0\xfa\x8a\r\xcb?G\x16\xe0\xba\xd7\\\xaf\x88\xd9\x12\x9a\x00\x00\x00\x00\x00\x00\x00\x00$\xe9F`\xb2\xd9\xa9\x94\x7f\x06w\x81\xd1}-Q\xda\xb6g\xfb\x8dX\xe0n\xceQnc\x95\xfe\xe5\xa95\xf0\xd3n\xb0\xf8\x1b;\xc2P}Iw\xa4\xc8\xb1[QY\xaa2)@u@1\xe8T\xfa\t\xcb\xa4W\xab\x1b/\x9b\xdf\v\x99\x1d4\x96>\xcd \x004\x91\xcb,\x8b\x02\xa5\x89\xd1Q\x9c\xc3\xcb\x9dwx\\\x8a\x95\xad\xc1Q', 0x842, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000000)='J', 0x1, 0x0, 0x0)
mq_timedreceive(r1, 0x0, 0xed9fc23d, 0x0, 0x0)
sendfile(r0, r1, &(0x7f0000000080), 0x2)
r2 = socket$inet(0x2, 0x6000000000000003, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x10)

00:20:46 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = mq_open(&(0x7f0000000180)='eth0\x00\xd3\x1eCF\x8e\xc1\xbel\x80N\x12\x14\xec\xee\xe0\tR\xad\xf0\x88\xbe\xbc\xf3\xef^4\xe2Q\x15\xa7CEW\xa4dp\xeb\x8f7\xae\xeeUHf\x1f\x01\xf8\xbc\xb2\x13\x93\x02\xee\x98i\xa6\x9ce\x06j\x8c_7,3G\x10s\vIBt\x03\x92V\x90\xab\xa4\xcb\x80\xdb\x9344\x98\xb6E\xde\x1a\x87\xa8A\xf8\xf5 \x1fc\xa1\xf1\x12\xdcHL\'\xde\xf3l\x99\x1c\x1ci\\i\v\x9d\xc0\x94\xebA\xa2w\xfe\x8f\x9f5<e\xd3\xd6\xb6\xa5@\xe0\xdd\xd2\x82\xba\x98\xd2|\x05+\xc18\xfa\xde\xe9&\xe3\r\x8b\x85\x96O\x895\xa9_\x7f\x9f\xd7!\xd38%\x83\xd8<\xdc]\xab\xb0\x01A\xd6\xfe\x8a\xf6\x98/\xf4N\x03\x0e\xa5-c\xc1\xf4\xe3\xc7\xcb\xd8eU\xc9\xaa0\x06\xe0\xde7\x99\xc0\xfa\x8a\r\xcb?G\x16\xe0\xba\xd7\\\xaf\x88\xd9\x12\x9a\x00\x00\x00\x00\x00\x00\x00\x00$\xe9F`\xb2\xd9\xa9\x94\x7f\x06w\x81\xd1}-Q\xda\xb6g\xfb\x8dX\xe0n\xceQnc\x95\xfe\xe5\xa95\xf0\xd3n\xb0\xf8\x1b;\xc2P}Iw\xa4\xc8\xb1[QY\xaa2)@u@1\xe8T\xfa\t\xcb\xa4W\xab\x1b/\x9b\xdf\v\x99\x1d4\x96>\xcd \x004\x91\xcb,\x8b\x02\xa5\x89\xd1Q\x9c\xc3\xcb\x9dwx\\\x8a\x95\xad\xc1Q', 0x842, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x400, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0xd, 0x0, {{0x8, 0x0, 0x5}, 0x1}}, 0x18)
r1 = mq_open(&(0x7f0000000180)='eth0\x00\xd3\x1eCF\x8e\xc1\xbel\x80N\x12\x14\xec\xee\xe0\tR\xad\xf0\x88\xbe\xbc\xf3\xef^4\xe2Q\x15\xa7CEW\xa4dp\xeb\x8f7\xae\xeeUHf\x1f\x01\xf8\xbc\xb2\x13\x93\x02\xee\x98i\xa6\x9ce\x06j\x8c_7,3G\x10s\vIBt\x03\x92V\x90\xab\xa4\xcb\x80\xdb\x9344\x98\xb6E\xde\x1a\x87\xa8A\xf8\xf5 \x1fc\xa1\xf1\x12\xdcHL\'\xde\xf3l\x99\x1c\x1ci\\i\v\x9d\xc0\x94\xebA\xa2w\xfe\x8f\x9f5<e\xd3\xd6\xb6\xa5@\xe0\xdd\xd2\x82\xba\x98\xd2|\x05+\xc18\xfa\xde\xe9&\xe3\r\x8b\x85\x96O\x895\xa9_\x7f\x9f\xd7!\xd38%\x83\xd8<\xdc]\xab\xb0\x01A\xd6\xfe\x8a\xf6\x98/\xf4N\x03\x0e\xa5-c\xc1\xf4\xe3\xc7\xcb\xd8eU\xc9\xaa0\x06\xe0\xde7\x99\xc0\xfa\x8a\r\xcb?G\x16\xe0\xba\xd7\\\xaf\x88\xd9\x12\x9a\x00\x00\x00\x00\x00\x00\x00\x00$\xe9F`\xb2\xd9\xa9\x94\x7f\x06w\x81\xd1}-Q\xda\xb6g\xfb\x8dX\xe0n\xceQnc\x95\xfe\xe5\xa95\xf0\xd3n\xb0\xf8\x1b;\xc2P}Iw\xa4\xc8\xb1[QY\xaa2)@u@1\xe8T\xfa\t\xcb\xa4W\xab\x1b/\x9b\xdf\v\x99\x1d4\x96>\xcd \x004\x91\xcb,\x8b\x02\xa5\x89\xd1Q\x9c\xc3\xcb\x9dwx\\\x8a\x95\xad\xc1Q', 0x842, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000000)='J', 0x1, 0x0, 0x0)
mq_timedreceive(r1, 0x0, 0xed9fc23d, 0x0, 0x0)
sendfile(r0, r1, &(0x7f0000000080), 0x2)
r2 = socket$inet(0x2, 0x6000000000000003, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x10)

00:20:46 executing program 5:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = mq_open(&(0x7f0000000180)='eth0\x00\xd3\x1eCF\x8e\xc1\xbel\x80N\x12\x14\xec\xee\xe0\tR\xad\xf0\x88\xbe\xbc\xf3\xef^4\xe2Q\x15\xa7CEW\xa4dp\xeb\x8f7\xae\xeeUHf\x1f\x01\xf8\xbc\xb2\x13\x93\x02\xee\x98i\xa6\x9ce\x06j\x8c_7,3G\x10s\vIBt\x03\x92V\x90\xab\xa4\xcb\x80\xdb\x9344\x98\xb6E\xde\x1a\x87\xa8A\xf8\xf5 \x1fc\xa1\xf1\x12\xdcHL\'\xde\xf3l\x99\x1c\x1ci\\i\v\x9d\xc0\x94\xebA\xa2w\xfe\x8f\x9f5<e\xd3\xd6\xb6\xa5@\xe0\xdd\xd2\x82\xba\x98\xd2|\x05+\xc18\xfa\xde\xe9&\xe3\r\x8b\x85\x96O\x895\xa9_\x7f\x9f\xd7!\xd38%\x83\xd8<\xdc]\xab\xb0\x01A\xd6\xfe\x8a\xf6\x98/\xf4N\x03\x0e\xa5-c\xc1\xf4\xe3\xc7\xcb\xd8eU\xc9\xaa0\x06\xe0\xde7\x99\xc0\xfa\x8a\r\xcb?G\x16\xe0\xba\xd7\\\xaf\x88\xd9\x12\x9a\x00\x00\x00\x00\x00\x00\x00\x00$\xe9F`\xb2\xd9\xa9\x94\x7f\x06w\x81\xd1}-Q\xda\xb6g\xfb\x8dX\xe0n\xceQnc\x95\xfe\xe5\xa95\xf0\xd3n\xb0\xf8\x1b;\xc2P}Iw\xa4\xc8\xb1[QY\xaa2)@u@1\xe8T\xfa\t\xcb\xa4W\xab\x1b/\x9b\xdf\v\x99\x1d4\x96>\xcd \x004\x91\xcb,\x8b\x02\xa5\x89\xd1Q\x9c\xc3\xcb\x9dwx\\\x8a\x95\xad\xc1Q', 0x842, 0x0, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x400, 0x0)
write$P9_RLOPEN(r1, &(0x7f0000000140)={0x18, 0xd, 0x1, {{0x8, 0x0, 0x5}, 0x1}}, 0x18)
mq_timedsend(r0, &(0x7f0000000000)='J', 0x1, 0x0, 0x0)
r2 = mq_open(&(0x7f0000000180)='eth0\x00\xd3\x1eCF\x8e\xc1\xbel\x80N\x12\x14\xec\xee\xe0\tR\xad\xf0\x88\xbe\xbc\xf3\xef^4\xe2Q\x15\xa7CEW\xa4dp\xeb\x8f7\xae\xeeUHf\x1f\x01\xf8\xbc\xb2\x13\x93\x02\xee\x98i\xa6\x9ce\x06j\x8c_7,3G\x10s\vIBt\x03\x92V\x90\xab\xa4\xcb\x80\xdb\x9344\x98\xb6E\xde\x1a\x87\xa8A\xf8\xf5 \x1fc\xa1\xf1\x12\xdcHL\'\xde\xf3l\x99\x1c\x1ci\\i\v\x9d\xc0\x94\xebA\xa2w\xfe\x8f\x9f5<e\xd3\xd6\xb6\xa5@\xe0\xdd\xd2\x82\xba\x98\xd2|\x05+\xc18\xfa\xde\xe9&\xe3\r\x8b\x85\x96O\x895\xa9_\x7f\x9f\xd7!\xd38%\x83\xd8<\xdc]\xab\xb0\x01A\xd6\xfe\x8a\xf6\x98/\xf4N\x03\x0e\xa5-c\xc1\xf4\xe3\xc7\xcb\xd8eU\xc9\xaa0\x06\xe0\xde7\x99\xc0\xfa\x8a\r\xcb?G\x16\xe0\xba\xd7\\\xaf\x88\xd9\x12\x9a\x00\x00\x00\x00\x00\x00\x00\x00$\xe9F`\xb2\xd9\xa9\x94\x7f\x06w\x81\xd1}-Q\xda\xb6g\xfb\x8dX\xe0n\xceQnc\x95\xfe\xe5\xa95\xf0\xd3n\xb0\xf8\x1b;\xc2P}Iw\xa4\xc8\xb1[QY\xaa2)@u@1\xe8T\xfa\t\xcb\xa4W\xab\x1b/\x9b\xdf\v\x99\x1d4\x96>\xcd \x004\x91\xcb,\x8b\x02\xa5\x89\xd1Q\x9c\xc3\xcb\x9dwx\\\x8a\x95\xad\xc1Q', 0x842, 0x0, 0x0)
mq_timedsend(r2, &(0x7f0000000000)='J', 0x1, 0x0, 0x0)
mq_timedreceive(r2, 0x0, 0xed9fc23d, 0x0, 0x0)
r3 = socket$inet(0x2, 0x6000000000000003, 0x6)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10)
sendto$inet(r3, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendto$inet(r3, &(0x7f0000000080), 0x4fa0, 0x0, &(0x7f00000001c0), 0x10)

00:20:46 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)

00:20:47 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)

00:20:47 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1)

00:20:47 executing program 1:
r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
write(r0, &(0x7f0000000240)='i', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x200000000000011, 0x3, 0x0)
setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000100), 0x4)

00:20:47 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)

[  431.292364][T10595] Bluetooth: hci0: command 0x0406 tx timeout
00:20:47 executing program 5:
r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
write(r0, &(0x7f00000000c0)='i', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
open(&(0x7f0000000200)='./control\x00', 0x0, 0x0)
select(0x40, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000400))

00:20:48 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)

00:20:48 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$read(0x1d, r1, &(0x7f0000000040)=""/232, 0xe8)
add_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="41a5ce3f85e664f6fd137bcdf72968fcd3929a6da32ec723654ba216f4e52b4c0fbeba46d0e71ea5614034ee0d9cd699ef6f1453c85aec93d34dcea7289ec1ce2c10875ed29980ed35f4e8c1ad53824cfffd5aaebcb75d1770df6b82d3a070daafe462055e8fd42ca70b2b560d76e4c94f1c1aeb051a40d141114b39106d758bd0a98fd73f8f666d6ef0c0ff325f7d0d95dba0fca3a745c91369320701b7814431023a91d7c89e8b85554e9af024b3a90a105cbe1fd543f0c292f6ceab63dc402593e2640b77e52b99498b214b767cf9", 0xd0, 0xffffffffffffffff)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000200)=""/253, &(0x7f00000003c0)=0xfd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000400)='trusted\x00', &(0x7f00000001c0)=@chain={'key_or_keyring:', 0x0, ':chain\x00'})

00:20:48 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1)

00:20:48 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)

00:20:48 executing program 1:
r0 = getpgid(0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)

00:20:48 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1400, 0x2000000000003)

00:20:48 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:48 executing program 5:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mq_open(&(0x7f0000000180)='eth0\x00\xd3\x1eCF\x8e\xc1\xbel\x80N\x12\x14\xec\xee\xe0\tR\xad\xf0\x88\xbe\xbc\xf3\xef^4\xe2Q\x15\xa7CEW\xa4dp\xeb\x8f7\xae\xeeUHf\x1f\x01\xf8\xbc\xb2\x13\x93\x02\xee\x98i\xa6\x9ce\x06j\x8c_7,3G\x10s\vIBt\x03\x92V\x90\xab\xa4\xcb\x80\xdb\x9344\x98\xb6E\xde\x1a\x87\xa8A\xf8\xf5 \x1fc\xa1\xf1\x12\xdcHL\'\xde\xf3l\x99\x1c\x1ci\\i\v\x9d\xc0\x94\xebA\xa2w\xfe\x8f\x9f5<e\xd3\xd6\xb6\xa5@\xe0\xdd\xd2\x82\xba\x98\xd2|\x05+\xc18\xfa\xde\xe9&\xe3\r\x8b\x85\x96O\x895\xa9_\x7f\x9f\xd7!\xd38%\x83\xd8<\xdc]\xab\xb0\x01A\xd6\xfe\x8a\xf6\x98/\xf4N\x03\x0e\xa5-c\xc1\xf4\xe3\xc7\xcb\xd8eU\xc9\xaa0\x06\xe0\xde7\x99\xc0\xfa\x8a\r\xcb?G\x16\xe0\xba\xd7\\\xaf\x88\xd9\x12\x9a\x00\x00\x00\x00\x00\x00\x00\x00$\xe9F`\xb2\xd9\xa9\x94\x7f\x06w\x81\xd1}-Q\xda\xb6g\xfb\x8dX\xe0n\xceQnc\x95\xfe\xe5\xa95\xf0\xd3n\xb0\xf8\x1b;\xc2P}Iw\xa4\xc8\xb1[QY\xaa2)@u@1\xe8T\xfa\t\xcb\xa4W\xab\x1b/\x9b\xdf\v\x99\x1d4\x96>\xcd \x004\x91\xcb,\x8b\x02\xa5\x89\xd1Q\x9c\xc3\xcb\x9dwx\\\x8a\x95\xad\xc1Q', 0x0, 0x0, 0x0)

00:20:49 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100)}], 0x1, 0x0)

00:20:49 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1)

00:20:49 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x20000)
setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f00000000c0)=0x6, 0x4)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x0)
ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f0000000040)=0x9e)

00:20:49 executing program 2:
r0 = mq_open(&(0x7f0000000180)='eth0\x00\xd3\x1eCF\x8e\xc1\xbel\x80N\x12\x14\xec\xee\xe0\tR\xad\xf0\x88\xbe\xbc\xf3\xef^4\xe2Q\x15\xa7CEW\xa4dp\xeb\x8f7\xae\xeeUHf\x1f\x01\xf8\xbc\xb2\x13\x93\x02\xee\x98i\xa6\x9ce\x06j\x8c_7,3G\x10s\vIBt\x03\x92V\x90\xab\xa4\xcb\x80\xdb\x9344\x98\xb6E\xde\x1a\x87\xa8A\xf8\xf5 \x1fc\xa1\xf1\x12\xdcHL\'\xde\xf3l\x99\x1c\x1ci\\i\v\x9d\xc0\x94\xebA\xa2w\xfe\x8f\x9f5<e\xd3\xd6\xb6\xa5@\xe0\xdd\xd2\x82\xba\x98\xd2|\x05+\xc18\xfa\xde\xe9&\xe3\r\x8b\x85\x96O\x895\xa9_\x7f\x9f\xd7!\xd38%\x83\xd8<\xdc]\xab\xb0\x01A\xd6\xfe\x8a\xf6\x98/\xf4N\x03\x0e\xa5-c\xc1\xf4\xe3\xc7\xcb\xd8eU\xc9\xaa0\x06\xe0\xde7\x99\xc0\xfa\x8a\r\xcb?G\x16\xe0\xba\xd7\\\xaf\x88\xd9\x12\x9a\x00\x00\x00\x00\x00\x00\x00\x00$\xe9F`\xb2\xd9\xa9\x94\x7f\x06w\x81\xd1}-Q\xda\xb6g\xfb\x8dX\xe0n\xceQnc\x95\xfe\xe5\xa95\xf0\xd3n\xb0\xf8\x1b;\xc2P}Iw\xa4\xc8\xb1[QY\xaa2)@u@1\xe8T\xfa\t\xcb\xa4W\xab\x1b/\x9b\xdf\v\x99\x1d4\x96>\xcd \x004\x91\xcb,\x8b\x02\xa5\x89\xd1Q\x9c\xc3\xcb\x9dwx\\\x8a\x95\xad\xc1Q', 0x0, 0x0, 0x0)
ppoll(&(0x7f00000002c0)=[{r0, 0x600c}], 0x1, 0x0, 0x0, 0x0)

00:20:49 executing program 5:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, <r0=>0x0}, &(0x7f0000000040)=0xc)
setreuid(0x0, r0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x4, 0x0, 0x6, 0x5f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3})
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000001d00)='/dev/null\x00', 0x2a0241, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d80)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040804}, {&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70, 0x4000}, {&(0x7f0000001580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)="6bd4fbe687bceca4367e9d8f0a43e82ad994a532aa1af34a1bf8ecd07c082190487c32475607d5a9eefdb4f695ec1308d4a45f78ad245ad5b5242b3acf4289cc56e36ed6c1b60c07ec62fe55c80e7d543c58b1c902a28e296f5383f6670b2d513a68e7b27e7d6ca6df45112ab8fefdffb8e68b79c6d551cbd4d281a40bb1c48e681af2bd0f6c8b1a1d5855a3cc1dfdbac567b94bb77f6917f1fc754c9411d8a808c53ceb7409ba71285b1196245ff99df83ba1716c3f375f368a0ebc21e37f516a75ed52b45397aca56b6ac7fa4aa4952b21479be92975358782c8f1cc64d743f501ff1f1ca0363318c779f68cf0875d8c0f1083583e", 0xf6}, {&(0x7f0000001700)="7656430dade32fbede107901a9aacd321d1204b77cd89003c71052e0e89add67629164aa7b0af88e2b9541d6db31880c574c7e120a15f607c8c9cc879f642960fd4e244ce171d50fa70c7b066ce0283a1fb3b26f1ee16f1858f12179eddd42eb6026a647d01e79afee7cba7c848f12f36286bcb11c87e63f868aa6", 0x7b}], 0x2, &(0x7f0000001800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68, 0x13340a5b58b88d4}, {&(0x7f0000001880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c80)=[{0x0}, {&(0x7f0000001a00)="5ea7b7f79e5b0fc59120ec19e3dd6326c7952a9f1e0c9f37314bc5d53cab65a134a6c3fafff5fbfef92a443d56b352acc0b1ef236180c33cbcfd18d6adba0e860ec2d2f9678065fa83dcc5c3f634518f", 0x50}, {&(0x7f0000001b00)="0ffc13d843ccdda6887af2aead07fcd478135bedee4271b1edbab1cd7bdf0662e60db797bab0a25a36b95fa2a5e0c9cc61ba86b198001cad721cbe67b42ef6f393b7639af35fbf4fd9cb7640a456e8f449c7a6c6b4aea7b97153046117f040780a33437a25f10f36d35ee37101aebb0fcab901f0f4", 0x75}, {&(0x7f0000001b80)="a0bddb1807c0229bdf89df4415c5781d8ebe86b9f3f24ef90a11b94834d731b99473691a2c3c5675f200f55a3684af57ec4cd4b56b317fbdc3b873ca8cd283dc84738b8940b756ebf26dfa370cb05fb4833b8fb743ad6f0966794bd2aaa7e5ed1e820f370c8129fcd18b5a683619550aa3e0f93199c805b16c675a00b71c20dfa1d67027170862ab40712d68010d", 0x8e}, {&(0x7f0000001c40)="23e74a00289de0db9eb7dae04f28c064191ca9c440a6e7", 0x17}], 0x5, 0x0, 0x0, 0x20000045}], 0x4, 0x10)

00:20:50 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100)}], 0x1, 0x0)

00:20:50 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1)

00:20:50 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x11, 0x80002, 0x0)
accept4$netrom(r0, 0x0, 0x0, 0x0)

00:20:51 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @remote}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x0, @loopback}], 0x10)

00:20:51 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
r1 = dup3(0xffffffffffffffff, r0, 0x80000)
ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

00:20:51 executing program 5:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, <r0=>0x0}, &(0x7f0000000040)=0xc)
setreuid(0x0, r0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x4, 0x0, 0x6, 0x5f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3})
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000001d00)='/dev/null\x00', 0x2a0241, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d80)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040804}, {&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70, 0x4000}, {&(0x7f0000001580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)="6bd4fbe687bceca4367e9d8f0a43e82ad994a532aa1af34a1bf8ecd07c082190487c32475607d5a9eefdb4f695ec1308d4a45f78ad245ad5b5242b3acf4289cc56e36ed6c1b60c07ec62fe55c80e7d543c58b1c902a28e296f5383f6670b2d513a68e7b27e7d6ca6df45112ab8fefdffb8e68b79c6d551cbd4d281a40bb1c48e681af2bd0f6c8b1a1d5855a3cc1dfdbac567b94bb77f6917f1fc754c9411d8a808c53ceb7409ba71285b1196245ff99df83ba1716c3f375f368a0ebc21e37f516a75ed52b45397aca56b6ac7fa4aa4952b21479be92975358782c8f1cc64d743f501ff1f1ca0363318c779f68cf0875d8c0f1083583e", 0xf6}, {&(0x7f0000001700)="7656430dade32fbede107901a9aacd321d1204b77cd89003c71052e0e89add67629164aa7b0af88e2b9541d6db31880c574c7e120a15f607c8c9cc879f642960fd4e244ce171d50fa70c7b066ce0283a1fb3b26f1ee16f1858f12179eddd42eb6026a647d01e79afee7cba7c848f12f36286bcb11c87e63f868aa6", 0x7b}], 0x2, &(0x7f0000001800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68, 0x13340a5b58b88d4}, {&(0x7f0000001880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c80)=[{0x0}, {&(0x7f0000001a00)="5ea7b7f79e5b0fc59120ec19e3dd6326c7952a9f1e0c9f37314bc5d53cab65a134a6c3fafff5fbfef92a443d56b352acc0b1ef236180c33cbcfd18d6adba0e860ec2d2f9678065fa83dcc5c3f634518f", 0x50}, {&(0x7f0000001b00)="0ffc13d843ccdda6887af2aead07fcd478135bedee4271b1edbab1cd7bdf0662e60db797bab0a25a36b95fa2a5e0c9cc61ba86b198001cad721cbe67b42ef6f393b7639af35fbf4fd9cb7640a456e8f449c7a6c6b4aea7b97153046117f040780a33437a25f10f36d35ee37101aebb0fcab901f0f4", 0x75}, {&(0x7f0000001b80)="a0bddb1807c0229bdf89df4415c5781d8ebe86b9f3f24ef90a11b94834d731b99473691a2c3c5675f200f55a3684af57ec4cd4b56b317fbdc3b873ca8cd283dc84738b8940b756ebf26dfa370cb05fb4833b8fb743ad6f0966794bd2aaa7e5ed1e820f370c8129fcd18b5a683619550aa3e0f93199c805b16c675a00b71c20dfa1d67027170862ab40712d68010d", 0x8e}, {&(0x7f0000001c40)="23e74a00289de0db9eb7dae04f28c064191ca9c440a6e7", 0x17}], 0x5, 0x0, 0x0, 0x20000045}], 0x4, 0x10)

00:20:51 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100)}], 0x1, 0x0)

00:20:51 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1)

00:20:51 executing program 2:
mq_open(&(0x7f0000000180)='eth0\x00\xd3\x1eCF\x8e\xc1\xbel\x80N\x12\x14\xec\xee\xe0\tR\xad\xf0\x88\xbe\xbc\xf3\xef^4\xe2Q\x15\xa7CEW\xa4dp\xeb\x8f7\xae\xeeUHf\x1f\x01\xf8\xbc\xb2\x13\x93\x02\xee\x98i\xa6\x9ce\x06j\x8c_7,3G\x10s\vIBt\x03\x92V\x90\xab\xa4\xcb\x80\xdb\x9344\x98\xb6E\xde\x1a\x87\xa8A\xf8\xf5 \x1fc\xa1\xf1\x12\xdcHL\'\xde\xf3l\x99\x1c\x1ci\\i\v\x9d\xc0\x94\xebA\xa2w\xfe\x8f\x9f5<e\xd3\xd6\xb6\xa5@\xe0\xdd\xd2\x82\xba\x98\xd2|\x05+\xc18\xfa\xde\xe9&\xe3\r\x8b\x85\x96O\x895\xa9_\x7f\x9f\xd7!\xd38%\x83\xd8<\xdc]\xab\xb0\x01A\xd6\xfe\x8a\xf6\x98/\xf4N\x03\x0e\xa5-c\xc1\xf4\xe3\xc7\xcb\xd8eU\xc9\xaa0\x06\xe0\xde7\x99\xc0\xfa\x8a\r\xcb?G\x16\xe0\xba\xd7\\\xaf\x88\xd9\x12\x9a\x00\x00\x00\x00\x00\x00\x00\x00$\xe9F`\xb2\xd9\xa9\x94\x7f\x06w\x81\xd1}-Q\xda\xb6g\xfb\x8dX\xe0n\xceQnc\x95\xfe\xe5\xa95\xf0\xd3n\xb0\xf8\x1b;\xc2P}Iw\xa4\xc8\xb1[QY\xaa2)@u@1\xe8T\xfa\t\xcb\xa4W\xab\x1b/\x9b\xdf\v\x99\x1d4\x96>\xcd \x004\x91\xcb,\x8b\x02\xa5\x89\xd1Q\x9c\xc3\xcb\x9dwx\\\x8a\x95\xad\xc1Q', 0x4000, 0x0, 0x0)

00:20:52 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xd}, 0x0, 0x0, 0x10000000, 0x5, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x0, 0x84)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1400, 0x2000000000003)

00:20:52 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0)

00:20:52 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1)

00:20:52 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400080, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
r5 = openat$null(0xffffff9c, &(0x7f00000009c0)='/dev/null\x00', 0x4000, 0x0)
setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000a00)={0x4, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}}, 0x104)
setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x82, &(0x7f0000000000)={r4}, 0x8)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000040)={r4, 0x1, 0x8}, 0x8)

00:20:52 executing program 0:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)

00:20:52 executing program 1:
r0 = socket$inet(0x2, 0x6000000000000003, 0x6)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)

00:20:53 executing program 3:
r0 = gettid()
tkill(r0, 0x34)
process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/93, 0x5d}, {&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/207, 0xcf}, {&(0x7f00000001c0)=""/176, 0xb0}, {&(0x7f0000000340)=""/207, 0xcf}], 0x5, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/32, 0x20}, {&(0x7f0000000440)=""/97, 0x61}, {&(0x7f00000004c0)=""/231, 0xe7}], 0x3, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:53 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1)

00:20:53 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e20}, 0x10)

00:20:53 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401"], 0x1}}, 0x0)
sendfile(r4, r3, 0x0, 0x80000018)

[  437.497321][T11665] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
00:20:54 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000000))
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @none}, 0xe)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000040)={0x77359400}, 0x8)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x140b, 0x400, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x40)

00:20:54 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1)

[  437.760921][   T28] audit: type=1804 audit(1596846054.361:26): pid=11671 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir234956693/syzkaller.mMcZxN/90/cgroup.controllers" dev="sda1" ino=16115 res=1
[  438.227224][T11674] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5131 sclass=netlink_tcpdiag_socket pid=11674 comm=syz-executor.3
00:20:57 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xd}, 0x0, 0x0, 0x10000000, 0x5, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x0, 0x84)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1400, 0x2000000000003)

00:20:57 executing program 2:
recvmmsg(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00')
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)

00:20:57 executing program 1:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]})
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000020"]})
sendmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000001a00)}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="a1fb056fd7", 0x5}, {&(0x7f0000000340)="07395fe873401a6481e2138fb0ae926aefc05be362f6f8b7b4c28b44c74f08b503bafe3c622ca36fe313a721ad889d95fcdeb8676c36c13ad825439e24a531af7c98f3150142a8731db0917dff03866f528495af", 0x54}, {&(0x7f0000000100)="9f281ec34d4a8ec97843b6543a34eadc4b5e4140e91a2ea71608be57af8be58d8ac7fd83d82e9c2a55608d78a66014f29496ba1aceaa58f124b8571b17e52a4ebd5edf70223a6f2e682406df2c880cd462a8872db313e301bfbae4028883bc972075faac5af4fb5480a7b37d247b1d63976387432775afaab4368251367535e1ae3aec63581ffed3202b7a62497f6bccfc5c472df234c264769702ddc4497b9e45e4a0185e7997fe5ec88774d4cca474e8553106aad22922fe83ee57396f3ce1631e6fc641ff5eff3ce4385421f499c8b244c1cdc6a448c24f0552ce0ef94515b5f17c74c4f32d7be5184317108a23a78f575fce12", 0xf5}, {0x0}, {&(0x7f00000004c0)="618732db790d415768aceaf9cfb13667bf65d6ef5f14aa5f456d62354ea41e433e999b4561b03fc79ecae59c4d90b60c60ddb2c6b577672fbfa87425dbc57759994ec00ad2fa80b89d1398f0f39df0006242266826a41a0cc5d709fb017ebac25e4d6bc9917423e86155638067ff34fcaa3ce443ec4ae19247ef4e82ba7bfe3a8f26f293bfa10bd49d92f81056995b67218c8ae4", 0x94}, {&(0x7f0000000000)="10a71f85324d099305476e191db8877a2e30a10e2231b5baeecef11ef6", 0x1d}, {0x0}, {&(0x7f00000002c0)="24812fce4f1e3369ed23addb6e0f029b8b39c1d9434f795d2186b32c2baa9e5cbf96ecd92c7529eb", 0x28}], 0x8}}], 0x2, 0x0)

00:20:57 executing program 4:
socket$unix(0x1, 0x1, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)

00:20:57 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x200, 0x200, 0x200, 0x200, 0x5, 0x2c8, 0x308, 0x308, 0x2c8, 0x308, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x1c0, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf867672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x5}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "585df8b60a4512ad52358c4ea90d706323110d7c1049bccb554d43e93500"}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)

00:20:57 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r1)
ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000000)={0x0, @bt={0x80000000, 0x2, 0x0, 0x1, 0x6, 0x9, 0x5929, 0x3ff, 0xffffff55, 0x401, 0x0, 0x0, 0x95e1, 0xb0, 0x0, 0x2, {0x6, 0x9678}, 0xe1, 0xe2}})
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:20:57 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000000)=ANY=[@ANYBLOB='8'], 0x1}}, 0x0)
sendfile(r4, r3, 0x0, 0x80000018)

00:20:57 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200052203, 0x40000000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000180)=ANY=[@ANYBLOB="8b32a920b3f77bfd7739bfadccb76149b4f81ec7dd138b2270941d70fd79c3142b5e0be19a9ae66f7b6731f2f91ac1f1cc68829f45a22a8c7a8fa63a"], &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x700, &(0x7f000000a000))

00:20:57 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21}, 0xe)
r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x200000, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x6, @private=0xa010102}, 0x10)

00:20:57 executing program 4:
socket$unix(0x1, 0x1, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)

00:20:58 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x80000000004)
write(r0, &(0x7f000058bfe4)="29000000140003b7ff00003f040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29)

00:20:58 executing program 2:
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0), 0xc, 0x0}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00')
exit(0x0)
preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0)

00:21:01 executing program 5:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000280)=0x2, 0x144)
getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, &(0x7f0000000100))
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x24a, 0x0)

00:21:01 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x9, @fixed={[], 0x50}, 0x0, 0x2}, 0xe)

00:21:01 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)

00:21:01 executing program 1:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000020"]})
sendmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000001a00)}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="a1fb056fd7", 0x5}, {&(0x7f0000000340)="07395fe873401a6481e2138fb0ae926aefc05be362", 0x15}, {&(0x7f0000000100)="9f281ec34d4a8ec97843b6543a34eadc4b5e4140e91a2ea71608be57af8be58d8ac7fd83d82e9c2a55608d78a66014f29496ba1aceaa58f124b8571b17e52a4ebd5edf70223a6f2e682406df2c880cd462a8872db313e301bfbae4028883bc972075faac5af4fb5480a7b37d247b1d63976387432775afaab4368251367535e1ae3aec63581ffed3202b7a62497f6bccfc5c472df234c264769702ddc4497b9e45e4a0185e7997fe5ec88774d4cca474e8553106aad22922fe83ee57396f3ce1631e6fc641ff5eff3ce4385421f499c8b244c1cdc6a448c24f0552ce0ef94515b5f17c74c4f32d7be5184317108a23a78f575fce12", 0xf5}, {0x0}, {&(0x7f00000004c0)="618732db790d415768aceaf9cfb13667bf65d6ef5f14aa5f456d62354ea41e433e999b4561b03fc79ecae59c4d90b60c60ddb2c6b577672fbfa87425dbc57759994ec00ad2fa80b89d1398f0f39df0006242266826a41a0cc5d709fb017ebac25e4d6bc9917423e86155638067ff34fcaa3ce443ec4ae19247ef4e82ba7bfe3a8f26f293bfa10bd49d92f81056995b67218c8ae4", 0x94}, {&(0x7f0000000000)="10a71f85324d099305476e191db8877a2e30a10e2231b5baeece", 0x1a}, {0x0}, {&(0x7f00000002c0)="24812fce4f1e3369ed23addb6e0f029b8b39c1d9434f795d2186b32c2baa9e5cbf96ecd92c7529eb", 0x28}], 0x8}}], 0x2, 0x0)

00:21:01 executing program 0:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000020"]})
sendmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="a1fb056fd7", 0x5}, {&(0x7f0000000340)="07395fe873401a6481e2138fb0ae926aefc05be362", 0x15}, {&(0x7f0000000100)="9f281ec34d4a8ec97843b6543a34eadc4b5e4140e91a2ea71608be57af8be58d8ac7fd83d82e9c2a55608d78a66014f29496ba1aceaa58f124b8571b17e52a4ebd5edf70223a6f2e682406df2c880cd462a8872db313e301bfbae4028883bc972075faac5af4fb5480a7b37d247b1d63976387432775afaab4368251367535e1ae3aec63581ffed3202b7a62497f6bccfc5c472df234c264769702ddc4497b9e45e4a0185e7997fe5ec88774d4cca474e8553106aad22922fe83ee57396f3ce1631e6fc641ff5eff3ce4385421f499c8b244c1cdc6a448c24f0552ce0ef94515b5f17c74c4f32d7be5184317108a23a78f575fce", 0xf4}, {0x0}, {&(0x7f00000004c0)="618732db790d415768aceaf9cfb13667bf65d6ef5f14aa5f456d62354ea41e433e999b4561b03fc79ecae59c4d90b60c60ddb2c6b577672fbfa87425dbc57759994ec00ad2fa80b89d1398f0f39df0006242266826a41a0cc5d709fb017ebac25e4d6bc9917423e86155638067ff34fcaa3ce443ec4ae19247ef4e82ba7bfe3a8f26f293bfa10bd49d92f81056995b67218c8ae4", 0x94}, {}, {0x0}, {&(0x7f00000002c0)="24812fce4f1e3369ed23addb6e0f029b8b39c1d9434f795d2186b32c2baa9e5cbf96ecd92c75", 0x26}], 0x8}}], 0x1, 0x0)

00:21:01 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5b}], 0x2}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

[  445.564392][T11768] device bridge_slave_1 left promiscuous mode
[  445.574506][T11768] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.844963][T11774] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.873621][T11774] bridge0: port 2(bridge_slave_1) entered disabled state
00:21:02 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000004002ffff01"], 0x48}], 0x1}, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000140)={0x1, 0x2, 0x1000, 0xbf, &(0x7f0000000000)="c0b4b2a8025a1f14dee673b7d8f1d1d1f51267cdd50995563101a1e639cda59976994762351215b467728f29748b198068c908564e4493ecddaf0485b8dab2456b3ce8704bcec7b4928d483e2a7dc8948ac3a3897a410233bf44c1f33ee18bdcda76517d04f1d642fe546c32e1d7b61dfdaeeac3f0d6b5a3991859e4563a6199c484aa6a13b2dc1b50bb407fc50047b1c1d64e83da553b5f10fe21db242e64661f8b43ef739a91a2b016fbf7a447b8f25fd3cee5b8abf827eecaf9a79a5fb3", 0x53, 0x0, &(0x7f00000000c0)="839f323d930e15930d490429270bd7937f8179b59831c0e550cc3858ded72820d82e5cddc9c0da9b5291bdea9fc2e8e60758077b9d0b87d08e2a2aa864825f4890b8254fc4dc5c195e6eafdd2627933c21e227"})

[  445.940765][T11774] device bridge_slave_1 entered promiscuous mode
[  445.963849][T11774] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.973526][T11774] bridge0: port 2(bridge_slave_1) entered forwarding state
[  445.990383][T11781] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.998052][T11781] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.007483][T11781] device bridge_slave_1 entered promiscuous mode
[  446.008571][T11781] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.021618][T11781] bridge0: port 2(bridge_slave_1) entered forwarding state
00:21:02 executing program 1:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000020"]})
sendmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000001a00)}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="a1fb056fd7", 0x5}, {&(0x7f0000000340)="07395fe873401a6481e2138fb0ae926aefc05be362", 0x15}, {&(0x7f0000000100)="9f281ec34d4a8ec97843b6543a34eadc4b5e4140e91a2ea71608be57af8be58d8ac7fd83d82e9c2a55608d78a66014f29496ba1aceaa58f124b8571b17e52a4ebd5edf70223a6f2e682406df2c880cd462a8872db313e301bfbae4028883bc972075faac5af4fb5480a7b37d247b1d63976387432775afaab4368251367535e1ae3aec63581ffed3202b7a62497f6bccfc5c472df234c264769702ddc4497b9e45e4a0185e7997fe5ec88774d4cca474e8553106aad22922fe83ee57396f3ce1631e6fc641ff5eff3ce4385421f499c8b244c1cdc6a448c24f0552ce0ef94515b5f17c74c4f32d7be5184317108a23a78f575fce12", 0xf5}, {0x0}, {&(0x7f00000004c0)="618732db790d415768aceaf9cfb13667bf65d6ef5f14aa5f456d62354ea41e433e999b4561b03fc79ecae59c4d90b60c60ddb2c6b577672fbfa87425dbc57759994ec00ad2fa80b89d1398f0f39df0006242266826a41a0cc5d709fb017ebac25e4d6bc9917423e86155638067ff34fcaa3ce443ec4ae19247ef4e82ba7bfe3a8f26f293bfa10bd49d92f81056995b67218c8ae4", 0x94}, {&(0x7f0000000000)="10a71f85324d099305476e191db8877a2e30a10e2231b5baeece", 0x1a}, {0x0}, {&(0x7f00000002c0)="24812fce4f1e3369ed23addb6e0f029b8b39c1d9434f795d2186b32c2baa9e5cbf96ecd92c7529eb", 0x28}], 0x8}}], 0x2, 0x0)

00:21:02 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)

00:21:03 executing program 0:
socket(0x10, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000240))

00:21:03 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5b}], 0x2}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

[  446.651682][ T9011] Bluetooth: hci1: command 0x0406 tx timeout
[  447.011821][T11796] device bridge_slave_1 left promiscuous mode
[  447.025539][T11796] bridge0: port 2(bridge_slave_1) entered disabled state
00:21:03 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x3e)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="82df4c336b577a6e75f48ec17217bf86e3b885c385efc851687d03"], 0x5ac)
setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000002c0)=@fragment={0x73, 0x0, 0x2, 0x0, 0x0, 0x9, 0x67}, 0x8)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000000)={0x58})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x21, @none, 0x6001}, 0xe)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xfc, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x4080)
r3 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r3)
r4 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETDEVINFO(r4, 0x80044944, &(0x7f0000000240)={0x5})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000140)={0xed4a, 0x2, 0xb6e, 0x3, &(0x7f0000000080)=[{0x9, 0x5, 0x1, 0x4}, {0x5, 0x3d, 0x1ff, 0xfc01}, {0x8, 0x2, 0x0, 0x2}]})
syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x8, 0x4003)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)

00:21:04 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5b}], 0x2}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:04 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)

00:21:04 executing program 0:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5b}], 0x2}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:04 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21}, 0xe)
openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0)

00:21:04 executing program 1:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000020"]})
sendmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000001a00)}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="a1fb056fd7", 0x5}, {&(0x7f0000000340)="07395fe873401a6481e2138fb0ae926aefc05be362", 0x15}, {&(0x7f0000000100)="9f281ec34d4a8ec97843b6543a34eadc4b5e4140e91a2ea71608be57af8be58d8ac7fd83d82e9c2a55608d78a66014f29496ba1aceaa58f124b8571b17e52a4ebd5edf70223a6f2e682406df2c880cd462a8872db313e301bfbae4028883bc972075faac5af4fb5480a7b37d247b1d63976387432775afaab4368251367535e1ae3aec63581ffed3202b7a62497f6bccfc5c472df234c264769702ddc4497b9e45e4a0185e7997fe5ec88774d4cca474e8553106aad22922fe83ee57396f3ce1631e6fc641ff5eff3ce4385421f499c8b244c1cdc6a448c24f0552ce0ef94515b5f17c74c4f32d7be5184317108a23a78f575fce12", 0xf5}, {0x0}, {&(0x7f00000004c0)="618732db790d415768aceaf9cfb13667bf65d6ef5f14aa5f456d62354ea41e433e999b4561b03fc79ecae59c4d90b60c60ddb2c6b577672fbfa87425dbc57759994ec00ad2fa80b89d1398f0f39df0006242266826a41a0cc5d709fb017ebac25e4d6bc9917423e86155638067ff34fcaa3ce443ec4ae19247ef4e82ba7bfe3a8f26f293bfa10bd49d92f81056995b67218c8ae4", 0x94}, {&(0x7f0000000000)="10a71f85324d099305476e191db8877a2e30a10e2231b5baeece", 0x1a}, {0x0}, {&(0x7f00000002c0)="24812fce4f1e3369ed23addb6e0f029b8b39c1d9434f795d2186b32c2baa9e5cbf96ecd92c7529eb", 0x28}], 0x8}}], 0x2, 0x0)

00:21:04 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5b}], 0x2}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

[  448.177410][T11825] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.188069][T11825] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.275862][T11825] device bridge_slave_1 entered promiscuous mode
[  448.297779][T11825] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.308831][T11825] bridge0: port 2(bridge_slave_1) entered forwarding state
00:21:05 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00')
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYBLOB], 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
read(r0, &(0x7f0000000380)=""/233, 0xffbe)

00:21:05 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)

00:21:05 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x15)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}}}, 0x24}}, 0x0)
sendmsg$can_raw(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)=@canfd={{0x3}, 0x1b, 0x1, 0x0, 0x0, "9c841945f1d1bf6cc58416e0ceee3a4171df4a55ce12b76fad7a81da0515db6cf2cfc86c26a16491ea6bac1480c16975e9f711f02d4947fbcaa98c67dbfbe078"}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x1)
r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x21, @fixed, 0x0, 0x2}, 0xe)

00:21:05 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5b}], 0x2}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:05 executing program 0:
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000020"]})
sendmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000001a00)}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="a1fb056fd7", 0x5}, {&(0x7f0000000340)="07395fe873401a6481e2138fb0ae926aefc05be362f6f8b7b4c28b44c74f08b503bafe3c622ca36fe313a721ad889d95fcdeb8676c36c13ad825439e24a531af7c98f3150142a8731db0917dff03866f528495af", 0x54}, {&(0x7f0000000100)="9f281ec34d4a8ec97843b6543a34eadc4b5e4140e91a2ea71608be57af8be58d8ac7fd83d82e9c2a55608d78a66014f29496ba1aceaa58f124b8571b17e52a4ebd5edf70223a6f2e682406df2c880cd462a8872db313e301bfbae4028883bc972075faac5af4fb5480a7b37d247b1d63976387432775afaab4368251367535e1ae3aec63581ffed3202b7a62497f6bccfc5c472df234c264769702ddc4497b9e45e4a0185e7997fe5ec88774d4cca474e8553106aad22922fe83ee57396f3ce1631e6fc641ff5eff3ce4385421f499c8b244c1cdc6a448c24f0552ce0ef94515b5f17c74c4f32d7be5184317108a23a78f575fce12", 0xf5}, {&(0x7f0000000240)="7a0f5b625df3394baf784ad30a6755eac841373c0d28134be439", 0x1a}, {&(0x7f00000004c0)="618732db790d415768aceaf9cfb13667bf65d6ef5f14aa5f456d62354ea41e433e999b4561b03fc79ecae59c4d90b60c60ddb2c6b577672fbfa87425dbc57759994ec00ad2fa80b89d1398f0f39df0006242266826a41a0cc5d709fb017ebac25e4d6bc9917423e86155638067ff34fcaa3ce443ec4ae19247ef4e82ba7bfe3a8f26f293bfa10bd49d92f81056995b67218c8ae4", 0x94}, {&(0x7f0000000000)="10a71f85324d099305476e191db8877a2e30a10e2231b5baeecef11ef6", 0x1d}, {0x0}, {&(0x7f00000002c0)="24812fce4f1e3369ed23addb6e0f029b8b39c1d9434f795d2186b32c2baa9e5cbf96ecd92c7529eb", 0x28}, {&(0x7f0000000680)="759fe065be53ae625fe7d24723647f4de00e28042ffcdddcf9c59bd711d463a94066c51b0729e29e7b6bed3bb04343a2765506bef42e0ba4f24831407fec82618e2e55f2c07ecbf9b75bc80c7e18ae2c4088abcf0ae347302b1ba0e146d0570231469c8f932d9c0593764311b1a84498851a5ec7bd8f943e0573d8d5e5ad4d750790f02fcb4784eb4feb36e0f6705c", 0x8f}], 0x9}}], 0x2, 0x0)

00:21:05 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080))
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x27)

00:21:05 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)

00:21:06 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000080))
r1 = gettid()
tkill(r1, 0x34)
r2 = syz_open_procfs(r1, &(0x7f00000000c0)='smaps_rollup\x00')
fchdir(r2)
ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000000)={0x5})
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:21:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dL\xc4J\x80\x89K\xf6w\xf3\x97\xac#*\x7f{\x16\xe1\v\xbb\x91\x05\x00\x00\x00\x00\x00\x00\x00MK_S#%\xba\x82h\xe2\x1f\xd4\xd6\x80!\xcb`\xbc\xaa%\xed*\xc4\x9fU\"\xa7\xe5SK8\xe5b\xaf\xa9\x02\xb8-Hr\x13\b7\x80\xe0\xb2\xaf\xb6\x98\x02J\xed\x1d\x9cO\x15m\'\xd2\xa2AI\xdb!\xc8\x85\xf9\x93\xe0^A{\x8av\xbb{\t\xd3\xf1b\x83\xb4\xa9\x894\xb9m\x8fm:2L\x06J\xf8\xde\xd0\x03\x00\x00\x00\x8c\xf9\x1cT\x10\x94\x9a\x90\xc6\x87*zBX\xca\x00\xdc\x1b}\xfe\x97\x1al\xdd\xa9 \x18\xcf\xc7\r\xae\xc8 \xb2\x81\xb4\xf6\xa6\xd7$\xda\xc3\x1fN\x8d\x85-%M\xed\xff\x13\x9e\x02\x1e\x9a', 0x4)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1000003, 0x4046811, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:21:07 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5b}], 0x2}, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:07 executing program 1:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000020"]})
sendmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000001a00)}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="a1fb056fd7", 0x5}, {&(0x7f0000000340)="07395fe873401a6481e2138fb0ae926aefc05be362f6f8b7b4c28b44c74f08b503bafe3c622ca36fe313a721ad889d95fcdeb8676c36c13ad825439e24a531af7c98f3150142a8731db0917dff03866f528495af", 0x54}, {&(0x7f0000000100)}, {0x0}, {&(0x7f00000004c0)="618732db790d415768aceaf9cfb13667bf65d6ef5f14aa5f456d62354ea41e433e999b4561b03fc79ecae59c4d90b60c60ddb2c6b577672fbfa87425dbc57759994ec00ad2fa80b89d1398f0f39df0006242266826a41a0cc5d709fb017ebac25e4d6bc9917423e86155638067ff34fcaa3ce443ec4ae19247ef4e82ba7bfe3a8f26f293bfa10bd49d92f81056995b67218c8ae4", 0x94}, {&(0x7f0000000000)="10a71f85324d099305476e191db8877a2e30a10e2231b5baeece", 0x1a}, {0x0}, {&(0x7f00000002c0)="24812fce4f1e3369ed23addb6e0f029b8b39c1d9", 0x14}], 0x8}}], 0x2, 0x0)

[  451.455623][T11872] device bridge_slave_1 left promiscuous mode
[  451.462691][T11872] bridge0: port 2(bridge_slave_1) entered disabled state
00:21:08 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)

00:21:08 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x20201, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="021080010500000d0400"/28], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

00:21:08 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5b}], 0x2}, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:08 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r5}, 0x0)
io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0)

[  451.675132][T11872] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.684203][T11872] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.720178][T11872] device bridge_slave_1 entered promiscuous mode
[  451.735662][T11872] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.744756][T11872] bridge0: port 2(bridge_slave_1) entered forwarding state
00:21:08 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000140)="6d73c8e14f84afe3efbd2bdef70da70a56a24dcaf367a1a424ec513b78bb64dbb8f6f36b18d87f6fe300e2aa0b44c98b47", 0x31}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1}}], 0x1, 0x0, 0x0)

00:21:08 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000003140153"], 0x1}}, 0x0)
sendfile(r4, r3, 0x0, 0x80000018)

00:21:08 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5b}], 0x2}, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:09 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)

00:21:09 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r5}, 0x0)
io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:09 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00')
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0x401, 0x2)
ioctl$FS_IOC_GETVERSION(r5, 0x80047601, &(0x7f0000000240))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r3, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x28}}, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x59d}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8a5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000040)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

[  452.667268][T11906] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=11906 comm=syz-executor.3
[  452.829561][T11915] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=11915 comm=syz-executor.3
00:21:09 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:09 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
gettid()
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0xc01, 0x3, 0x298, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x200, 0x3c8, 0x3c8, 0x200, 0x3c8, 0x3, 0x0, {[{{@ip={@empty, @broadcast, 0x0, 0x0, 'bridge_slave_1\x00', 'gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@set={{0x40, 'set\x00'}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x5]}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8)

00:21:09 executing program 1:
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0xb})
ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000020"]})
sendmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000001a00)}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="a1fb056fd7", 0x5}, {&(0x7f0000000340)="07395fe873401a6481e2138fb0ae926aefc05be362f6f8b7b4c28b44c74f08b503bafe3c622ca36fe313a721ad889d95fcdeb8676c36c13ad825439e24a531af7c98f3150142a8731db0917dff03866f528495", 0x53}, {&(0x7f0000000100)="9f281ec34d4a8ec97843b6543a34eadc4b5e4140e91a2ea71608be57af8be58d8ac7fd83d82e9c2a55608d78a66014f29496ba1aceaa58f124b8571b17e52a4ebd5edf70223a6f2e682406df2c880cd462a8872db313e301bfbae4028883bc972075faac5af4fb5480a7b37d247b1d63976387432775afaab4368251367535e1ae3aec63581ffed3202b7a62497f6bccfc5c472df234c264769702ddc4497b9e45e4a0185e7997fe5ec88774d4cca474e8553106aad22922fe83ee57396f3ce1631e6fc641ff5eff3ce4385421f499c8b244c1cdc6a448c24f0552ce0ef94515b5f17c74c4f32d7be5184317108a23a78f575fce12", 0xf5}, {&(0x7f0000000240)="7a0f5b625df3394baf784ad30a6755eac841373c0d28134be439ddbce742163cb208e67c8065360ec5f27a166191732a3c7a1143f2d1095f8c3db3f00077c31ac169407a75c56be6e65fe469646c14318a14034a12c53c0c2540123a6093071191a34db25b1313", 0x67}, {&(0x7f00000004c0)="618732db790d415768aceaf9cfb13667bf65d6ef5f14aa5f456d62354ea41e433e999b4561b03fc79ecae59c4d90b60c60ddb2c6b577672fbfa87425dbc57759994ec00ad2fa80b89d1398f0f39df0006242266826a41a0cc5d709fb017ebac25e4d6bc9917423e86155638067ff34fcaa3ce443ec4ae19247ef4e82ba7bfe3a8f26f293bfa10bd49d92f81056995b67218c8ae4", 0x94}, {&(0x7f0000000000)="10a71f85324d099305476e191db8877a2e30a10e2231b5baeecef11ef6", 0x1d}, {0x0}, {&(0x7f00000002c0)="24812fce4f1e3369ed23addb6e0f029b8b39c1d9434f795d2186b32c2baa9e5cbf96ecd92c7529eb", 0x28}, {&(0x7f0000000680)="759fe065be53ae625fe7d24723647f4de00e28042ffcdddcf9c59bd711d463a94066c51b0729e29e7b6bed3bb04343a2765506bef42e0ba4f24831407fec82618e2e55f2c07ecbf9b75bc80c7e18ae2c4088abcf0ae347302b1ba0e146d0570231469c8f932d9c0593764311b1a84498851a5ec7bd8f943e0573d8d5e5ad4d750790f02fcb4784eb4feb36e0f670", 0x8e}], 0x9}}], 0x2, 0x0)

00:21:09 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xec, @any, 0x7, 0x2}, 0xfffffffffffffeee)

00:21:09 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r5}, 0x0)
io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:09 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)

[  453.502501][T11939] device bridge_slave_1 left promiscuous mode
[  453.514018][T11939] bridge0: port 2(bridge_slave_1) entered disabled state
00:21:10 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

[  453.670944][T11946] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.678216][T11946] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.688451][T11946] device bridge_slave_1 entered promiscuous mode
[  453.696183][T11946] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.703530][T11946] bridge0: port 2(bridge_slave_1) entered forwarding state
00:21:10 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x516}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40004}, 0x80)

00:21:10 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r5}, 0x0)
io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:10 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)

00:21:10 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCREVOKE(r0, 0x80004507, 0x0)

00:21:10 executing program 1:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]})
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000020"]})
sendmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000001a00)}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="a1fb056fd7", 0x5}, {&(0x7f0000000340)="07395fe873401a6481e2138fb0ae926aefc05be362f6f8b7b4c28b44c74f08b503bafe3c622ca36fe313a721ad889d95fcdeb8676c36c13ad825439e24a531af7c98f3150142a8731db0917dff03866f528495af", 0x54}, {&(0x7f0000000100)="9f281ec34d4a8ec97843b6543a34eadc4b5e4140e91a2ea71608be57af8be58d8ac7fd83d82e9c2a55608d78a66014f29496ba1aceaa58f124b8571b17e52a4ebd5edf70223a6f2e682406df2c880cd462a8872db313e301bfbae4028883bc972075faac5af4fb5480a7b37d247b1d63976387432775afaab4368251367535e1ae3aec63581ffed3202b7a62497f6bccfc5c472df234c264769702ddc4497b9e45e4a0185e7997fe5ec88774d4cca474e8553106aad22922fe83ee57396f3ce1631e6fc641ff5eff3ce4385421f499c8b244c1cdc6a448c24f0552ce0ef94515b5f17c74c4f32d7be5184317108a23a78f575fce12", 0xf5}, {0x0}, {&(0x7f00000004c0)="618732db790d415768aceaf9cfb13667bf65d6ef5f14aa5f456d62354ea41e433e999b4561b03fc79ecae59c4d90b60c60ddb2c6b577672fbfa87425dbc57759994ec00ad2fa80b89d1398f0f39df0006242266826a41a0cc5d709fb017ebac25e4d6bc9917423e86155638067ff34fcaa3ce443ec4ae19247ef4e82ba7bfe3a8f26f293bfa10bd49d92f81056995b67218c8ae4", 0x94}, {&(0x7f0000000000)="10a71f85324d099305476e191db8877a2e30a10e2231b5baeecef11ef6", 0x1d}, {0x0}, {&(0x7f00000002c0)="24812fce4f1e3369ed23addb6e0f029b8b39c1d9434f795d2186b32c2baa9e5cbf96ecd92c7529eb", 0x28}], 0x8}}], 0x2, 0x0)

[  454.355838][T11973] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11973 comm=syz-executor.3
[  454.427787][T11977] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11977 comm=syz-executor.3
00:21:11 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:11 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
socket$inet6_tcp(0xa, 0x1, 0x0)
io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0)

[  454.571018][T11978] device bridge_slave_1 left promiscuous mode
[  454.586532][T11978] bridge0: port 2(bridge_slave_1) entered disabled state
00:21:11 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)

00:21:11 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff010da538caaa162f0f0900bde977aaf46b1d37"], 0x48}], 0x1}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r1)
r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r2)
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x80000000, 0x8, 0x84800, r2})
ioctl$FITHAW(r0, 0xc0045878)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3ba853f3d391d48c, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:21:11 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCREVOKE(r0, 0x80004507, 0x0)

00:21:11 executing program 1:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]})
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000020"]})
sendmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000001a00)}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="a1fb056fd7", 0x5}, {&(0x7f0000000340)="07395fe873401a6481e2138fb0ae926aefc05be362f6f8b7b4c28b44c74f08b503bafe3c622ca36fe313a721ad889d95fcdeb8676c36c13ad825439e24a531af7c98f3150142a8731db0917dff03866f528495af", 0x54}, {&(0x7f0000000100)="9f281ec34d4a8ec97843b6543a34eadc4b5e4140e91a2ea71608be57af8be58d8ac7fd83d82e9c2a55608d78a66014f29496ba1aceaa58f124b8571b17e52a4ebd5edf70223a6f2e682406df2c880cd462a8872db313e301bfbae4028883bc972075faac5af4fb5480a7b37d247b1d63976387432775afaab4368251367535e1ae3aec63581ffed3202b7a62497f6bccfc5c472df234c264769702ddc4497b9e45e4a0185e7997fe5ec88774d4cca474e8553106aad22922fe83ee57396f3ce1631e6fc641ff5eff3ce4385421f499c8b244c1cdc6a448c24f0552ce0ef94515b5f17c74c4f32d7be5184317108a23a78f575fce12", 0xf5}, {0x0}, {&(0x7f00000004c0)="618732db790d415768aceaf9cfb13667bf65d6ef5f14aa5f456d62354ea41e433e999b4561b03fc79ecae59c4d90b60c60ddb2c6b577672fbfa87425dbc57759994ec00ad2fa80b89d1398f0f39df0006242266826a41a0cc5d709fb017ebac25e4d6bc9917423e86155638067ff34fcaa3ce443ec4ae19247ef4e82ba7bfe3a8f26f293bfa10bd49d92f81056995b67218c8ae4", 0x94}, {&(0x7f0000000000)="10a71f85324d099305476e191db8877a2e30a10e2231b5baeecef11ef6", 0x1d}, {0x0}, {&(0x7f00000002c0)="24812fce4f1e3369ed23addb6e0f029b8b39c1d9434f795d2186b32c2baa9e5cbf96ecd92c7529eb", 0x28}], 0x8}}], 0x2, 0x0)

00:21:12 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5b}], 0x2}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:12 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
socket$inet6_tcp(0xa, 0x1, 0x0)
io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:12 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)

00:21:12 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
io_setup(0x9328784c, &(0x7f0000000280)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
io_pgetevents(r2, 0x8000, 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080), 0x0)

00:21:12 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCREVOKE(r0, 0x80004507, 0x0)

00:21:12 executing program 1:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]})
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000020"]})
sendmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000001a00)}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="a1fb056fd7", 0x5}, {&(0x7f0000000340)="07395fe873401a6481e2138fb0ae926aefc05be362f6f8b7b4c28b44c74f08b503bafe3c622ca36fe313a721ad889d95fcdeb8676c36c13ad825439e24a531af7c98f3150142a8731db0917dff03866f528495af", 0x54}, {&(0x7f0000000100)="9f281ec34d4a8ec97843b6543a34eadc4b5e4140e91a2ea71608be57af8be58d8ac7fd83d82e9c2a55608d78a66014f29496ba1aceaa58f124b8571b17e52a4ebd5edf70223a6f2e682406df2c880cd462a8872db313e301bfbae4028883bc972075faac5af4fb5480a7b37d247b1d63976387432775afaab4368251367535e1ae3aec63581ffed3202b7a62497f6bccfc5c472df234c264769702ddc4497b9e45e4a0185e7997fe5ec88774d4cca474e8553106aad22922fe83ee57396f3ce1631e6fc641ff5eff3ce4385421f499c8b244c1cdc6a448c24f0552ce0ef94515b5f17c74c4f32d7be5184317108a23a78f575fce12", 0xf5}, {0x0}, {&(0x7f00000004c0)="618732db790d415768aceaf9cfb13667bf65d6ef5f14aa5f456d62354ea41e433e999b4561b03fc79ecae59c4d90b60c60ddb2c6b577672fbfa87425dbc57759994ec00ad2fa80b89d1398f0f39df0006242266826a41a0cc5d709fb017ebac25e4d6bc9917423e86155638067ff34fcaa3ce443ec4ae19247ef4e82ba7bfe3a8f26f293bfa10bd49d92f81056995b67218c8ae4", 0x94}, {&(0x7f0000000000)="10a71f85324d099305476e191db8877a2e30a10e2231b5baeecef11ef6", 0x1d}, {0x0}, {&(0x7f00000002c0)="24812fce4f1e3369ed23addb6e0f029b8b39c1d9434f795d2186b32c2baa9e5cbf96ecd92c7529eb", 0x28}], 0x8}}], 0x2, 0x0)

00:21:12 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCREVOKE(r0, 0x80004507, 0x0)

00:21:12 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)

00:21:12 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
socket$inet6_tcp(0xa, 0x1, 0x0)
io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:13 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x7, 0x4)

00:21:13 executing program 1:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]})
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000020"]})
sendmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000001a00)}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="a1fb056fd7", 0x5}, {&(0x7f0000000340)="07395fe873401a6481e2138fb0ae926aefc05be362f6f8b7b4c28b44c74f08b503bafe3c622ca36fe313a721ad889d95fcdeb8676c36c13ad825439e24a531af7c98f3150142a8731db0917dff03866f528495af", 0x54}, {&(0x7f0000000100)="9f281ec34d4a8ec97843b6543a34eadc4b5e4140e91a2ea71608be57af8be58d8ac7fd83d82e9c2a55608d78a66014f29496ba1aceaa58f124b8571b17e52a4ebd5edf70223a6f2e682406df2c880cd462a8872db313e301bfbae4028883bc972075faac5af4fb5480a7b37d247b1d63976387432775afaab4368251367535e1ae3aec63581ffed3202b7a62497f6bccfc5c472df234c264769702ddc4497b9e45e4a0185e7997fe5ec88774d4cca474e8553106aad22922fe83ee57396f3ce1631e6fc641ff5eff3ce4385421f499c8b244c1cdc6a448c24f0552ce0ef94515b5f17c74c4f32d7be5184317108a23a78f575fce12", 0xf5}, {0x0}, {&(0x7f00000004c0)="618732db790d415768aceaf9cfb13667bf65d6ef5f14aa5f456d62354ea41e433e999b4561b03fc79ecae59c4d90b60c60ddb2c6b577672fbfa87425dbc57759994ec00ad2fa80b89d1398f0f39df0006242266826a41a0cc5d709fb017ebac25e4d6bc9917423e86155638067ff34fcaa3ce443ec4ae19247ef4e82ba7bfe3a8f26f293bfa10bd49d92f81056995b67218c8ae4", 0x94}, {&(0x7f0000000000)="10a71f85324d099305476e191db8877a2e30a10e2231b5baeecef11ef6", 0x1d}, {0x0}, {&(0x7f00000002c0)="24812fce4f1e3369ed23addb6e0f029b8b39c1d9434f795d2186b32c2baa9e5cbf96ecd92c7529eb", 0x28}], 0x8}}], 0x2, 0x0)

00:21:13 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5b}], 0x2}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:13 executing program 5:
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x80004507, 0x0)

00:21:13 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)

00:21:13 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_FALLOCATE, 0x0)
io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:13 executing program 1:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0)

00:21:14 executing program 5:
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x80004507, 0x0)

00:21:14 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5b}], 0x2}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:14 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)

00:21:14 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_FALLOCATE, 0x0)
io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:14 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000001300)='trusted.overlay.nlink\x00', &(0x7f0000001340)={'L+', 0x6}, 0x16, 0x1)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0)

00:21:15 executing program 5:
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x80004507, 0x0)

00:21:15 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5b}], 0x2}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:15 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x1)
setresuid(0x0, r1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0x1)
setresuid(0x0, r3, 0x0)
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r7, r5, r6)
r8 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r9=>0x0, <r10=>0x0}, &(0x7f0000cab000)=0xc)
r11 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r11, r9, r10)
r12 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r13=>0x0, <r14=>0x0}, &(0x7f0000cab000)=0xc)
r15 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r15, r13, r14)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010000000000000002000400", @ANYRES32=0x0, @ANYBLOB="02001200", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32, @ANYRES16=r7, @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32, @ANYBLOB="040000000000000008000000", @ANYRES32=r6, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="08000500", @ANYRES32=r14, @ANYBLOB="10000700000000002000010000000000"], 0x64, 0x2)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:21:15 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1)

00:21:16 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_FALLOCATE, 0x0)
io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:16 executing program 5:
r0 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCREVOKE(r0, 0x80004507, 0x0)

00:21:16 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1)

00:21:16 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:16 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000001300)='trusted.overlay.nlink\x00', &(0x7f0000001340)={'L+', 0x6}, 0x16, 0x1)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0)

00:21:16 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000540)="0552949b987d33a623bf944ea8578dcc39ede9449151fed9c9d8b5a69da24ae2359b979f72fd21f56e70a7fc84f1ce17e6c815dfab7b5de5ab1db7056ec213776cbfa811cb48036109bd7244e399c49a2e0868ac5b74c188bd38fe95eb5457379f68f9ddb169699be7d75090f9beb3d48d7d9e59f7be9aff19170919ec6530b03f5683fa24a1a94ff037f74ebb6523ed07f51e94a546fcebba9a123761b82104e611dc17d290dff3a603136e8ff00064eb5871648af80e0867c4a7ffd9368460d7d8041580d9b769cb5ea51fdb5eeaea24549712720d56bc69084de7187add3299c6cb81d9235964cc301b571852a3772aee7124479cf4cab515d7c6faa79ee6a6c963b4b220adad2eb2a9dc236fb195162ba29f3e11a7d6adf21ce0c4d2114adda48cb7a71378ea09775edd507c94ce872173d5253d6b3384858999d014a126bf707fa528aea96480ee2bd964a461e998bee67a8fcb1f9568985b446c8e20bc5f15d677a7173cb44ac8ef65f39dac2da45b194c11cb595d12135e6452d08c2c5b38538d3fe5c20a79e162c4c581c0e53f55bfd66b077565f803d1366a7d3f086c9cbd73bfe1cdffb16d5f76af34bd97f0b7986a6dc0ea27dcbe45964f47acc7e6fed569ae0abd7f8c5c2d255ae2f50c0f23d5c9c4b9cf177b7cc82bea9ff0e34d91eab092e47946e425766aaad24b7e28b001dc9121d481f1e1c97644fede4a91e53a5afbfd67adfb6b8cceb5d20c1bedad22ff6f6407cce0f93d63e5208400b3dfce29d933cf302f8af923f0104b2876e495dd46a688fe13e3391163c6e8824fab8aa8be0741ef07fcbfa109c18424ef8d333122829eac59c73ce9a21364673b2d597ef8c3724255fde7039cfa5b59aa495967c9a5f1058c006e8d083e7fe1c93cfb8c4933c1c8ceba0fe35620e772f47118ff089ccb6e2731e7d186d8f92da5e7678b1e6e697e236b47b4cf2f186d10d54819e780698a37af034bcb076c5d00ea9449d3d65cd2ff2d4e3e55031c3a458458cc27490ad79796761a8b8a923462931df96a6d09c04f73cb83910d8df8d86b258ff68fcf33e0f75dd823ccd6329004c8d46d71157b85045058664462c9a3034ac5520906ce72a26b65043932e3f3f2c3a2d826cdd32a851818c2cf0ba9554af141372ff039387d71119ece42e4ee42666f00a00b542f2e3a5263073d1370c0d0d244b3d2f704dec3b948a8a82bee5242e551cf2fcc5f03a4605953a87b92decc98909f99203572deabd6ad4539fe3601007b418ffb7debddbe099c0c07023d1220c9b467464e5753e0f8f747a7e3741740adb2014b5c530a4b75e8c192ec8b62f6563d04d2177eafb442f0eb7882e74def312335b4532715f6e8773511b81a36a6152d346ee55e91a00fe12f7872981297b2ea5384b8f95a3b9c4c70d28a22698801e0d301c320aa3501d016fa9496dee570c48e80a1406d0d0de064c7e9286f35955899f239ca9a9fa0130b48c8786cf9d01089922a9fc8c548fa464206c8bb875ca83e494ff3b103b8b3b3583a3ffa8325b076d45eafe71ce3ea4c6b95f01ff890d522fc35f9a57e504152cff9ab1accd0ab60cd6291ac788b55c395d81052b14a599b10c59c668981dd545c5a6108a6cb5fcfc8aa2f96cebc21d6bc1e941347a70340a2deb6fc4184f21f5cb38de5d0280ba36e420df95da17c1c363516a639c34b5e5b13993dac5eda4ffdc046095bb9c9805acffe814baf9e4995c1dc4f16952229c1b4c1b41d346859fe4eb4a77fd9d6f60228f542e7c1f75424e98a971b347d587bb59fcae113957915baf1ad88f76a5ff66c0ad479641a3e26cfddb0c565da4fc62fa48b3914793d65b17d72420cf12b991f8809efa2bc4d50cd20449442dae72028a0b95350db2fa8d624c126f565688dbc1a77421145ab8cc360cef112f4e457ccbb870ae9ba1cdc705dc58c6aa650a70085520cc2b30bf5d243706dd5d679d270cdf6b1b1be38b6889bb32bd8182dc695deb528598c86a9a64ca23fd5bc9808461c41349cfe06c4fe850313e8b25770d118086048c205901c83602984fa02a84c05c7420549a80a8977fcf808f217be5eb8f996000756e2db8cde99fa52e9b6ccadaa57f9f4d748cbc2ddca58241da7ad9280beb941705c3b60d57033411c445a7cd53adf089e389901cb45cd35c9b4cebfea40c9d42865a11de703c6fc3c76741bbe17695092c10e1ccde1e99b8ea3ed459a74b0498bf67fe7238770406010f8b12818d1d235c0e9e0b8f77e955e9f1983db559fc0adbacb40adc206c8672bae67507912273f4022a2453fb6a174859739c894ea4d820505df935ae504988a719b25f21fcefcd46d3f3c407d5e69a47238933facf7013f7f432310d317617dba46e16ddb0ce4c1e8a1d0c7f04c90f7b72d39241ee9699bb51d7d94e90aae8d69769759a19a92fe3b364f30d4e4c86439f97e5297c9df811bdb294651a403dc5ac4417a735463b043e333aaf9c91b93e6637c6679cfb1f6dddf0a84ce98c7fc5daad305b0d89d23ea2131fe7cd7af5f5253d977b7fc3ed34f3f3a8e912c90dd4e0c6c481a18d2e8acaa78a1cc47560b75f6676eb6b3e6549d5e326204135c4364a163cfdc0a48daab2667fd5e664389063a99e91026f71e4b80fcec75d610143fe464efeb19d667ab78c9a52d65bfd33682e0b593514e0f1dd267ab1a0667a4292372dc0e28b3338377219f4c109eb8127b8bc8af6d1ecaf4b2d37e1b657f91442c8ce31adba0d763416918763ca51e973188f2b38798a821b793e3bcd4a35cb23f3722df3bc6d9f97aaae83a39b1af12bb83590cad906442aca325074eb7393230aa3011cf80671ccf07025f7f6b98bb0fed9b07fafe0afde623086692d261b0279719648094b07be0f2f23726089815660a1cc7b668baa64a4ab5f97e7ffb651995dec16007c84b4b374381a8eaee9547a26c5070fbae758a4472f4b6fe23b91f4e60628efcb1177b288a8721ba0ad6e55f1c114c66843a80979a3e7aab9e05db7578f2ae5f901f17c6ca213e8bdfd329242dc4147f7785937c8fa169dc33eff59a4a0525125c2bebb45146a8a955eac49723269a1f321ba7fe92e0ac2196693a945d9ae42e07aaada952137a04991520822ca4c7956b18110470e1dd675385e8aa9b1af3c7bb4a66f74984305a3b967bd422706141cbb88cd590ecd3c3234a37aea3280881fda47eed218470f22a71c66f5628120effab40dfdb19c0fc26df9c7cc9a7ebbbe7abcdae1354f7898a8fe94cb602ce1c49cef974dcfde6b3720facbfacb759b4a4f1f67b1f9ac1e3b8f5e36c2da7a0e123a3759289e8848545b3d7c216c1b3213e92a8353e3c0f49e4863686c82f1484d99022fff7234e1e18b4a9ea10f5af7050a56c7e1472eedafdf1df532d753182aed05aa657f6b11cd9eb3f723f4696fc2b22fd3449d7f775512a576350feeb7ab0ba5e4eb865a3ec0ef74d94732d6f74ca5982a55df8243627d10224a48392037a88a6991f29248e447d790f6e457a2f41e4e1b631d5a0b09dd6669d3eed6802e48eb211114fecd5835e0958e34b2395c442da2b21a18b8bd69ed6005e1046d276b078fd088603023756fea98932c9e9724014585517bfdf9458688f30504093dc9f3eb06ae8f8543cc9c70c2bf2c8a815c479e2af15ae95c62d9306cc5947bef750941b826d52fa16e99f147efc2708fef2ab77f108541d4054a072c910bfbd1f25b5b19bd00e71fa0b1d50eb48c3c400b98315361d2ce7337ebfc6b2c65e69179bf0227792f1ea3f1787be148d7cf9cefa079d2700e1a0b2218eacc2b0414472b6667029ffd51a2f7178b7c6defb9d912be3e9d5da20adc2f3576aa5c093f3ae4bf11de4d7a4c23c03477b1753e32323914f70bb5db503626ea2a6d382c4f2b4d46070579ab1d4a09271b1a36300c52dd0420458baf841bf48f52c7f7d6a56b06c416c0ccec221f41133339a423f4e7d235aca11828b9c1757d82a4e51c735018444843a327e12657c0304a92317fbdd439688359b4233eab79eea7c8d339460a19a09cf82d9d1e0fedc362ed4db4563753eb6a0f2607c6cdc58f63c900b27b33ed28691b2057afdddd1691ab5cca769ecd4c905925a9800e457d453b9640d92f92e5f121cd09ef7df3e6b7d0c7b035a0d160fbc3976aadf2384b465b56fa09d438d9186ac86265389e3a46d76d280d61aeba5ac3849b9a065f740e7da63d42eb32bdb0c24f839626cde675f5431e4991bc9058fd2b2a2b41b5674f048d691f37d37a6676d7a8eefa2e0e1ed6a7ff014b209a9484e1003fef7f5c1af8fddb07f8c1efb69fba606380cdc695aeef135b033119e653005e9f2f735d8b72d46bad724bd79f43511cf1a9067466fc8800919e33a755adae31ce9cb1a41f11125fc8a8f55a7d72170c691f4108135a023f7d63bcdbbaa5a0eaf70b6fe3a4775a751f5db73463ca3f497d26a86e229057a7e67c897279d509299d3656c01ba5a48a946a89d3eb1fde79662c7f083c61c6279d20bdbde75c0b297cc8ae50ac5c5cb7254ef29987d0e348c937f3702b18dbd6d9248bb7f9adacac77af4fcadb52c33f1a58ccc8675bbaa43c4beb6e289aa9e638eb2c862f8390c2bb72232912dbebe487f893d419881bcf1b93bd96b026d41a48bfb1a5fa7480d2cb07d4ea3922eaff1a67b2232a81d693f7477afbca0aa2c6fdc6375f3d58aa969fa8f768229eee1a080a151f5760af241ec39724d2b9a51694b279478d7a939733dbc373bc934ba35dd795492100cae84af5a7dbda5f2d653cccc94ad61d0632f0e86218ffea0f7d46318a8d98a6d7b03c1a3ea997c86c425744fa684c9c7400befab94d433f13b7c02ab4dd15a1c63f716d66a1625d15626ecdc30d2daf331d24e00b16d11f9b0c31a6c15aa614f919395a8c113dfa00a2ee792a5c98add8ba068ec767393bcb571ab64ce4c319f55c7a44c5e166281d49cde7955d119d054aa271c92099cedb8315cbd11db7fc9d7030af68db09da8c219559599f97b0e2b9c143ef03f20710ddee8188da10c2d6f61b59421bb1965ae860c9120cf6bf1d609a56cb89696037f5b22083f8218cdc30cd5d8f7d6d75ad27bbb49a7e0c728aca75d43ae6395022c45e683cdfce5513828151e9e24a64824cfe7e7229ce02010ad7ba51c2d4c82a356dfeac7fda808d79c3ceaef7b7df0d5a70775b60e0a8f566efaf67ca2c6c3409c4932c89ab9da975a9c56f2049cb3fa545f3d21a7ab3e384cc330175c284acde0b6418408f44ab9c2c65f82e70e34f187fee828bf056fff024993e2088986f1ff0a5bd8e26d7f745e0beece9f790d3b1c39438c6b9dc438282d114e1871ab2a1a447bb806cf0066b772179f5925fe678a3d389b879b3160a48ef0005375691a16087f2e1608af9abf1b4c41a1cddedea027a397277bd6f4ea55b241d6e84d565412d817968b15349bc75b4f414035660d0deb6a37bb24f87b2e0869249595a35204f88b4061841a66e237aeb1d1d7a6b74001e37545f37de8a563c23153553aca4b0a1acbb94a6084242a61bcd879f27fba54de9d885272d12cb26d196a5f905549586a2d18fdd143a76c44a83c182c8cc3deaa9f43f34dd516d492bb3857e9d8ceb3cf31b45ac2e8a641edbc4efe9d99ad4aeee6d9577ac749e8ee81870508559fa7c2b22d8073c0a6342d5f8f4dab664fb0dfa2aaad8b6309a0c20190b48a3dc88614e68800bc4eff972773e9c8d116f7754e93fa01d2b5b72485b052d5c182f652e3fdd62dc4f64c5003dff3809802a9", 0x1000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, <r1=>0x0})
r2 = gettid()
r3 = socket$netlink(0x10, 0x3, 0xb)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001540)=ANY=[@ANYBLOB="48000000d48844743ca42e8756d0d9aa685d121091da90f07b1b63f4b5f838035d27d1bff14fb052c4073d8dc36e463ff1557d84754897efb0f3b6b239636c715cac0fca56b5cc4283ee6db722"], 0x48}], 0x1}, 0x0)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)=<r4=>0x0)
r5 = gettid()
tkill(r5, 0x34)
r6 = gettid()
tkill(r6, 0x34)
r7 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x80000, 0x0)
r8 = socket$inet6(0xa, 0x5, 0x0)
r9 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x82, &(0x7f0000000000)={r10}, 0x8)
wait4(0xffffffffffffffff, 0x0, 0x1, 0x0)
clone3(&(0x7f00000003c0)={0x1020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0xc}, &(0x7f0000000440)=""/254, 0xfe, &(0x7f00000001c0)=""/104, &(0x7f0000000340)=[r1, r2, r4, r5, r6], 0x5, {r7}}, 0x58)

00:21:17 executing program 5:
r0 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCREVOKE(r0, 0x80004507, 0x0)

00:21:17 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:17 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x6, @fixed}, 0xe)

00:21:17 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1)

00:21:17 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:17 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000001300)='trusted.overlay.nlink\x00', &(0x7f0000001340)={'L+', 0x6}, 0x16, 0x1)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0)

00:21:17 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:17 executing program 5:
r0 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCREVOKE(r0, 0x80004507, 0x0)

00:21:17 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x100, 0x0)
openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:21:17 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(r0, 0x5423, 0x0)

00:21:18 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:19 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000001300)='trusted.overlay.nlink\x00', &(0x7f0000001340)={'L+', 0x6}, 0x16, 0x1)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0)

00:21:19 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x0, 0x2}, 0xe)

00:21:19 executing program 5:
syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x80004507, 0x0)

00:21:19 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:19 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(r0, 0x5423, 0x0)

00:21:19 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
dup2(r0, r0)
r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r4}, 0x0)
io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:19 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/igmp6\x00')
fchdir(r2)
ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0)

00:21:19 executing program 5:
syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x80004507, 0x0)

00:21:19 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:19 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000001300)='trusted.overlay.nlink\x00', &(0x7f0000001340)={'L+', 0x6}, 0x16, 0x1)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)

00:21:19 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(r0, 0x5423, 0x0)

00:21:20 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
dup2(r0, r0)
r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r4}, 0x0)
io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:20 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000040)={0x9, {{0x2, 0x4e22, @broadcast}}, 0x0, 0x5, [{{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}}, {{0x2, 0x4e21, @rand_addr=0x64010101}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}, {{0x2, 0x4e21, @loopback}}]}, 0x30c)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @fixed, 0x0, 0x2}, 0xe)

00:21:20 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:20 executing program 5:
syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x80004507, 0x0)

00:21:20 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000))

00:21:21 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
dup2(r0, r0)
r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r4}, 0x0)
io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:21 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r2=>0x0})
ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000040)={r2, 0x2a})
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:21:21 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:21 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000001300)='trusted.overlay.nlink\x00', &(0x7f0000001340)={'L+', 0x6}, 0x16, 0x1)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0)

00:21:21 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc29c, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "92ac5802"}]}}, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

00:21:21 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000001300)='trusted.overlay.nlink\x00', &(0x7f0000001340)={'L+', 0x6}, 0x16, 0x1)
pipe(0x0)

00:21:21 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:22 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
delete_module(&(0x7f0000000000)='\x00', 0x800)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10, 0x0, 0x3ff})
ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000040))

00:21:22 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}], 0x1}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

[  466.366471][    T5] usb 5-1: new high-speed USB device number 2 using dummy_hcd
00:21:23 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21}, 0xe)
uname(&(0x7f0000000040)=""/116)

[  466.731061][    T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  466.742755][    T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  466.753305][    T5] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.40
[  466.763025][    T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
00:21:23 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:23 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000001300)='trusted.overlay.nlink\x00', &(0x7f0000001340)={'L+', 0x6}, 0x16, 0x1)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0)

[  467.050977][    T5] usb 5-1: config 0 descriptor??
00:21:23 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000001300)='trusted.overlay.nlink\x00', &(0x7f0000001340)={'L+', 0x6}, 0x16, 0x1)
pipe(0x0)

[  467.390427][    T5] usbhid 5-1:0.0: can't add hid device: -71
[  467.397101][    T5] usbhid: probe of 5-1:0.0 failed with error -71
[  467.500598][    T5] usb 5-1: USB disconnect, device number 2
00:21:24 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}], 0x1}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:24 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@remote, @in6=@remote}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r2)
clock_gettime(0x0, &(0x7f0000000140)={<r3=>0x0, <r4=>0x0})
r5 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r5)
ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc04c5609, &(0x7f0000000180)={0x10000, 0x2, 0x4, 0x2, 0x2, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x80, 0x80, 0x7, 'vQ4c'}, 0x42, 0x2, @fd=<r6=>0xffffffffffffffff, 0x1f})
r7 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r7)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc04c565d, &(0x7f0000000200)={0x847c, 0x2, 0x4, 0x100, 0x9f75, {r3, r4/1000+10000}, {0x5, 0x0, 0x81, 0xff, 0x36, 0x0, "f8e571da"}, 0x81, 0x1, @fd=r6, 0x200, 0x0, r7})
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:21:24 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000001300)='trusted.overlay.nlink\x00', &(0x7f0000001340)={'L+', 0x6}, 0x16, 0x1)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0)

[  468.210192][    T5] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  468.581350][    T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  468.592836][    T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  468.603060][    T5] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.40
[  468.612483][    T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.853072][    T5] usb 5-1: config 0 descriptor??
00:21:25 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc29c, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "92ac5802"}]}}, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

00:21:25 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:25 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000001300)='trusted.overlay.nlink\x00', &(0x7f0000001340)={'L+', 0x6}, 0x16, 0x1)
pipe(0x0)

00:21:25 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x10000, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2b}}, 0xffff}}}, &(0x7f0000000240)=0x84)
r2 = gettid()
tkill(r2, 0x34)
r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/sockstat\x00')
fchdir(r3)
r4 = openat$cgroup_devices(r3, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0)
flistxattr(r4, &(0x7f0000000100)=""/31, 0x1f)
r5 = gettid()
tkill(r5, 0x34)
ptrace$getregs(0xc, r5, 0x7fffffff, &(0x7f0000000000)=""/173)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:21:25 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}], 0x1}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

[  469.475991][    T5] usb 5-1: can't set config #0, error -71
[  469.501709][    T5] usb 5-1: USB disconnect, device number 3
00:21:26 executing program 3:
pkey_alloc(0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r1 = socket$netlink(0x10, 0x3, 0x7)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
sendfile64(r0, r1, &(0x7f0000000000)=0xfffffffffffffffb, 0x1ff)
r2 = shmget$private(0x0, 0x2000, 0x10, &(0x7f000000b000/0x2000)=nil)
r3 = openat$autofs(0xffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x84480, 0x0)
connect$qrtr(r3, &(0x7f0000000080)={0x2a, 0xffffffff, 0x3fff}, 0xc)
shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000)
shmctl$SHM_LOCK(r2, 0xb)
shmctl$SHM_UNLOCK(r2, 0xc)
shmctl$SHM_LOCK(r2, 0xb)
shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000180)=""/25)
shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000380)=""/4096)

00:21:27 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:27 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000001300)='trusted.overlay.nlink\x00', &(0x7f0000001340)={'L+', 0x6}, 0x16, 0x1)

00:21:27 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {0x0}], 0x2}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:27 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000001300)='trusted.overlay.nlink\x00', &(0x7f0000001340)={'L+', 0x6}, 0x16, 0x1)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)

[  470.652498][    T5] usb 5-1: new high-speed USB device number 4 using dummy_hcd
00:21:27 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x21, @fixed}, 0xe)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x3e)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="82df4c336b577a6e75f48ec17217bf86e3b885c385efc851687d03"], 0x5ac)
r3 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3], 0x8)
connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x3e)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10)
write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="82df4c336b577a6e75f48ec17217bf86e3b885c385efc851687d03"], 0x5ac)
recvfrom$inet6(r1, &(0x7f0000000340)=""/4096, 0x1000, 0x2001, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x7f}, 0x1c)

[  471.041410][    T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  471.052947][    T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  471.063174][    T5] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.40
[  471.072533][    T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.445502][   T17] Bluetooth: hci2: command 0x0406 tx timeout
00:21:29 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

[  472.644235][    T5] usb 5-1: config 0 descriptor??
00:21:29 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc29c, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "92ac5802"}]}}, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

00:21:29 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:29 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {0x0}], 0x2}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:29 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
r2 = dup3(r1, r0, 0x0)
ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000000)=""/188)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:21:29 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000001300)='trusted.overlay.nlink\x00', &(0x7f0000001340)={'L+', 0x6}, 0x16, 0x1)
pipe(0x0)

[  473.110423][    T5] usbhid 5-1:0.0: can't add hid device: -71
[  473.116871][    T5] usbhid: probe of 5-1:0.0 failed with error -71
[  473.192190][    T5] usb 5-1: USB disconnect, device number 4
00:21:30 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:30 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:30 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r1 = accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0xc0000)
getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f00000000c0)=0xfffffffc, &(0x7f0000000100)=0x4)

00:21:31 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

[  474.419878][    T5] usb 5-1: new high-speed USB device number 5 using dummy_hcd
00:21:31 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000001300)='trusted.overlay.nlink\x00', &(0x7f0000001340)={'L+', 0x6}, 0x16, 0x1)
pipe(0x0)

00:21:31 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

[  474.781070][    T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  474.792513][    T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  474.802754][    T5] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.40
[  474.812180][    T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
00:21:32 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00')
sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x34, r3, 0xc91add0bf88807dd, 0x0, 0x0, {0x2e}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1b4, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000085}, 0x20000000)
r4 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r4)
ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f0000000000)={0x5, 0x797f, 0x7ff, 0x1, 0x1})

[  475.812265][    T5] usb 5-1: config 0 descriptor??
[  476.149891][    T5] usbhid 5-1:0.0: can't add hid device: -71
[  476.156485][    T5] usbhid: probe of 5-1:0.0 failed with error -71
[  476.231238][    T5] usb 5-1: USB disconnect, device number 5
[  476.805757][ T8707] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  477.204048][ T8707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  477.215672][ T8707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  477.225844][ T8707] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.40
[  477.235231][ T8707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.323441][ T8707] usb 5-1: config 0 descriptor??
00:21:34 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0xe8}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
getpgid(0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]})
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0xb})
ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)

00:21:34 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:34 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000001300)='trusted.overlay.nlink\x00', &(0x7f0000001340)={'L+', 0x6}, 0x16, 0x1)
pipe(0x0)

00:21:34 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:34 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:34 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x4}, 0xe)
openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0xa84d720eecc3355b, 0x0)

[  477.821654][ T8707] usbhid 5-1:0.0: can't add hid device: -71
[  477.827999][ T8707] usbhid: probe of 5-1:0.0 failed with error -71
[  477.911078][ T8707] usb 5-1: USB disconnect, device number 6
00:21:35 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:35 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x3, 0x2}, 0xe)

00:21:35 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:35 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:35 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:21:35 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000001300)='trusted.overlay.nlink\x00', &(0x7f0000001340)={'L+', 0x6}, 0x16, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)

00:21:36 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:36 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed, 0x3}, 0xe)
r1 = openat$cachefiles(0xffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x300, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x204, 0x8, 0x1ffffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf)
perf_event_open(0x0, 0x0, 0xd, r2, 0x0)
perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x70, 0xff, 0x2, 0x40, 0x20, 0x0, 0xdd9, 0xf2020, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5a1, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x112, 0x6, 0x20, 0x7, 0x1a6, 0x6, 0x8}, r1, 0xe, r2, 0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x10001, 0x8]}, 0x8, 0x80800)
ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f0000000040))

00:21:36 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:36 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:37 executing program 4:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
ftruncate(r1, 0x8200)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9)

00:21:37 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:37 executing program 3:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000000c0), 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000000040), &(0x7f0000000080)=0x4)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:21:37 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:37 executing program 4:
pipe(0x0)
r0 = syz_io_uring_setup(0x6b54, &(0x7f0000000580)={0x0, 0x0, 0x2}, &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_enter(r0, 0x0, 0x4408, 0x1, &(0x7f0000000180)={[0x8001]}, 0x8)

00:21:37 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:37 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})
socket$inet_udp(0x2, 0x2, 0x0)

00:21:37 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:38 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x2, @none}, 0xe)

00:21:38 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:39 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:39 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000040)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:39 executing program 4:

00:21:39 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})
socket$inet_udp(0x2, 0x2, 0x0)

00:21:40 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:40 executing program 4:

00:21:40 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r0)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x14, 0x8, 0x121, &(0x7f0000000340)="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"})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:21:40 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:40 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})
socket$inet_udp(0x2, 0x2, 0x0)

00:21:40 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000040)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:41 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:41 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000040)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:41 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:41 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed={[], 0x10}}, 0xe)

00:21:41 executing program 4:

00:21:41 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
socket$inet_udp(0x2, 0x2, 0x0)

00:21:41 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:41 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:42 executing program 4:

00:21:42 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:21:42 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:42 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
socket$inet_udp(0x2, 0x2, 0x0)

00:21:42 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:42 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:42 executing program 4:

00:21:42 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x21, @fixed}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r1)
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/210, 0xd2}, {&(0x7f00000001c0)=""/114, 0x72}, {&(0x7f0000000240)=""/67, 0x43}, {&(0x7f00000002c0)=""/49, 0x31}, {&(0x7f0000000300)=""/76, 0x4c}, {&(0x7f0000000380)=""/187, 0xbb}, {&(0x7f0000000540)=""/201, 0xc9}], 0x7, 0xfffffffd, 0x1000, 0x16)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000040)="d7d3fe493d741b232d1b926404268993c1ae8c3c1afe9b12e1d49a78eac32b97e027c051e7adc1864a0dc337825dd7aeaa7ffc5c63311b907191f92950ec", 0x3e)
syz_open_dev$swradio(&(0x7f0000000480)='/dev/swradio#\x00', 0x1, 0x2)

00:21:43 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:43 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:43 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:43 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
socket$inet_udp(0x2, 0x2, 0x0)

00:21:44 executing program 4:

00:21:44 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00')
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd4, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xbd8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x100}, 0x3000c400)

00:21:44 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:44 executing program 4:

00:21:44 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:45 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)

00:21:45 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:45 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:45 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:45 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

00:21:45 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x21, @fixed}, 0xe)
r1 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0)
ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000040)=""/64)

00:21:45 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
socket$inet_udp(0x2, 0x2, 0x0)

00:21:45 executing program 4:

00:21:46 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:46 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:46 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, 0x0, 0x0)

00:21:46 executing program 3:

00:21:46 executing program 4:

00:21:46 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
socket$inet_udp(0x2, 0x2, 0x0)

00:21:46 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:46 executing program 4:

00:21:46 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, 0x0, 0x0)

00:21:47 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:47 executing program 3:

00:21:47 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
socket$inet_udp(0x2, 0x2, 0x0)

00:21:47 executing program 4:

00:21:47 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:47 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, 0x0, 0x0)

00:21:47 executing program 3:

00:21:47 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:47 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
socket$inet_udp(0x2, 0x2, 0x0)

00:21:48 executing program 4:

00:21:48 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040), 0x0)

00:21:48 executing program 3:

00:21:48 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:48 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:48 executing program 4:

00:21:48 executing program 1:
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:48 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
socket$inet_udp(0x2, 0x2, 0x0)

00:21:48 executing program 3:

00:21:48 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040), 0x0)

00:21:49 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:49 executing program 4:

[  492.730207][   T17] Bluetooth: hci3: command 0x0406 tx timeout
00:21:49 executing program 3:

00:21:49 executing program 1:
r0 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:49 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040), 0x0)

00:21:50 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:50 executing program 1:
socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:50 executing program 3:

00:21:50 executing program 4:

00:21:50 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
socket$inet_udp(0x2, 0x2, 0x0)

00:21:50 executing program 2:

00:21:50 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:51 executing program 1:
socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:51 executing program 4:

00:21:51 executing program 2:

00:21:51 executing program 3:

00:21:51 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
socket$inet_udp(0x2, 0x2, 0x0)

00:21:52 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:52 executing program 4:

00:21:52 executing program 1:
socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$usbfs(0x0, 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:52 executing program 3:

00:21:52 executing program 2:

00:21:53 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:53 executing program 3:

00:21:53 executing program 2:

00:21:53 executing program 4:

00:21:53 executing program 1:
socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$usbfs(0x0, 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:53 executing program 2:

00:21:53 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
socket$inet_udp(0x2, 0x2, 0x0)

00:21:53 executing program 4:

00:21:53 executing program 3:

00:21:53 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:54 executing program 1:
socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$usbfs(0x0, 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:54 executing program 2:

00:21:54 executing program 3:
syz_emit_ethernet(0xbe, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @broadcast=0xe0000001}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6f09002b7168378e0f82477fac0600e745edc17c3200", "a967527858e47f4e0c92629775a3cca55301abe491295d1509010020ced8af8be413b8b4343174d4780e817ba7310ac2", "f731a1d9f9be474794588eab658fbe595c2a1610ece33d214735aabf", {"77cc5a1a138121fb0c010e98bfebcead", "91116aee49b88ae55224fdfb93da9426"}}}}}}}, 0x0)

00:21:54 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

00:21:54 executing program 1:
socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:54 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r0=>0x0, &(0x7f0000000040)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:54 executing program 3:
syz_emit_ethernet(0xbe, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @broadcast=0xe0000001}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6f09002b7168378e0f82477fac0600e745edc17c3200", "a967527858e47f4e0c92629775a3cca55301abe491295d1509010020ced8af8be413b8b4343174d4780e817ba7310ac2", "f731a1d9f9be474794588eab658fbe595c2a1610ece33d214735aabf", {"77cc5a1a138121fb0c010e98bfebcead", "91116aee49b88ae55224fdfb93da9426"}}}}}}}, 0x0)

00:21:54 executing program 2:
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10')
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0xfff, 0x2})

00:21:55 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
socket$inet_udp(0x2, 0x2, 0x0)

00:21:55 executing program 1:
socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:55 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0)
ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0)

00:21:55 executing program 3:
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000040)=ANY=[], 0x1)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={<r2=>0x0, @local, @local}, &(0x7f0000000000)=0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8, 'tbf\x00'}, {0x4}}]}, 0x30}}, 0x0)

00:21:55 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r0=>0x0, &(0x7f0000000040)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:55 executing program 2:
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10')
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0)
fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0)

00:21:55 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000001ac1414aa0000000011"], 0x14)

00:21:55 executing program 1:
socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:55 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x3c4)
setuid(r1)

00:21:55 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r0=>0x0, &(0x7f0000000040)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:21:56 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = dup2(r0, r1)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6f0900000000000000b6c19bd92b7168378e0fdf6f477fac11a1e745edc17c32", "a967527858e47f4e0c92629775a3cca55301abe491296a1509010020ced8af8be413ceb4553174d4780e817ba7310ac2", "f731a1d9f9be474794588eab658fbe595c2a1610ece33d214735aabf", {"77cc5a1a138121fb0c010e98bfebcead", "91116aee49b88ae55224fdfb93da9426"}}}}}}}, 0x0)

00:21:56 executing program 2:
syz_emit_ethernet(0xbe, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6f59ba5f4a67033ddeb4c19bd92b7168378e0fdf6f477fac11a1e745edc17c32", "a967527858e47f4e0c92629775a3cca55301abe491296a1509010020ced8af8be413ceb4553174d4780e817ba7310ac2", "f731a1d9f9be474794588eab658fbe595c2a1610ece33d214735aabf", {"77cc5a1a138121fb0c010e98bfebcead", "91116aee49b88ae55224fdfb93da9426"}}}}}}}, 0x0)

00:21:56 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
socket$inet_udp(0x2, 0x2, 0x0)

00:21:56 executing program 1:
socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x0)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:56 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

00:21:56 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x34c, 0xf4, 0x0, 0x1bc, 0x0, 0xf4, 0x284, 0x284, 0x284, 0x284, 0x284, 0x4, 0x0, {[{{@ipv6={@loopback, @ipv4={[], [], @local}, [], [], 'macvtap0\x00', 'caif0\x00'}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@unspec=@realm={{0x2c, 'realm\x00'}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x1bc}}, {{@ipv6={@loopback, @mcast2}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3a8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

00:21:56 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x2}, 0x1c)
listen(r0, 0xfffffffe)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00db94", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0)

00:21:56 executing program 2:
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @remote, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

[  500.174898][T12897] x_tables: duplicate underflow at hook 2
00:21:56 executing program 1:
socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x0)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

[  500.212268][T12897] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
00:21:56 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  500.388499][T12904] x_tables: duplicate underflow at hook 2
00:21:57 executing program 4:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
sendfile(r0, r1, &(0x7f0000000240)=0x202, 0x4000000000dc)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0)

00:21:57 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = dup2(r0, r1)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0)

00:21:57 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000340), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

00:21:57 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x2}, 0x1c)
syz_emit_ethernet(0xfef2, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x2c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@sack={0x5, 0x16}]}}}}}}}}, 0x0)

00:21:57 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
socket$inet_udp(0x2, 0x2, 0x0)

00:21:57 executing program 1:
socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x0)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:57 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c)
chroot(0x0)
sendto$inet6(r0, 0x0, 0x0, 0x200488d5, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioprio_set$uid(0x0, 0x0, 0x0)
setfsgid(0x0)
r1 = dup2(r0, r0)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000))

00:21:57 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601030000000000000000edff00000500010006"], 0x1c}}, 0x0)

00:21:58 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

00:21:58 executing program 2:
r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
write(r0, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
getsockopt$ax25_int(r1, 0x101, 0x8, 0x0, &(0x7f0000000040))

00:21:58 executing program 1:
socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:58 executing program 3:
r0 = socket$inet(0x2, 0x6000000000000003, 0x6)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

00:21:59 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
socket$inet_udp(0x2, 0x2, 0x0)

00:21:59 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340))

00:21:59 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = dup2(r0, r1)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0)

00:21:59 executing program 1:
socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:21:59 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010005fba000000000000000024000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0)
write$tun(r0, &(0x7f00000019c0)={@void, @val={0x0, 0x0, 0x0, 0x0, 0x500}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private}, @timestamp={0x11, 0xe0}}}}, 0xfdef)

00:21:59 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
getdents(r0, &(0x7f0000002240)=""/4087, 0xff7)
fchmodat(r2, &(0x7f0000000080)='./file0\x00', 0x0)

00:22:00 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
socket$inet_udp(0x2, 0x2, 0x0)

[  503.688011][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  503.697059][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
00:22:00 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x1, 0x80, 0x4, 0xf}, 0x40)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38)

00:22:00 executing program 1:
socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x0, 0x0})

00:22:00 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "e0ca47f50000e8ff", "873c3187055a389246681204ab97f0b8", "73d389bd", "be821be46ff83afa"}, 0x28)

[  504.075967][T12968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  504.224108][T12970] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
00:22:00 executing program 2:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00')
setns(r0, 0x0)

00:22:00 executing program 5:
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
socket$inet_udp(0x2, 0x2, 0x0)

[  504.313748][T12970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
00:22:01 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, @in={0x2, 0x0, @remote}], 0x20)

00:22:01 executing program 1:
socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, 0x0)

00:22:01 executing program 0:
r0 = socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0xa, 0x2}, 0x200001cc, &(0x7f00000002c0)={0x0}}, 0x0)

00:22:01 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460200000000000000000000000000000000000000000000000000000040000000000600002c7b"], 0x78)

00:22:01 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mreqn(r0, 0x0, 0x50, 0x0, &(0x7f0000000000))

00:22:01 executing program 5:
r0 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
socket$inet_udp(0x2, 0x2, 0x0)

00:22:01 executing program 0:
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0xb)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_sctp(0x2, 0x0, 0x84)

00:22:01 executing program 4:
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/112, 0x1e}], 0x1}, 0x40000060)

00:22:01 executing program 1:
socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48001)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, 0x0)

00:22:02 executing program 3:
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0xa, 0x2}, 0x200001cc, &(0x7f00000002c0)={0x0}}, 0x0)

00:22:02 executing program 2:
r0 = socket$inet6(0x2, 0x3, 0x6)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x541b, 0x0)

[  505.587385][ T8709] =====================================================
[  505.594480][ T8709] BUG: KMSAN: uninit-value in hci_event_packet+0x1e53/0x39d30
[  505.601935][ T8709] CPU: 1 PID: 8709 Comm: kworker/u5:1 Not tainted 5.8.0-rc5-syzkaller #0
[  505.610329][ T8709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  505.620400][ T8709] Workqueue: hci0 hci_rx_work
[  505.625062][ T8709] Call Trace:
[  505.628347][ T8709]  dump_stack+0x21c/0x280
[  505.632673][ T8709]  kmsan_report+0xf7/0x1e0
[  505.637082][ T8709]  __msan_warning+0x58/0xa0
[  505.641579][ T8709]  hci_event_packet+0x1e53/0x39d30
[  505.646682][ T8709]  ? kmsan_get_metadata+0x116/0x180
[  505.651871][ T8709]  ? kmsan_get_metadata+0x116/0x180
[  505.657059][ T8709]  ? kmsan_set_origin_checked+0x95/0xf0
[  505.662594][ T8709]  ? kmsan_get_metadata+0x116/0x180
[  505.667800][ T8709]  ? kmsan_get_metadata+0x116/0x180
[  505.672994][ T8709]  ? kmsan_report+0x1a3/0x1e0
[  505.677665][ T8709]  ? kmsan_get_metadata+0x116/0x180
[  505.682856][ T8709]  hci_rx_work+0x6df/0xd30
[  505.687267][ T8709]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  505.693082][ T8709]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  505.699158][ T8709]  ? hci_alloc_dev+0x2680/0x2680
[  505.704184][ T8709]  process_one_work+0x1688/0x2140
[  505.709276][ T8709]  worker_thread+0x10bc/0x2730
[  505.714078][ T8709]  ? kmsan_get_metadata+0x116/0x180
[  505.719311][ T8709]  ? kmsan_get_metadata+0x116/0x180
[  505.724516][ T8709]  kthread+0x551/0x590
[  505.728580][ T8709]  ? process_one_work+0x2140/0x2140
[  505.733770][ T8709]  ? kthread_blkcg+0x110/0x110
[  505.738526][ T8709]  ret_from_fork+0x1f/0x30
[  505.742949][ T8709] 
[  505.745259][ T8709] Uninit was created at:
[  505.749495][ T8709]  kmsan_internal_poison_shadow+0x66/0xd0
[  505.755208][ T8709]  kmsan_slab_alloc+0x8a/0xe0
[  505.759946][ T8709]  __kmalloc_node_track_caller+0xeab/0x12e0
[  505.765827][ T8709]  __alloc_skb+0x35f/0xb30
[  505.770279][ T8709]  vhci_write+0x18a/0x890
[  505.774659][ T8709]  vfs_write+0xf9a/0x17c0
[  505.778993][ T8709]  ksys_write+0x275/0x500
[  505.783318][ T8709]  __se_sys_write+0x92/0xb0
[  505.787814][ T8709]  __ia32_sys_write+0x4a/0x70
[  505.792486][ T8709]  __do_fast_syscall_32+0x2af/0x480
[  505.797676][ T8709]  do_fast_syscall_32+0x6b/0xd0
[  505.802516][ T8709]  do_SYSENTER_32+0x73/0x90
[  505.807007][ T8709]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  505.813312][ T8709] =====================================================
[  505.820227][ T8709] Disabling lock debugging due to kernel taint
[  505.826370][ T8709] Kernel panic - not syncing: panic_on_warn set ...
[  505.832950][ T8709] CPU: 1 PID: 8709 Comm: kworker/u5:1 Tainted: G    B             5.8.0-rc5-syzkaller #0
[  505.842745][ T8709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  505.852814][ T8709] Workqueue: hci0 hci_rx_work
[  505.857474][ T8709] Call Trace:
[  505.860756][ T8709]  dump_stack+0x21c/0x280
[  505.865160][ T8709]  panic+0x4d7/0xef7
[  505.869059][ T8709]  ? add_taint+0x17c/0x210
[  505.873470][ T8709]  kmsan_report+0x1df/0x1e0
[  505.877967][ T8709]  __msan_warning+0x58/0xa0
[  505.882464][ T8709]  hci_event_packet+0x1e53/0x39d30
[  505.887572][ T8709]  ? kmsan_get_metadata+0x116/0x180
[  505.892760][ T8709]  ? kmsan_get_metadata+0x116/0x180
[  505.897948][ T8709]  ? kmsan_set_origin_checked+0x95/0xf0
[  505.903502][ T8709]  ? kmsan_get_metadata+0x116/0x180
[  505.908692][ T8709]  ? kmsan_get_metadata+0x116/0x180
[  505.913882][ T8709]  ? kmsan_report+0x1a3/0x1e0
[  505.918574][ T8709]  ? kmsan_get_metadata+0x116/0x180
[  505.923764][ T8709]  hci_rx_work+0x6df/0xd30
[  505.928177][ T8709]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  505.933986][ T8709]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  505.940044][ T8709]  ? hci_alloc_dev+0x2680/0x2680
[  505.944974][ T8709]  process_one_work+0x1688/0x2140
[  505.950004][ T8709]  worker_thread+0x10bc/0x2730
[  505.954756][ T8709]  ? kmsan_get_metadata+0x116/0x180
[  505.959960][ T8709]  ? kmsan_get_metadata+0x116/0x180
[  505.965155][ T8709]  kthread+0x551/0x590
[  505.969217][ T8709]  ? process_one_work+0x2140/0x2140
[  505.974407][ T8709]  ? kthread_blkcg+0x110/0x110
[  505.979173][ T8709]  ret_from_fork+0x1f/0x30
[  505.984947][ T8709] Kernel Offset: disabled
[  505.989317][ T8709] Rebooting in 86400 seconds..